Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File:                     WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier:          nByTLrmIebXRQ80/oYRZvEy0WfenoSS+MfhJNhbb9PA=
Subject key identifier:   B3:9C:EA:9A:C1:BF:A4:6E:F1:16:74:EA:37:1C:60:0C:81:C4:97:00
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer:       /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial:       01A179CCBF6912152159BE1DAF2BC76617EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number:          09E5
Signing time:             Mon 26 Oct 2026 20:00:23 +0000
Manifest this update:     Mon 26 Oct 2026 20:00:23 +0000
Manifest next update:     Tue 27 Oct 2026 20:00:23 +0000
Files and hashes:         1: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: FZiENd6wagRG2pjuqSjAnO70Gu6NrZn8A0CAKzJCPD4=)
                          2: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (hash: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:cc:bf:69:12:15:21:59:be:1d:af:2b:c7:66:17:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
        Validity
            Not Before: Oct 26 20:00:23 2026 GMT
            Not After : Oct 27 20:00:23 2026 GMT
        Subject: CN=b39cea9ac1bfa46ef11674ea371c600c81c49700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:0f:5c:91:16:15:b8:83:34:df:57:f2:ae:
                    03:fc:96:84:ac:f7:78:6b:6e:12:c9:e4:8b:58:76:
                    c0:35:9c:b7:cc:32:e6:19:55:93:81:d7:58:cb:33:
                    36:71:15:97:9d:2c:ed:8b:bd:35:57:3e:1f:51:0c:
                    57:2b:5e:dd:b1:3d:c1:54:2e:93:1b:28:d2:d6:c3:
                    21:5b:26:82:a8:de:41:bf:81:7e:87:28:8c:64:af:
                    a4:e5:e6:ca:ef:16:da:5b:3e:85:af:4c:64:43:48:
                    a0:c3:bc:fc:f3:d9:18:3a:fc:41:26:f8:fc:70:03:
                    52:02:b3:b7:f0:9b:85:81:a9:1d:cd:37:10:06:a9:
                    d3:06:1a:20:fd:2f:65:63:53:f5:f6:5f:e9:52:c2:
                    3d:ef:1a:2b:5f:bd:d3:f7:7b:fa:2d:a1:8a:40:f7:
                    a5:79:8b:4a:e6:9f:03:8b:87:2d:ec:fc:3c:fb:c9:
                    05:f9:56:7c:5a:d6:5c:3f:3b:ee:20:19:e3:8f:e9:
                    7a:f0:5a:a9:cf:ca:08:2c:5b:43:75:73:2a:b3:9b:
                    94:0e:03:ec:1a:3e:44:1c:20:a0:7e:1d:f6:7c:e0:
                    88:79:c0:37:5a:78:de:70:aa:63:ac:c2:59:73:10:
                    7d:72:f7:98:5a:f5:b0:13:5c:20:1b:d1:ac:fa:d8:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9C:EA:9A:C1:BF:A4:6E:F1:16:74:EA:37:1C:60:0C:81:C4:97:00
            X509v3 Authority Key Identifier:
                keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:32:78:cd:4d:6f:4c:11:e5:44:f0:30:22:aa:60:80:ae:
         b8:66:4b:e6:d0:ba:e9:c9:58:80:31:3b:a8:e3:f4:15:73:fb:
         5a:99:37:20:ee:7a:bd:54:44:19:6f:39:37:7e:8f:37:ba:74:
         bf:24:4d:a4:be:b1:33:1c:41:c2:9f:94:7c:b5:c5:0b:2a:cf:
         b7:d9:01:92:cd:74:17:c7:38:8f:0b:54:ad:60:db:18:84:39:
         04:2b:1f:7c:0b:f7:3d:e2:2b:94:8d:6f:fe:cc:fa:ad:39:65:
         e8:f1:bb:1f:a5:97:0f:00:3a:ed:9d:5b:47:7a:46:47:2b:53:
         01:8b:d5:cf:c7:6f:d5:74:ff:bf:fb:15:80:32:d4:61:80:be:
         95:e9:d4:1b:e0:dd:d4:6f:96:3c:b4:ea:67:53:74:51:45:25:
         d2:70:b0:40:d3:86:1f:a3:99:73:57:dd:fa:b3:21:b2:17:e4:
         21:b2:40:02:0c:42:16:06:b2:db:e7:d9:a0:62:93:02:5b:3b:
         a6:99:c4:12:a3:09:38:89:be:e4:c0:21:c8:c9:5d:9b:5f:8a:
         ca:eb:28:b3:16:5c:33:bc:a3:b2:aa:c0:a8:ff:0f:d0:5f:e7:
         61:ba:2c:84:45:2b:84:5e:c5:34:1b:6b:79:81:20:51:dc:2c:
         be:9d:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:11 2026 by rpki-client