Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
File:                     W-I_G-t4thhzgxibOq98OCvFcfM.mft (raw, json)
Hash identifier:          RIZHofcxqopMfvEYdY6AFkyHRVE2NRnUAzXsW+FucCo=
Subject key identifier:   64:25:36:38:27:FF:B8:B7:FA:5B:A4:48:7E:3A:98:DA:F2:92:8A:44
Authority key identifier: 5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3
Certificate issuer:       /CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
Certificate serial:       01A08A8C872CB1D485C3096627A3F229BA9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:00 +0000
Files and hashes:         1: NvfylF4mNUZrVPpuF-aNgEIfodg.roa (hash: Fvsh6sazNq+Fca51yFuaCiLcdIuLJhgDF163VQk6xG4=)
                          2: W-I_G-t4thhzgxibOq98OCvFcfM.crl (hash: AkugzCCK9y3xDk7GvdF/0V1rj/lyeqwaiwsM+WUKh5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:87:2c:b1:d4:85:c3:09:66:27:a3:f2:29:ba:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
        Validity
            Not Before: Sep 10 09:01:00 2026 GMT
            Not After : Sep 11 09:01:00 2026 GMT
        Subject: CN=6425363827ffb8b7fa5ba4487e3a98daf2928a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:00:96:2a:55:d4:65:2b:6f:d2:76:dd:12:
                    77:22:df:0c:58:fd:55:96:40:af:0d:f7:b8:03:f5:
                    14:0d:f2:b7:83:93:e3:00:c7:8f:15:93:0b:71:d5:
                    36:5b:c3:14:20:a3:e6:02:ba:f7:80:ce:49:6a:21:
                    29:18:99:28:a9:a2:8c:cc:d0:da:9c:a3:cc:ca:b2:
                    97:71:ea:03:bf:4b:09:54:e2:90:28:8f:a0:46:d5:
                    45:de:f8:0e:7b:38:ba:34:7a:01:68:e1:ef:92:04:
                    ac:6f:d8:6f:dd:5f:d8:ab:15:a6:01:f0:e5:14:49:
                    f1:2f:1c:99:8e:55:d0:ac:4d:ca:2a:34:0f:6a:a3:
                    d0:92:59:87:f7:df:76:4e:38:e5:94:c2:1b:a9:32:
                    80:f8:1e:a2:10:15:60:57:b9:4c:d0:21:77:d9:e3:
                    b4:bd:40:64:e4:2c:70:30:3e:65:97:a6:0d:7c:0a:
                    13:9a:57:13:53:70:65:15:83:ba:8e:ac:1d:61:a8:
                    13:4b:46:a9:aa:5e:1f:b6:e7:20:93:dd:7d:24:8a:
                    97:5e:67:2d:53:d2:f8:53:6f:27:58:a3:fd:ff:87:
                    51:10:2c:a3:cd:38:92:7b:44:cb:90:a2:23:c1:6d:
                    1c:0e:34:89:dd:e7:35:4f:c3:7e:29:10:15:b1:4c:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:36:38:27:FF:B8:B7:FA:5B:A4:48:7E:3A:98:DA:F2:92:8A:44
            X509v3 Authority Key Identifier:
                keyid:5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b0:aa:b8:72:6c:42:85:5c:a8:da:b0:36:c8:a2:78:8c:c6:
         90:dd:d9:ce:34:ac:ac:62:b9:d8:d6:44:6f:3f:1c:cf:c5:fa:
         5b:e3:de:4b:4a:c2:0c:7e:10:78:02:61:5e:34:b7:10:13:a6:
         c6:3c:14:0d:e7:62:e9:f8:66:33:55:69:44:ae:ec:85:08:c5:
         c2:26:ad:80:fb:63:38:0c:6c:fc:9a:b5:4c:5f:3f:a7:4b:46:
         e1:63:60:c3:27:0c:f8:09:66:56:bb:94:a0:16:8b:0e:0d:02:
         37:57:1a:60:13:cd:3c:ca:07:f4:0f:13:6d:91:d5:28:f7:8f:
         d9:d4:ac:6e:04:06:8c:29:79:13:53:a4:c8:14:58:01:a0:3b:
         a2:33:5f:6e:43:58:bd:01:dc:88:e2:90:ec:19:b6:19:29:24:
         a6:5f:c2:5c:bd:59:c1:09:98:97:79:2d:55:f6:dd:f3:a1:17:
         69:6d:43:20:a5:f9:e7:af:11:fd:9c:ce:76:d0:77:7c:58:be:
         e3:f1:08:74:12:f3:2b:e4:42:6b:af:13:40:3c:73:16:f1:d1:
         85:c8:6d:d9:2f:86:57:7f:cd:61:11:52:ef:d0:15:92:58:01:
         a0:e8:10:37:48:bb:af:3e:9f:80:78:20:12:eb:75:da:52:d6:
         5e:50:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:38 2026 by rpki-client