Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
File:                     W-I_G-t4thhzgxibOq98OCvFcfM.mft (raw, json)
Hash identifier:          Zr47YvFkOChedxu64nkVR8EQ4sOiV2Flp5h0+Z/mJS4=
Subject key identifier:   B4:89:FE:61:FB:46:65:5D:8E:EC:EE:D1:7B:81:EF:E4:D0:87:9E:76
Authority key identifier: 5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3
Certificate issuer:       /CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
Certificate serial:       01A181BE8F48043BFDA0BCA2C9ED442254AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
Manifest number:          0141
Signing time:             Wed 28 Oct 2026 09:01:51 +0000
Manifest this update:     Wed 28 Oct 2026 09:01:51 +0000
Manifest next update:     Thu 29 Oct 2026 09:01:51 +0000
Files and hashes:         1: NvfylF4mNUZrVPpuF-aNgEIfodg.roa (hash: Fvsh6sazNq+Fca51yFuaCiLcdIuLJhgDF163VQk6xG4=)
                          2: W-I_G-t4thhzgxibOq98OCvFcfM.crl (hash: ot4U2Gml9w8/0Cm51i6stuQagHvLn4aHY1P4l05ne9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 09:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:be:8f:48:04:3b:fd:a0:bc:a2:c9:ed:44:22:54:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
        Validity
            Not Before: Oct 28 09:01:51 2026 GMT
            Not After : Oct 29 09:01:51 2026 GMT
        Subject: CN=b489fe61fb46655d8eeceed17b81efe4d0879e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:17:3e:1b:9a:70:88:fe:73:af:74:f7:e1:
                    20:15:aa:76:59:5e:63:be:77:b3:0c:b4:e9:3c:41:
                    47:85:82:6f:88:c0:1e:1d:c7:b5:70:ca:dd:6e:f8:
                    18:d3:78:36:77:27:e3:88:5e:14:1c:c7:23:b8:c3:
                    71:8b:ee:9d:b4:14:d5:d2:b2:d1:b8:45:d7:ad:fd:
                    d4:5a:c9:ab:3f:aa:7d:ee:1e:a4:18:43:a9:22:fd:
                    f1:a6:c6:47:aa:56:61:de:50:8e:40:f6:45:37:bf:
                    62:9e:73:85:31:ac:56:5d:11:cf:b9:de:49:3b:b5:
                    15:2a:40:70:4d:8f:84:fe:57:e8:32:35:17:39:8d:
                    7d:c6:47:15:de:f4:e6:fe:95:5b:f8:53:e8:d3:6c:
                    4c:e4:d3:4b:3b:38:11:cf:72:50:90:42:ef:56:0a:
                    b9:d6:03:45:e4:aa:58:b0:0a:4f:14:df:7a:99:61:
                    1a:e8:23:f8:c7:a9:38:2f:33:ab:f7:cf:ac:ee:27:
                    a8:2e:77:3e:91:41:00:ad:d8:0e:5a:c7:8c:89:52:
                    06:cd:12:03:4c:00:98:78:c6:4c:96:2b:1c:cd:51:
                    08:a9:3f:ec:28:60:1b:fa:d9:e1:a7:c5:9c:d0:62:
                    e3:be:e2:31:41:e5:21:d7:1d:8f:8a:b4:91:6f:dd:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:FE:61:FB:46:65:5D:8E:EC:EE:D1:7B:81:EF:E4:D0:87:9E:76
            X509v3 Authority Key Identifier:
                keyid:5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:57:e1:84:9f:96:d4:ee:1c:e2:c5:8b:70:56:80:b2:cb:75:
         a8:9f:ba:70:ef:0f:c5:af:fe:e3:f5:e0:54:4b:8d:8b:a8:3b:
         67:73:2c:6a:72:95:e8:c5:22:92:0c:c6:41:80:0d:96:ae:d5:
         9f:ef:b8:49:68:40:a5:2a:29:ad:32:d4:f6:aa:44:16:3e:16:
         22:16:33:03:2b:ab:b6:bf:12:77:a4:0f:ed:b6:16:8d:df:89:
         52:87:65:d2:17:e1:b8:1b:88:c6:ad:3a:3d:8c:ea:99:8d:d0:
         2f:26:a5:ab:3c:44:84:14:ac:72:9c:ff:54:1b:43:08:0f:ad:
         8b:14:e8:61:19:40:91:aa:a2:b4:96:f2:dc:46:f7:24:53:85:
         ba:08:c9:30:c8:a5:e5:70:6c:00:c9:31:b3:61:dd:b5:f4:11:
         18:55:c2:96:8e:da:0d:3b:c2:ce:b5:e9:f5:e5:59:f1:3c:a8:
         f6:81:35:e4:01:2c:2d:88:b8:be:9a:cb:0f:fa:7a:ae:6f:cf:
         84:65:cf:ff:c0:e4:f5:d9:c2:28:33:8a:2c:3c:48:41:b6:b5:
         63:d2:58:07:f4:f1:61:98:80:b0:de:19:ab:b0:54:23:c3:df:
         37:b4:c8:2d:30:50:cd:a6:ff:4e:dc:04:23:f2:84:55:13:f1:
         4e:98:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:26 2026 by rpki-client