Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File:                     WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier:          o873cv/jQlY604Axws+HYMCQL4tihIfLX+5nNfoAdQQ=
Subject key identifier:   28:15:B9:68:A8:60:49:5B:C5:2E:2E:0D:BA:55:DE:6A:18:2A:85:EA
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer:       /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial:       01A0B651E0466D6B8B473ABEE42600A38F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number:          0D22
Signing time:             Fri 18 Sep 2026 21:00:13 +0000
Manifest this update:     Fri 18 Sep 2026 21:00:13 +0000
Manifest next update:     Sat 19 Sep 2026 21:00:13 +0000
Files and hashes:         1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=)
                          2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: blkVBU2iL6VSn60Eu8n0j12aLv9PQyCNSxu+y4uK+i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:51:e0:46:6d:6b:8b:47:3a:be:e4:26:00:a3:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
        Validity
            Not Before: Sep 18 21:00:13 2026 GMT
            Not After : Sep 19 21:00:13 2026 GMT
        Subject: CN=2815b968a860495bc52e2e0dba55de6a182a85ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:d0:52:16:ce:5f:4a:0b:5f:6c:8a:27:e6:
                    bd:6f:d2:3b:f7:c8:1a:24:20:ac:46:70:d7:5d:82:
                    39:25:ed:19:5c:d6:65:72:79:1c:f7:52:b3:48:77:
                    ec:7d:13:58:95:6f:54:6a:f2:07:be:27:23:66:27:
                    6b:74:8c:59:41:e7:6d:0b:ba:dd:3a:7f:29:07:8b:
                    bf:d2:74:7c:2d:08:c0:8d:82:86:2c:ff:1f:11:f3:
                    08:bc:c5:7a:c5:12:b0:5e:60:8d:2d:43:5f:d1:a3:
                    19:28:ca:03:fd:41:13:53:8d:58:61:b7:e2:1a:d9:
                    cc:44:0e:1c:db:db:5d:62:c8:c6:7b:2f:ce:90:e1:
                    9e:3d:fa:d3:c1:f1:2f:99:67:a8:03:5c:11:0a:ef:
                    8d:2e:92:05:79:93:55:93:f2:e6:40:37:0e:85:a2:
                    b1:2a:b6:df:95:1c:25:17:f5:55:1a:00:28:b7:5a:
                    34:8c:ec:9b:01:29:ea:5a:09:02:2d:a7:64:85:00:
                    fe:32:f8:dc:92:6d:c2:97:c6:9a:9c:f9:4b:0e:c2:
                    d8:26:a2:e0:bf:b1:11:01:d3:cf:05:9d:fe:a9:6e:
                    f7:e4:0f:0c:30:a1:33:ba:07:48:ab:74:1f:bf:70:
                    ed:93:6f:96:71:b1:50:fe:d1:f8:00:04:af:d1:77:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:15:B9:68:A8:60:49:5B:C5:2E:2E:0D:BA:55:DE:6A:18:2A:85:EA
            X509v3 Authority Key Identifier:
                keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:ee:fb:e4:83:4c:a5:39:23:f5:d9:cf:e0:7d:e9:8a:86:
         e6:fe:fd:47:a6:92:b9:bb:29:8a:d9:41:69:b3:bd:e6:80:fc:
         82:67:f4:b2:de:c6:20:22:4e:95:82:94:8b:d2:05:45:5c:b6:
         4e:20:f8:e2:98:f5:9e:0d:80:17:ba:45:d3:0d:25:54:e2:98:
         28:f2:e7:68:fb:9e:6f:39:da:0d:5e:c8:7b:2e:75:78:ab:9c:
         f8:47:68:9f:e9:63:54:dc:74:d5:37:a9:1a:63:20:4f:c1:65:
         f6:cd:39:6f:66:c8:b6:4e:ad:a2:5a:e0:01:46:d1:05:6e:2d:
         af:2f:58:cf:ca:5f:71:83:44:50:d2:9b:98:5c:e2:06:35:ae:
         56:5f:88:74:36:ca:36:e3:2f:27:0a:6f:a7:a9:e6:18:88:e6:
         7b:5d:b7:c6:3c:be:42:76:f1:74:d3:84:e7:7d:2a:5a:fa:4a:
         93:09:1d:7b:83:7f:5b:c5:63:85:58:31:30:8e:ef:2d:f2:c8:
         6b:71:6d:4b:14:3e:00:25:ce:99:dd:fd:66:2e:c8:e4:10:ae:
         49:99:e4:19:43:81:f0:06:fd:68:c6:8d:48:7f:14:b1:76:a3:
         03:36:06:14:c9:8f:b4:df:74:b9:21:13:71:36:9e:ee:d2:a7:
         b5:6e:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:38:43 2026 by rpki-client