Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File:                     wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier:          hr5oPnoTSzjN8/ChHxgjeQd57yJaIOeoUMc83GyMqb0=
Subject key identifier:   4E:8E:AB:ED:66:70:99:2A:EB:1A:14:8A:28:F4:55:F8:E6:0D:73:13
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer:       /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial:       01A1920C47D7252B40B891254721D535A6C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number:          0590
Signing time:             Sat 31 Oct 2026 13:00:40 +0000
Manifest this update:     Sat 31 Oct 2026 13:00:40 +0000
Manifest next update:     Sun 01 Nov 2026 13:00:40 +0000
Files and hashes:         1: SOx3AgvmBANgGuRBvGIZv19ZcA0.roa (hash: 6aOAX3w5YQajoC0CEbqRBxH+zCfnhhkE4sDztjd3jWI=)
                          2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: HW1M4asvYgGw1fvRHTKaDGRWy05aL3hCxgmqr5hU66Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:92:0c:47:d7:25:2b:40:b8:91:25:47:21:d5:35:a6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
        Validity
            Not Before: Oct 31 13:00:40 2026 GMT
            Not After : Nov  1 13:00:40 2026 GMT
        Subject: CN=4e8eabed6670992aeb1a148a28f455f8e60d7313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:bc:84:3e:d5:35:10:ba:8a:ed:d1:dc:a2:
                    78:e1:58:c4:8e:e0:6a:a4:96:92:ca:b9:ab:c4:ed:
                    53:42:27:32:e6:83:11:f9:e9:a1:cf:c1:a1:3a:e2:
                    6e:f9:3c:cd:ad:cc:62:04:c0:22:80:29:49:d7:f7:
                    a2:a3:80:a5:c6:20:c0:d3:eb:f7:55:0b:a7:be:7f:
                    0b:8f:0e:f6:83:f7:69:aa:a5:f4:f5:68:a2:34:46:
                    a5:a2:d5:e4:bd:c4:ff:6c:d2:ce:1d:dd:b4:05:27:
                    2f:ca:a4:d2:65:75:2b:e2:d7:8e:60:0b:24:8d:ce:
                    74:fa:48:4c:86:52:78:56:1e:54:14:cc:bd:5d:ef:
                    5b:8c:88:ab:ad:88:32:6b:0c:b0:2d:6b:1a:b2:67:
                    fe:d9:ae:6e:b4:12:a4:7a:34:b4:56:19:94:b9:ed:
                    98:7c:65:22:a7:3e:89:44:73:f0:62:c2:c4:e3:a3:
                    81:ed:1e:17:75:98:6e:90:5b:1b:40:ef:fd:9b:c1:
                    e9:94:51:d4:93:8d:07:f9:dc:cc:a9:7f:a4:d3:c2:
                    99:57:05:dd:7c:78:d5:2e:22:67:75:d3:d7:39:30:
                    7b:4f:89:47:09:39:e2:fd:cf:fe:ad:19:50:52:42:
                    c5:4f:3a:ee:31:04:19:09:84:65:69:8c:6f:1c:18:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:AB:ED:66:70:99:2A:EB:1A:14:8A:28:F4:55:F8:E6:0D:73:13
            X509v3 Authority Key Identifier:
                keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:23:fe:62:e4:11:2d:c4:8d:f3:7d:aa:96:05:c6:f0:bc:c0:
         a4:fe:a8:ad:da:38:ae:bb:1c:98:8d:56:4b:84:4f:13:cf:f6:
         e4:f9:51:97:f0:1e:a2:05:42:6c:e2:81:51:8d:6f:9e:27:3c:
         ee:68:84:0a:17:f1:eb:5f:86:b6:c3:14:ba:44:bc:6d:17:ed:
         12:da:a8:78:6e:33:d6:9c:01:36:ca:ba:26:4b:c8:f8:c6:f4:
         05:32:18:18:c4:63:bf:3f:16:4a:35:35:53:d7:bb:f7:4d:72:
         9f:c2:55:5b:70:41:05:a8:9d:33:19:fa:20:de:48:fe:cb:f1:
         16:9e:d5:c9:b2:e2:d8:87:d9:ac:b6:85:ec:b7:92:3b:5d:6c:
         9b:db:2a:d2:3a:ff:3b:43:4c:a4:22:af:b1:ac:41:07:d5:44:
         03:44:68:dd:de:f1:ac:b1:71:18:f6:86:96:e6:ef:cc:df:2c:
         f3:54:1a:48:15:4e:f1:aa:55:77:01:f8:a7:94:d7:4a:b7:95:
         97:fa:39:b8:f1:74:07:f5:32:cf:29:85:90:b7:df:f6:12:3e:
         b1:77:98:53:58:01:0c:3e:88:44:c7:51:82:dd:7a:2f:0f:d7:
         e6:38:b1:97:25:54:85:54:a0:89:91:c0:ba:6a:51:1d:a1:f4:
         bb:2a:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:53 2026 by rpki-client