Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
File:                     WBTburY-kRfQsCy6tWY55v0NQNk.mft (raw, json)
Hash identifier:          0lwVj6vqXyuZOOW21RtDimauyuhzJpeWO0YuUJhZjrc=
Subject key identifier:   19:20:F6:27:23:7E:1E:EE:3C:7B:43:44:3D:3C:2E:82:9E:BC:CB:8A
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Certificate issuer:       /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial:       01A03DBB4CECD2CDE3F9DF266478271449C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
Manifest number:          1A25
Signing time:             Wed 26 Aug 2026 11:01:20 +0000
Manifest this update:     Wed 26 Aug 2026 11:01:20 +0000
Manifest next update:     Thu 27 Aug 2026 11:01:20 +0000
Files and hashes:         1: 042xhE8LSLyQ27uGyk1_G--PcdE.roa (hash: mYCIynBAj9T1Ad1P08+QL+CKh1MQS0MEgpptbSPZq+o=)
                          2: WBTburY-kRfQsCy6tWY55v0NQNk.crl (hash: JAli68UdS/8j9paLjnudwG3BRGgpnL+m3kWZDeGHHtY=)
                          3: cd571qC5Gh-s6-ij9uvMCJgUNAw.roa (hash: WiOcaJIwRlhY8Y8YY2qhOSR4obgPpcg3+kkGw7FgGjM=)
                          4: kfPqHKxGz6wYPw64blmcJam1kr4.roa (hash: cy7z9oIdDHZSV98B3pHrJ6kEzhCC/yM5qdI8yfk1XNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 11:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:bb:4c:ec:d2:cd:e3:f9:df:26:64:78:27:14:49:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
        Validity
            Not Before: Aug 26 11:01:20 2026 GMT
            Not After : Aug 27 11:01:20 2026 GMT
        Subject: CN=1920f627237e1eee3c7b43443d3c2e829ebccb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:ad:8a:b1:d5:e3:a6:84:40:4a:0f:8d:db:
                    40:2f:67:68:ac:36:f1:2e:31:99:8f:12:80:93:8a:
                    a3:6f:a4:c9:f6:d7:d4:36:e8:df:39:55:14:e7:4e:
                    4a:f4:9f:9b:3c:a3:32:90:89:22:3c:7a:4b:2d:35:
                    1a:8a:e5:6f:22:df:dc:4a:c2:6e:6f:0a:e6:3e:63:
                    79:08:4f:2e:51:c0:15:50:c0:11:7f:5f:f9:15:de:
                    f8:11:ae:a1:42:1b:3c:74:3e:9c:70:4e:2b:45:b7:
                    12:86:2f:6d:b5:97:8f:7c:c7:18:62:cd:48:d9:d2:
                    11:a8:72:ab:9d:48:45:01:98:1d:db:f3:74:9a:05:
                    bf:ee:0a:da:b8:1d:eb:3a:4a:78:52:3c:b2:32:7b:
                    3c:dd:b6:ac:6e:54:29:84:f1:f8:23:97:95:59:92:
                    6b:aa:e4:70:98:65:ce:9e:3b:31:a1:2b:54:71:6c:
                    08:e1:75:d8:7e:5c:6f:4e:3b:43:8a:a2:7f:fa:3b:
                    c5:50:49:21:1b:f4:41:1c:d2:67:23:ec:7c:88:e0:
                    66:27:bd:29:12:4e:a4:ec:9e:33:04:56:b6:65:3b:
                    2b:29:8a:63:3e:2d:c3:06:8a:77:4a:cc:ac:c4:6c:
                    78:7e:a3:16:93:39:c5:ea:8e:a3:ae:3e:61:ea:48:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:F6:27:23:7E:1E:EE:3C:7B:43:44:3D:3C:2E:82:9E:BC:CB:8A
            X509v3 Authority Key Identifier:
                keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:0d:4f:b4:3c:2d:81:6a:a1:e8:cb:70:b9:82:02:95:55:
         0b:09:c2:17:7d:3b:43:0f:63:f8:ec:d7:0a:f7:d7:55:c9:bf:
         cb:00:0c:68:c6:52:61:2b:e3:02:1f:d2:55:62:55:a4:a5:b4:
         ad:ce:8c:b0:c1:d9:f3:48:26:27:6d:72:4e:e0:39:24:94:d3:
         e9:62:9f:19:d2:1c:b8:34:4f:3b:56:2f:15:ea:86:7c:8f:93:
         53:ab:dc:cb:a7:db:07:ca:c1:05:94:56:d7:c8:4f:53:95:d0:
         cb:fa:b1:5d:96:4a:f1:68:c6:91:14:df:e6:e5:0f:9c:a1:6c:
         8b:07:ca:12:d5:40:00:e0:6f:2b:01:d9:05:ed:64:d9:b3:f2:
         bc:54:f2:b4:06:fb:9b:ce:b2:52:d0:95:5d:56:27:32:92:e7:
         7b:09:f9:87:37:95:d3:96:40:2f:00:cd:ed:48:f1:47:20:c3:
         96:e3:e4:81:8e:4e:94:0c:38:14:c1:68:f3:ad:8d:46:4d:18:
         8e:f3:3a:7c:3d:3c:45:f7:71:dc:b5:d5:48:e4:c6:e8:6c:9d:
         53:d2:1e:c4:bf:5a:1d:72:5d:bc:03:12:5b:75:8b:d1:bb:c9:
         63:0a:6f:35:ca:41:93:23:2d:fd:9e:e7:37:50:9e:40:7c:b6:
         55:b8:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:31 2026 by rpki-client