Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          e7hCSXutwmx+Q+aGI2QR/6A2iNPPlvAa+H1jVeBJ9hs=
Subject key identifier:   AC:69:FB:D9:B2:51:03:BA:23:E0:35:75:0C:F0:8D:23:76:C1:04:B3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01A06C4B59831FFACC0F508A7FD539D2B2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0C4E
Signing time:             Fri 04 Sep 2026 12:01:12 +0000
Manifest this update:     Fri 04 Sep 2026 12:01:12 +0000
Manifest next update:     Sat 05 Sep 2026 12:01:12 +0000
Files and hashes:         1: 1-iWOVrefjs9HBIASRdjsq7CSI7Q.roa (hash: m7ouBQ2qviW5hyE9F7O8F0y6LhZUjUrkwEJiugNgPHU=)
                          2: 8GcZVYe92v13intCg5ID91bOLno.roa (hash: b3DSszyVIPa0dAbS/Sd5p3m5O/sg4MNTHqFlJONsIZM=)
                          3: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
                          4: 90fbs6INI7k6L2dcFgAyFPdas3Q.roa (hash: aMrXwblbKo0nbHJFMktLKEieI5pQLYv3eyj9v/R4Das=)
                          5: J3R2IeAW_m0d02uAQasK7sttZCQ.roa (hash: 20fGt425z6WH78gh3mBbdekTdMzKNuIzu/Znp+h8cBU=)
                          6: RjlJyxrYJIpppY-il0IsnWaY1Yk.roa (hash: +L3StqZUGVJBR17tezGmEcfXdni/G3W+qWpSte6mPqk=)
                          7: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
                          8: Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa (hash: jK+oCYMLPr8WRuiPIxuvKDK2N1EAkUXmk9TrZ4+llQU=)
                          9: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
                          10: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: hsR3bCPp1iKl2kQx3C4yq6UXb6uGlhUYYaB7fkjPDis=)
                          11: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
                          12: iCvG4p2QaTydD8b84J_nnzVlKvI.roa (hash: xqa+whns2NrmkgIeSClWzUrNsZIzDnw7vlvDjgURIVc=)
                          13: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
                          14: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
                          15: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
                          16: o9LeVuyG4zwZfl9X19i5EI5YY1w.roa (hash: IhxdWhfxb6x1vtP/bQGfsWt6Bv7vG9Bd56mOjcaVmC0=)
                          17: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
                          18: ogCVM0_FD3R6QEvyBDBHVazHJl0.roa (hash: P5tzcX+u+5K9X4wyuw7Cue/raY9HNdmFL+lkgKXUyB4=)
                          19: oiOso2ah4DIMtsn2kxKAzGDyirs.roa (hash: aLcgxvos1HLAujPoJMMu3Y2LHkeSWIRqhOML8XYEQlQ=)
                          20: rvqu1safjRLAF6KvzQ7EIXBDtAw.roa (hash: l1iJNOWrCthSzMX4gh9W3WWiCyK3s7TGkqXWkdDcu9c=)
                          21: tgSRqnQnZUD0Fu4ANbQFDigMoEo.roa (hash: NZR02viri4xDg6oLTnJWANSbonEFpMqlapgOxg1s9+0=)
                          22: vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa (hash: JULRiIFQZ+iF95rVirRL+zxVbr6tTkj3Gel2uhllVeU=)
                          23: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
                          24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:4b:59:83:1f:fa:cc:0f:50:8a:7f:d5:39:d2:b2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Sep  4 12:01:12 2026 GMT
            Not After : Sep  5 12:01:12 2026 GMT
        Subject: CN=ac69fbd9b25103ba23e035750cf08d2376c104b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:ff:a4:6c:3f:29:c3:55:c2:86:dd:15:e0:
                    d0:d1:d8:af:14:cc:14:53:7d:22:34:6d:45:4c:d1:
                    a7:b4:37:46:d5:db:e9:a7:42:2f:27:da:82:14:1d:
                    eb:bd:c6:1c:ad:f3:f6:97:91:59:ad:bd:12:b0:9d:
                    75:44:0c:27:7d:e2:43:43:da:42:55:ed:98:3f:01:
                    9e:83:cd:9d:3d:79:64:b1:15:30:61:06:d4:e4:d2:
                    22:8b:32:b3:8f:52:20:57:21:12:79:f8:66:b7:50:
                    8a:7b:82:ae:8c:25:11:e4:b8:8b:45:2e:4b:9a:24:
                    e9:5d:90:d1:a3:dd:78:02:37:4d:8f:be:eb:2a:c5:
                    64:6b:de:91:f8:d4:7e:9c:0f:bf:38:20:b2:5e:10:
                    f0:d2:84:9c:99:7e:a9:04:55:07:4a:83:e1:20:ef:
                    24:98:8d:5c:e3:34:31:6b:07:24:d3:72:e7:26:35:
                    da:4d:6b:af:dd:be:ac:b8:ba:68:ad:f3:52:f5:4c:
                    ed:f7:a0:88:da:0a:c5:d5:03:a2:38:a9:02:f3:9a:
                    b1:c9:a4:19:f9:a3:89:c7:18:4d:bd:76:96:bc:d0:
                    bc:51:10:1e:79:3f:e5:6b:40:70:20:7a:c6:32:96:
                    09:b7:ce:64:a8:bb:63:7f:b3:0d:78:73:b9:9f:11:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:FB:D9:B2:51:03:BA:23:E0:35:75:0C:F0:8D:23:76:C1:04:B3
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ce:e6:8e:36:6c:15:e5:67:cd:a7:e0:87:ef:41:40:d7:0e:
         4b:8c:16:90:2f:0a:38:f1:1f:4d:e0:86:7b:55:d2:e2:36:df:
         59:5c:bc:bf:16:75:fb:de:2d:ab:5f:fb:bc:62:89:41:a7:5f:
         f8:56:a5:16:ac:94:f1:cb:80:70:6d:30:b3:1e:71:88:60:10:
         ad:06:85:de:2b:74:bc:50:10:bf:dc:0d:03:2d:0f:b7:97:5d:
         66:10:c4:36:c3:d9:7b:14:b0:90:bb:02:cf:80:16:7f:89:e8:
         6e:19:cc:08:18:42:ac:37:08:11:67:b3:85:2a:65:21:ad:51:
         78:97:bc:18:e6:51:80:26:d6:2b:8c:43:25:38:a1:3b:46:58:
         34:ed:2f:ae:ae:79:97:02:9a:62:52:bc:d8:5b:e4:05:13:d1:
         10:40:b8:9f:4b:50:5e:4a:f7:b0:a0:8c:d8:7d:3a:f3:ea:d8:
         86:a3:54:b1:0d:2c:97:dc:fb:a6:78:e5:09:88:bf:bc:57:51:
         ab:ee:06:d7:73:e0:46:e5:7a:e5:4f:47:27:ff:92:16:8f:a9:
         aa:33:42:b5:31:f1:d7:b8:3d:fa:f1:fd:dd:c7:76:14:d3:52:
         e1:ad:db:56:8f:22:da:bc:39:72:0f:24:f9:f7:67:78:a8:fe:
         49:43:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:00:10 2026 by rpki-client