Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File:                     wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier:          vKR3WqOK44+9ds8Wf03PH1RkfV1SSvEboyp3edT2aq0=
Subject key identifier:   00:B0:44:57:80:B7:1E:91:C6:97:BD:59:23:25:7C:87:BF:0C:8C:68
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer:       /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial:       01A1637C74FCD6755AFDD10C78A61FB4F41A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number:          1AB8
Signing time:             Thu 22 Oct 2026 12:01:02 +0000
Manifest this update:     Thu 22 Oct 2026 12:01:02 +0000
Manifest next update:     Fri 23 Oct 2026 12:01:02 +0000
Files and hashes:         1: 2eqhGMddc6o7FIDR3NGWx4Ow8E8.roa (hash: z5gVcRgK3Nn9nyPEEaZPlAeofGLHnrjmeBcu5Qk4JJE=)
                          2: mUJD4x2jM1tnziJJnzvezoEdIg4.roa (hash: CPeCrxpjCYKP3mqC1/d2mx1bSiUKrWLUwX4R4Tk1imA=)
                          3: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: zFV7rfrvr9v492jUxbN/V87EKX7BKcQRC9EMUyQ6ys4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:63:7c:74:fc:d6:75:5a:fd:d1:0c:78:a6:1f:b4:f4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
        Validity
            Not Before: Oct 22 12:01:02 2026 GMT
            Not After : Oct 23 12:01:02 2026 GMT
        Subject: CN=00b0445780b71e91c697bd5923257c87bf0c8c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:63:ef:9b:06:1f:f4:6d:e0:fd:0d:6f:a4:05:
                    20:c0:4e:68:47:6c:be:2e:be:e8:9a:37:32:b4:ea:
                    da:41:f6:54:fd:f4:fa:8c:f1:72:34:db:f5:2e:68:
                    38:f7:19:c9:70:b5:33:50:8f:6d:d1:49:16:16:37:
                    c3:7d:bc:d6:8d:d8:6b:e8:3f:f3:1c:2b:3e:4d:d6:
                    90:93:2f:b7:97:3a:de:05:0d:7b:c3:94:46:c9:0b:
                    13:55:63:74:01:f4:17:5f:61:cb:25:10:39:b1:9c:
                    a8:53:fe:6a:a1:23:cf:55:e8:5b:5c:db:43:46:b1:
                    65:bc:50:fd:98:a3:ef:c0:d7:97:29:29:28:87:95:
                    cc:84:12:08:ec:47:44:3d:8a:78:14:ba:55:7a:8b:
                    fb:64:84:f8:c4:8a:39:01:f2:d6:5c:0b:04:ca:f3:
                    17:2e:36:a5:50:c4:18:74:fb:5a:13:fe:c8:3a:31:
                    19:f5:c7:f7:07:e3:67:bc:b6:83:33:a8:73:3b:69:
                    c2:e4:b6:c5:97:c0:48:a4:e6:b7:9e:b8:95:8e:68:
                    cf:55:ee:aa:88:4f:31:29:47:97:4d:e5:75:6d:5e:
                    30:ad:d3:ae:20:50:81:ed:30:8a:6c:38:32:54:0f:
                    87:b2:d1:cf:be:40:cf:2f:13:1a:c0:0b:ee:c4:e2:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B0:44:57:80:B7:1E:91:C6:97:BD:59:23:25:7C:87:BF:0C:8C:68
