Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
File:                     WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json)
Hash identifier:          iuLEi6xk86ImG3HMgz9TSHbTeh+as6JMK4mEsXtpXdM=
Subject key identifier:   00:E9:DB:2D:86:C5:90:FE:34:BA:F1:45:CF:18:83:C1:78:FF:93:90
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Certificate issuer:       /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial:       01A17E863C0E2C4AD724973A65637D181DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
Manifest number:          1A13
Signing time:             Tue 27 Oct 2026 18:01:28 +0000
Manifest this update:     Tue 27 Oct 2026 18:01:28 +0000
Manifest next update:     Wed 28 Oct 2026 18:01:28 +0000
Files and hashes:         1: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: QnaFS2LblM7BWEWf0yG1qdyV6OZNA7uClUKFvUvv4tA=)
                          2: bzPhIyIk3bkSlzP2o9esoTOxto4.roa (hash: bHsK8idh673TzfIsYx4NifZMv509YFTLtqIqIVG+nuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:86:3c:0e:2c:4a:d7:24:97:3a:65:63:7d:18:1d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
        Validity
            Not Before: Oct 27 18:01:28 2026 GMT
            Not After : Oct 28 18:01:28 2026 GMT
        Subject: CN=00e9db2d86c590fe34baf145cf1883c178ff9390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:f5:ef:2e:bd:a8:fd:48:b1:86:13:56:1a:
                    52:be:87:b6:92:b5:81:cd:ff:46:83:f4:75:37:73:
                    55:45:ba:eb:27:10:55:8b:92:0a:4a:11:04:cf:4d:
                    73:4d:f5:33:97:d4:d4:b0:6a:09:44:7e:16:b7:37:
                    4e:80:33:50:7d:0c:05:9a:98:59:cd:42:b6:df:9e:
                    e6:44:51:7b:f4:cb:9b:7c:92:69:b2:67:0d:3a:6c:
                    d6:b2:26:cc:e9:95:d0:fd:2c:79:68:91:72:55:75:
                    f3:c5:f7:bf:12:8a:43:ab:76:ed:56:b0:1d:26:42:
                    9e:a8:a1:5d:40:ec:16:4b:ba:50:d0:a2:59:af:39:
                    a5:eb:3a:cf:33:a8:6c:4d:58:d8:4e:9f:eb:31:bc:
                    1c:8a:e7:eb:9c:4d:da:f9:f5:7c:e4:4b:17:c1:eb:
                    7a:df:9f:20:58:0f:81:bc:38:2a:41:76:b5:24:f8:
                    86:34:d7:0f:08:1c:17:96:23:c0:ce:b8:3f:0a:d5:
                    f4:3b:dd:2c:2e:a3:df:b6:82:e2:d1:4d:c3:f0:86:
                    cd:e3:4e:85:ee:ec:cc:a7:5d:e6:16:95:19:04:4c:
                    81:e5:83:b2:b9:12:d4:db:2d:53:be:73:42:04:91:
                    24:37:a0:86:cd:eb:5d:17:49:b7:24:19:23:9f:11:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:DB:2D:86:C5:90:FE:34:BA:F1:45:CF:18:83:C1:78:FF:93:90
            X509v3 Authority Key Identifier:
                keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:27:64:25:5c:b1:0b:6d:06:b7:ae:7c:4b:34:ed:7e:a0:05:
         1d:d9:5c:1e:94:dd:4c:5e:19:32:9a:b3:dd:dd:e7:5f:af:59:
         2a:1a:6a:7c:4c:8e:9e:e8:1b:18:62:73:93:5f:6a:eb:26:04:
         68:0c:39:cb:96:2c:8c:09:2e:90:de:a8:b2:e3:8c:b2:03:b2:
         3e:af:34:25:e0:79:06:71:72:06:6f:3b:85:01:0e:60:c0:9f:
         4e:a7:51:1d:f0:25:12:88:2f:cd:66:59:01:20:53:b4:18:6a:
         fe:3f:14:d3:45:ab:72:26:04:7d:05:3b:96:f6:d5:8d:21:27:
         e8:89:4a:37:3b:27:75:4b:bd:c0:3f:37:35:22:c7:25:54:00:
         14:3b:46:a0:8f:c9:85:e9:6f:7d:94:33:16:37:0b:db:f2:49:
         00:56:aa:a6:ca:fe:9e:5a:26:94:81:03:47:a0:2b:74:e1:bf:
         94:2f:70:05:77:cf:ae:53:f8:a7:eb:44:c1:4d:ca:7e:d6:75:
         12:1e:2e:7d:38:84:70:f8:8d:9b:7e:a3:cd:a6:d7:0d:cd:2a:
         87:4e:c2:c9:73:c2:05:bd:41:b8:44:a0:4a:c6:e8:70:e8:42:
         d3:cc:ae:4d:49:0f:2e:59:1c:73:ba:8c:df:40:22:ff:77:ee:
         c4:4d:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:54 2026 by rpki-client