Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
File:                     Wkv82nYeTylp9jQ3IYeeygGert4.mft (raw, json)
Hash identifier:          NYVun/Kn9QIBmEP5je7ljTSGZQFgiDJ6+8E7BaLoHi8=
Subject key identifier:   E5:47:80:32:B7:CE:FB:9A:EA:04:66:53:7D:65:DC:DC:CB:43:5F:70
Authority key identifier: 5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
Certificate issuer:       /CN=5a4bfcda761e4f2969f6343721879eca019eaede
Certificate serial:       01A17BF292777CEBF72F00AD86AB1666E9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:57 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:57 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:57 +0000
Files and hashes:         1: Wkv82nYeTylp9jQ3IYeeygGert4.crl (hash: oSwVoVtGCrgWYqA87WS9XNOwM8wrrbMyEAUE2NJntLk=)
                          2: xyc3dtPBeCZodO1ea-M7uUOk0M4.roa (hash: OTJn4Cjc6VH+vP9GyHGv33tTlfRUx9SD+YiIfBghf20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:92:77:7c:eb:f7:2f:00:ad:86:ab:16:66:e9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4bfcda761e4f2969f6343721879eca019eaede
        Validity
            Not Before: Oct 27 06:00:57 2026 GMT
            Not After : Oct 28 06:00:57 2026 GMT
        Subject: CN=e5478032b7cefb9aea0466537d65dcdccb435f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:eb:9f:59:dd:7f:a1:33:e8:25:05:ba:f1:
                    eb:85:3b:d3:8d:a4:aa:32:76:02:1f:10:88:a1:d2:
                    5a:68:83:a6:17:3e:bc:04:bc:c9:45:32:e0:a2:d7:
                    f7:6a:5b:52:03:3d:97:8a:9f:a7:1b:2e:3a:fa:5e:
                    51:6c:cf:78:d8:55:10:f0:03:74:4c:70:9a:41:09:
                    1f:42:16:01:b5:01:75:04:11:5e:e1:0d:39:16:ce:
                    1f:2c:0c:76:90:92:75:92:15:26:87:61:c5:1a:d9:
                    19:c9:b0:03:8d:df:5d:cc:5c:0b:ab:8f:46:8f:fd:
                    d6:ed:a0:57:fa:b3:fa:23:7a:3b:79:8b:6f:64:46:
                    96:b2:c0:72:9b:66:69:5b:f3:ea:9b:4b:a6:17:c8:
                    47:c7:1a:9e:cf:92:8a:b5:16:0c:2f:0e:8d:d7:a9:
                    70:34:ac:70:78:b0:db:64:32:88:cb:f1:60:f1:af:
                    24:43:aa:d8:33:a3:b3:69:b0:97:1a:3d:0d:69:e4:
                    57:af:a5:de:3b:52:7a:18:d6:98:3e:35:78:e4:1d:
                    8b:cf:9f:71:79:0e:d6:7d:0d:7c:d6:78:82:71:ea:
                    ba:41:ab:00:92:61:5e:0a:10:3f:5a:c0:0b:92:6d:
                    5b:64:13:68:99:e7:e5:13:ff:76:ff:a8:6a:1a:e3:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:80:32:B7:CE:FB:9A:EA:04:66:53:7D:65:DC:DC:CB:43:5F:70
            X509v3 Authority Key Identifier:
                keyid:5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:28:dc:74:4e:63:31:c3:49:e8:a8:f1:99:b4:86:65:e5:06:
         92:f8:11:08:ab:97:3b:fa:e2:62:9a:a2:c2:78:e0:33:0a:82:
         c1:c7:ea:94:63:d8:76:ed:6e:97:06:7f:3d:43:b4:d0:34:1e:
         98:ef:02:e9:23:b1:b3:fd:14:22:4c:d3:58:32:f8:07:ef:10:
         8b:6c:f2:ea:0b:9a:19:05:99:ae:5d:0a:d1:7b:99:f9:05:01:
         95:68:91:c5:dc:ff:c6:fb:3b:c6:b2:1b:c7:6f:08:83:68:a2:
         00:e1:5e:bc:41:2d:b1:6d:ca:51:63:ae:10:16:ab:87:ad:ab:
         e1:6e:7d:7e:23:97:6d:30:55:62:a4:6d:cc:46:c2:98:94:e7:
         82:a8:87:f6:f2:b0:ed:5c:2f:a0:94:fc:4f:a9:fd:f9:96:20:
         e5:70:2a:95:2f:46:0a:25:62:a4:80:c8:06:39:f5:e3:57:00:
         86:b1:c0:ee:fc:66:6c:25:6d:6c:f3:e0:47:db:2f:0d:c3:10:
         62:b3:f4:f5:f7:e7:a5:cd:ca:0d:03:ed:8f:2d:f8:e5:40:b5:
         21:f0:77:db:22:2c:bb:61:3b:f0:d2:74:56:28:49:13:1e:5e:
         d0:59:8e:79:d9:f1:0b:cf:63:3c:ad:7e:74:a0:97:23:ad:88:
         97:3d:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:50:37 2026 by rpki-client