            X509v3 Authority Key Identifier:
                keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:8f:6b:d1:f4:6b:d0:35:f2:14:35:80:97:87:b2:bc:de:
         62:c7:4f:b0:54:9a:76:a3:80:eb:f8:2e:d6:56:61:89:38:0d:
         ed:b6:6d:d1:3c:fa:bc:2c:3e:48:da:4a:14:fb:77:fe:01:42:
         69:99:50:cf:10:20:85:fe:0e:67:85:07:d3:c2:0b:6e:58:d6:
         51:65:69:0d:dc:53:9f:5a:12:aa:b0:bd:d8:a9:f8:db:43:69:
         49:38:4c:ac:96:7a:d0:75:ef:3c:fc:c9:dd:aa:6f:0e:92:d4:
         2f:99:f9:67:2f:a5:9b:b5:a7:0d:6d:cc:ce:53:e3:de:1e:a2:
         56:07:f8:b1:6d:96:59:eb:59:d3:fd:97:e7:23:3e:10:8a:60:
         6e:cd:18:79:d6:89:1f:e5:18:92:3e:e7:e6:3c:b7:83:88:2c:
         9d:b9:8c:06:ae:42:2b:55:e6:3a:e2:70:df:c4:35:a4:4f:1f:
         2a:3d:7f:5a:c3:80:d3:6c:ac:ee:9d:1c:7a:f4:e3:db:91:56:
         b7:5d:ca:11:ca:a5:d5:df:fb:e9:4b:10:7c:ee:21:25:75:43:
         27:aa:dd:eb:eb:af:05:5c:a2:48:df:a4:5e:a1:48:55:bb:24:
         6c:b4:4c:ed:07:e9:d1:ec:f9:8c:e4:86:9c:6b:94:c8:fa:4e:
         9a:89:9c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFjfHT81nVa/dEMeKYftPQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZmNhOTQ0NDU4NjA2YjEwMTdlMjZjM2NhMTc0MzBmN2Zm
OTI0YjMwHhcNMjYxMDIyMTIwMTAyWhcNMjYxMDIzMTIwMTAyWjAzMTEwLwYDVQQD
EygwMGIwNDQ1NzgwYjcxZTkxYzY5N2JkNTkyMzI1N2M4N2JmMGM4YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WPvmwYf9G3g/Q1vpAUgwE5oR2y+
Lr7omjcytOraQfZU/fT6jPFyNNv1Lmg49xnJcLUzUI9t0UkWFjfDfbzWjdhr6D/z
HCs+TdaQky+3lzreBQ17w5RGyQsTVWN0AfQXX2HLJRA5sZyoU/5qoSPPVehbXNtD
RrFlvFD9mKPvwNeXKSkoh5XMhBII7EdEPYp4FLpVeov7ZIT4xIo5AfLWXAsEyvMX
LjalUMQYdPtaE/7IOjEZ9cf3B+NnvLaDM6hzO2nC5LbFl8BIpOa3nriVjmjPVe6q
iE8xKUeXTeV1bV4wrdOuIFCB7TCKbDgyVA+HstHPvkDPLxMawAvuxOJV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACwRFeAtx6Rxpe9WSMlfIe/DIxoMB8GA1UdIwQY
MBaAFML8qURFhgaxAX4mw8oXQw9/+SSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Z5cFJFV0dCckVCZmliRHloZEREM181SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDAzM2MtNWIwMy00NzA5LWI2ZDMt
YTg2NWUxODllZDhhLzEvd3Z5cFJFV0dCckVCZmliRHloZEREM181SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MDAzM2MtNWIwMy00NzA5LWI2ZDMtYTg2NWUxODllZDhh
LzEvd3Z5cFJFV0dCckVCZmliRHloZEREM181SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqOPa9H0
a9A18hQ1gJeHsrzeYsdPsFSadqOA6/gu1lZhiTgN7bZt0Tz6vCw+SNpKFPt3/gFC
aZlQzxAghf4OZ4UH08ILbljWUWVpDdxTn1oSqrC92Kn420NpSThMrJZ60HXvPPzJ
3apvDpLUL5n5Zy+lm7WnDW3MzlPj3h6iVgf4sW2WWetZ0/2X5yM+EIpgbs0YedaJ
H+UYkj7n5jy3g4gsnbmMBq5CK1XmOuJw38Q1pE8fKj1/WsOA02ys7p0cevTj25FW
t13KEcql1d/76UsQfO4hJXVDJ6rd6+uvBVyiSN+kXqFIVbskbLRM7Qfp0ez5jOSG
nGuUyPpOmomcTw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:07:05 2026 by rpki-client