Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File:                     WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier:          3EqsYwPdJhKB0O+9cDXLT/uiff/1Oj3lb75JRrlZ7LE=
Subject key identifier:   B5:8B:5E:5D:12:C0:A6:84:C6:F4:CF:9D:66:18:64:83:2D:AE:64:4D
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer:       /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial:       01A17BBB6CAB7DFF77B17955DCE278CD34C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number:          1A59
Signing time:             Tue 27 Oct 2026 05:00:42 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:42 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:42 +0000
Files and hashes:         1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: Lei2XsnHjjD7FhkSIEkqMiLlfC3gOn9DQxqP1WzXp9I=)
                          2: qTJkke2DmFNJyiG7jfJcZx_vW34.roa (hash: vKcHwa2tV+EZb/fHgrN6A1horjD1vZRSzMun772SEGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:6c:ab:7d:ff:77:b1:79:55:dc:e2:78:cd:34:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
        Validity
            Not Before: Oct 27 05:00:42 2026 GMT
            Not After : Oct 28 05:00:42 2026 GMT
        Subject: CN=b58b5e5d12c0a684c6f4cf9d661864832dae644d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:bd:8b:8d:50:6a:d2:42:42:48:f0:36:92:
                    b3:a8:93:2f:1a:32:1a:c1:84:04:c8:2e:92:58:76:
                    5e:86:d1:7c:4c:86:f5:56:47:68:6d:23:d0:36:ee:
                    60:38:d9:d3:79:b0:12:d9:2f:1d:52:50:c3:5d:92:
                    cc:5e:d6:97:0a:74:25:58:23:61:e4:02:46:35:eb:
                    85:5f:58:92:a3:84:0e:aa:17:72:ac:16:52:0a:6f:
                    fa:7b:37:fc:9e:60:ed:52:c6:cb:ca:28:e5:20:4d:
                    f3:6f:a1:8a:a9:ce:8f:09:f0:19:ae:eb:c5:81:da:
                    b5:ea:73:d1:64:f8:e3:0b:c8:58:be:fe:ae:f6:7f:
                    50:ff:c9:bb:54:16:de:cc:53:6c:ea:c7:53:e7:cf:
                    83:13:9a:8e:02:b1:2b:13:f6:20:8c:bb:9d:c2:fc:
                    a2:cd:ff:cd:51:d1:3f:cf:44:ec:7e:bd:4e:f1:62:
                    1d:dc:91:21:54:a4:6f:93:06:20:0c:45:ca:b5:7e:
                    e2:f4:9a:99:60:d5:fe:a7:e1:29:ad:15:ce:40:74:
                    87:8e:8c:13:39:d7:88:10:7f:59:12:ac:8d:e9:df:
                    23:e5:94:c8:60:73:01:af:2e:15:bf:4d:9d:b2:c8:
                    98:a0:79:ed:31:f9:6a:9c:cf:af:78:b7:5c:56:b7:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:5E:5D:12:C0:A6:84:C6:F4:CF:9D:66:18:64:83:2D:AE:64:4D
            X509v3 Authority Key Identifier:
                keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:0d:50:f9:4a:a6:d7:f1:d0:bb:64:b7:a3:ac:f3:f5:cc:
         e3:65:56:6e:03:11:fa:6f:bf:0c:06:bb:10:fd:e4:9d:ea:94:
         b9:d4:1a:37:f9:d7:77:cc:6c:20:a7:90:7a:f5:4c:1f:ea:68:
         46:60:c2:5e:89:29:17:46:69:11:6f:f3:50:22:49:32:3c:00:
         f0:de:0f:7e:5a:f2:71:4d:11:dd:4a:cf:46:50:d5:48:80:43:
         d5:e2:45:1a:4e:1e:87:ec:62:d5:b3:94:7c:1d:f0:af:e5:53:
         55:42:f9:1b:7e:ea:ad:15:20:14:99:01:3c:13:aa:81:cd:6f:
         ec:77:fa:05:72:e5:bd:6d:9b:8d:37:a6:2a:6d:07:f5:2f:21:
         fa:08:0b:d5:09:42:33:23:21:41:fb:dc:26:7c:02:6a:30:58:
         21:2e:16:61:52:ec:b3:27:19:de:f0:32:19:fb:7f:0c:a1:e0:
         af:7e:9a:b7:88:e2:74:df:af:db:7b:fd:90:73:46:38:d3:a4:
         c4:33:76:8a:24:45:89:e3:02:c9:ae:a1:dc:56:c8:28:33:c5:
         4e:ee:12:61:63:77:8a:83:20:9b:e1:ae:67:45:d0:f4:e3:ab:
         fd:33:99:62:fd:87:87:39:72:74:8b:8b:3d:ea:8c:56:d2:99:
         a2:86:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:17:34 2026 by rpki-client