Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          /0rbm6XjxawnGFe+RJbWztHa7syG1rH2mIOVrFU87Ds=
Subject key identifier:   08:8B:91:B2:12:34:DA:2D:59:81:A3:15:B1:63:58:76:82:5B:61:B1
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       01A06DCB7E268AFBF586AA2A41C84448C341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          1A34
Signing time:             Fri 04 Sep 2026 19:00:47 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:47 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:47 +0000
Files and hashes:         1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
                          2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: ie3ETY3HFBSPFxDzUyJVXVhqc1Ib9yVz6Y/rUo/Uk70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:7e:26:8a:fb:f5:86:aa:2a:41:c8:44:48:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Sep  4 19:00:47 2026 GMT
            Not After : Sep  5 19:00:47 2026 GMT
        Subject: CN=088b91b21234da2d5981a315b1635876825b61b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:e0:cc:16:54:f3:d9:94:4b:e4:a4:b9:31:
                    be:e9:96:ef:05:46:61:f3:82:98:3f:f1:84:28:c4:
                    1e:c4:92:75:b2:11:ee:bf:84:68:6d:31:ef:1d:16:
                    59:46:17:c6:46:af:2b:b6:82:1b:8a:4b:ca:47:6b:
                    7d:1a:11:21:01:13:64:5d:1c:82:0c:bf:90:b9:3d:
                    d6:0d:02:44:51:4c:3c:6c:86:f0:91:c1:3f:52:bd:
                    53:00:c1:7a:1c:08:e4:39:5e:a2:df:ed:05:30:b2:
                    46:83:91:d9:77:07:2f:fe:70:43:d2:ca:d1:2d:6f:
                    e3:a0:4b:a4:57:97:5c:7a:6a:18:4b:5f:40:04:d1:
                    d8:f8:d6:3d:03:90:63:a8:3b:f4:f9:75:b5:c9:bd:
                    ec:e0:7e:b8:bb:8e:cb:44:a6:b6:95:82:80:cc:cf:
                    f2:4f:ba:6d:30:b9:f4:03:8e:5c:57:89:e8:42:c9:
                    55:d4:c6:2e:14:b1:8b:6c:c2:90:eb:0a:2c:35:6c:
                    9f:58:f6:dd:ba:6f:0b:23:aa:5f:f7:18:f7:07:d2:
                    2b:c0:fd:1f:56:ac:6f:83:9b:cf:ee:ed:c5:78:86:
                    1f:60:18:58:23:f3:fd:49:63:25:14:4d:56:49:97:
                    a9:e1:91:29:ce:75:9e:8e:91:38:bc:01:cd:89:0a:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:91:B2:12:34:DA:2D:59:81:A3:15:B1:63:58:76:82:5B:61:B1
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:39:c4:6d:09:ee:4d:c6:d3:25:c2:fa:00:a5:88:76:74:72:
         f3:9d:d0:d7:d4:ea:ff:24:02:87:bb:64:81:ac:64:af:6e:fd:
         7c:4d:50:ae:f4:80:08:12:f2:bf:a0:ef:f5:35:e3:95:c9:c4:
         0b:19:d2:ca:d0:e6:8d:9b:b1:07:5b:92:6f:ca:b5:ce:ce:a1:
         6d:16:47:04:b2:f3:6b:f7:33:a5:b8:07:13:e3:b8:6a:21:3b:
         61:4b:e8:c0:e6:b4:a9:43:32:72:4f:2a:bf:d2:e7:17:cc:c9:
         98:0e:31:a6:da:01:ad:37:0b:40:ba:14:f9:21:57:87:7c:e3:
         56:c1:f4:5e:14:99:7d:43:69:22:56:b4:dd:8e:cd:57:c2:73:
         2b:33:f3:eb:26:bc:7b:a1:9f:4d:18:18:f6:ce:24:60:81:8e:
         c1:4f:c5:80:6d:51:3b:7b:b5:75:01:db:39:67:54:a2:3b:8c:
         39:a5:c4:4c:ff:f6:1f:45:d8:37:a2:2d:aa:6a:ba:aa:d8:44:
         dc:d6:d4:be:cb:c7:77:27:c6:21:68:e9:69:0c:fa:71:e4:82:
         fe:19:4f:63:09:09:01:ba:e1:2a:fd:c6:8c:6e:d5:86:d5:a7:
         49:3b:4c:76:5e:d4:5e:14:ac:56:fc:74:fa:e5:96:01:ce:78:
         bc:75:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:04 2026 by rpki-client