Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          kL1ytgJSWbxuA+oCb8qVxyc4HZWQLOzk0hLY3joYoD4=
Subject key identifier:   4E:30:3F:B7:CC:23:D5:FB:04:77:C0:B4:38:A4:5F:93:DF:5D:55:BA
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       01A13221DE992E0380405F87D8DF1C5710E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          1AB7
Signing time:             Mon 12 Oct 2026 22:00:42 +0000
Manifest this update:     Mon 12 Oct 2026 22:00:42 +0000
Manifest next update:     Tue 13 Oct 2026 22:00:42 +0000
Files and hashes:         1: 546UWvWGhdpJ8v98hderCrojdtA.roa (hash: 6DzrGXudmyoXg8jTIJPljYFkr7htCLIXi2BjYcFDJmE=)
                          2: ME3cETnapLDHP6DWdBAQQoKbaeM.roa (hash: W28I+8J7qnVyHnps7J0q4RxiUOdB6ciorvAbvq4SRpY=)
                          3: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: kvAU2FCMVadf2cxz3k7OoSjCAtjErhBEXY5alM+pEEY=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:21:de:99:2e:03:80:40:5f:87:d8:df:1c:57:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Oct 12 22:00:42 2026 GMT
            Not After : Oct 13 22:00:42 2026 GMT
        Subject: CN=4e303fb7cc23d5fb0477c0b438a45f93df5d55ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:ce:0c:f3:b3:56:ec:45:4d:02:31:6c:47:
                    22:52:cb:41:75:f7:12:41:a2:c8:29:f1:32:bf:ef:
                    8d:bf:0a:52:a9:a1:d2:c2:6a:d8:51:f0:b9:3a:53:
                    3c:91:30:b9:fe:18:12:81:20:19:b3:5b:61:1a:67:
                    29:29:a7:53:a6:24:2b:db:11:a6:a3:0e:97:c6:6b:
                    13:93:c7:fc:99:e9:7e:a1:00:1e:b3:bd:fe:4e:e7:
                    27:32:5f:68:4f:9b:04:2f:96:92:0b:04:be:78:3e:
                    56:a6:1d:62:ce:9c:ed:3c:eb:13:e0:7e:09:59:40:
                    05:b3:f5:52:23:76:ac:1a:ae:df:f8:40:dd:3a:d4:
                    0c:7d:7f:e6:8e:44:ad:84:65:6d:3d:64:4b:fc:e4:
                    af:4f:fd:38:06:b0:80:4f:77:44:f7:f3:a3:d4:2d:
                    05:d5:ed:ec:ea:d0:84:a9:9e:6a:80:8f:52:d3:6d:
                    2b:af:96:a0:f0:e6:55:5a:8d:a3:9e:4e:e6:e0:bc:
                    78:1f:97:57:12:1b:9b:c4:1a:bf:c1:e9:9b:dc:a4:
                    62:4d:d8:a9:26:d4:f3:b3:6d:ff:47:19:55:73:36:
                    f0:c7:71:4f:3d:d6:67:cf:3c:d4:53:a5:20:a7:0c:
                    d7:43:7a:6b:29:e6:86:80:fd:4c:9c:78:df:5e:13:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:3F:B7:CC:23:D5:FB:04:77:C0:B4:38:A4:5F:93:DF:5D:55:BA
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:19:63:32:26:00:e1:99:4b:e7:b8:ad:e9:00:c7:87:66:
         1c:25:20:be:cf:58:39:4f:98:33:13:e8:31:87:be:01:13:d0:
         29:12:ec:00:7e:9e:b5:f9:5b:19:1b:33:25:9d:26:34:f6:0d:
         59:32:5f:ec:15:32:26:6b:18:b7:13:c6:db:be:85:21:94:c4:
         d7:c0:57:b9:e8:08:af:81:1a:c6:5f:fc:30:3b:b9:e6:1b:b2:
         b8:19:bf:11:ef:2d:72:ee:29:99:11:d7:27:c7:c4:f8:4c:36:
         40:49:69:dc:6b:0e:26:c0:b8:08:f0:1c:c7:80:ed:07:ea:17:
         b4:ca:b9:47:43:24:c8:83:ac:bb:74:8f:06:5b:b3:9f:63:37:
         b8:7b:54:c6:b0:f9:a3:c1:29:e5:27:cc:80:7d:1f:3f:e1:06:
         97:a4:c2:2f:85:c3:86:dc:7b:c3:e4:46:16:05:6c:10:06:d6:
         19:97:92:4b:07:62:30:29:a8:3a:bf:5a:2b:9f:aa:fe:9d:c6:
         41:c3:7c:b2:b9:0e:9f:4e:11:88:b8:c7:75:c5:00:1c:b1:7a:
         72:3a:ac:25:f7:d6:55:1b:cc:fc:e5:08:9a:2d:15:21:2a:a6:
         39:7f:f2:c6:6a:ff:22:01:57:12:be:76:a8:e5:79:fc:30:a6:
         f3:f7:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:08:26 2026 by rpki-client