Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          8eVTMsQkPjM1az0Ovj/ggWvBNaeUW+Y6dNYOrrsxTLM=
Subject key identifier:   50:66:F4:D2:C6:C5:43:B2:DD:C7:44:24:2E:38:74:E9:E3:1F:C3:8C
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       01A18C41999FB20DEE486513F2201E5B8511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          13BB
Signing time:             Fri 30 Oct 2026 10:01:11 +0000
Manifest this update:     Fri 30 Oct 2026 10:01:11 +0000
Manifest next update:     Sat 31 Oct 2026 10:01:11 +0000
Files and hashes:         1: IyiDYUwXTd8nMW2tsgvpdFAf3I4.roa (hash: wX/PrCSepREzfY5hM9Z51sIMyLpNkHvV3nfyWUKOE2Q=)
                          2: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: kW7u+qS12VFVrLAiP3ro/ciZ/LBvX4Y05KYunXfr0nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:41:99:9f:b2:0d:ee:48:65:13:f2:20:1e:5b:85:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Oct 30 10:01:11 2026 GMT
            Not After : Oct 31 10:01:11 2026 GMT
        Subject: CN=5066f4d2c6c543b2ddc744242e3874e9e31fc38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:80:a5:5f:52:f7:c8:0b:a8:b1:04:c7:eb:
                    5c:70:db:04:f6:fe:fd:c7:1d:4d:0a:fd:25:28:1b:
                    e5:66:1e:3e:a2:58:d1:ff:e9:44:39:39:15:b8:55:
                    f2:9b:2d:3e:36:c1:89:75:ce:40:b6:36:16:2c:a9:
                    5e:c8:8c:6d:62:2f:ec:a0:a4:4a:65:3e:6e:1b:3f:
                    4e:07:05:cb:64:43:8a:76:a6:88:b2:d1:0c:2a:89:
                    de:f4:1e:5f:1f:06:86:d9:d6:fb:6f:21:72:c5:f4:
                    cf:bd:4a:75:08:46:65:0a:79:1c:df:06:de:23:32:
                    7c:d1:89:cd:95:1b:99:77:91:69:c0:1f:87:57:53:
                    d8:07:c0:d4:78:2f:76:ea:9b:da:47:80:77:21:59:
                    9c:58:ed:98:b7:73:99:9b:47:7e:16:ed:d8:66:5c:
                    36:e3:5d:86:ee:9c:75:d6:5f:fb:a9:11:cc:5b:08:
                    bd:df:1b:51:61:dc:34:22:eb:04:1e:63:5d:e2:0d:
                    12:d5:df:8a:aa:49:e3:e7:49:3e:f7:93:15:b9:49:
                    3b:56:e4:15:39:a1:02:1a:90:b3:10:3f:9b:0d:ff:
                    0c:d5:9f:be:97:8e:59:64:ab:d8:3e:d0:d4:e0:e7:
                    ca:47:0f:96:1c:bd:31:b6:b9:39:27:a7:2e:d3:19:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:66:F4:D2:C6:C5:43:B2:DD:C7:44:24:2E:38:74:E9:E3:1F:C3:8C
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:91:12:c7:35:a6:07:37:22:4b:46:3c:d7:39:86:fe:44:
         b6:e6:83:e3:d3:d7:23:f0:ae:f9:b5:a9:b0:75:c9:7d:e8:dc:
         00:e7:b9:bf:80:9d:be:00:27:ae:9e:5c:3c:4c:14:cb:19:c9:
         bd:cd:21:f9:65:e5:d4:87:49:be:f7:17:bd:db:cb:7c:5b:e9:
         df:65:0e:6d:c1:c1:e7:c5:79:c3:11:99:6a:31:13:4f:c6:b5:
         91:7f:3a:45:c0:c2:c5:79:4b:7f:2c:e9:d4:a0:56:55:71:66:
         aa:1c:84:5a:26:7d:b3:49:50:1e:20:66:25:6b:bd:98:17:08:
         e9:60:47:54:fa:fb:bf:c3:bc:a9:0b:8d:4e:a8:d3:f3:bd:3c:
         0a:8d:66:20:d0:a6:33:0f:82:7e:e8:5c:a4:74:7e:1a:b9:54:
         7b:0e:fc:54:52:8f:9c:2c:6b:fe:a1:b1:4a:89:87:ab:56:3b:
         59:6c:7e:62:a1:bb:cb:cd:ff:22:83:23:fd:c3:fa:cd:27:d7:
         61:5f:07:fc:6a:4a:f5:1c:65:6e:a4:6b:80:1a:d0:ce:90:80:
         58:ff:1e:76:98:b8:c7:02:f0:d3:c1:08:b0:1c:2d:d1:d7:b9:
         1b:40:4f:df:de:30:08:8e:16:d7:6e:fb:ee:1a:46:9b:4a:ed:
         96:26:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:43 2026 by rpki-client