Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          osBBxC0Cd+OCAUuUoVnFqv05kFba0px80nx32qFePhQ=
Subject key identifier:   84:0E:1F:0C:72:43:0F:EC:E5:E7:EB:22:F0:AE:10:54:0A:9B:52:F3
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       01A0D64BBA21DD45DC2624B5E92653596CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          1151
Signing time:             Fri 25 Sep 2026 02:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:22 +0000
Files and hashes:         1: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (hash: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: gRtFR+62vOt8WCVyyBrjUSGk+ia7f6+OH34Oa6dXh18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:ba:21:dd:45:dc:26:24:b5:e9:26:53:59:6c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: Sep 25 02:01:22 2026 GMT
            Not After : Sep 26 02:01:22 2026 GMT
        Subject: CN=840e1f0c72430fece5e7eb22f0ae10540a9b52f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:88:75:16:72:9e:a1:15:76:93:d6:83:6c:
                    e4:ae:31:30:e5:2b:ad:e5:cc:b0:e5:53:58:36:fa:
                    b5:04:45:5a:e9:24:39:41:b4:91:4a:8e:a6:07:34:
                    b5:8b:13:c5:4c:e2:f0:e3:35:f2:e0:e9:e3:4c:85:
                    47:ad:c6:37:cd:04:12:be:d8:7a:af:74:ac:f0:9d:
                    f4:c6:0d:2f:3b:99:91:f0:7d:be:4e:10:23:f2:66:
                    cf:a7:cd:44:9e:d2:34:ef:3b:f1:58:40:e1:33:7d:
                    6d:0b:60:32:85:8d:8b:e8:68:67:36:3b:f6:cb:fc:
                    c7:5f:86:c7:fd:bc:2e:ca:4a:9d:6d:16:fb:bd:b9:
                    af:0c:8b:23:fb:4a:7c:b3:3a:28:63:1b:cd:b5:64:
                    3a:9e:e7:e0:c8:eb:05:81:c9:d2:eb:f4:08:a5:1e:
                    cc:db:3c:99:5b:eb:c4:b1:f8:db:cc:da:19:99:93:
                    df:71:1e:b4:5c:e0:ec:07:a4:32:0b:5a:be:e7:6a:
                    0f:61:9c:cf:6a:0d:01:07:d7:5b:c5:e6:87:17:48:
                    16:07:8f:5a:40:01:6e:fd:3a:ba:04:8d:58:2a:55:
                    f0:4d:84:ac:02:9b:dd:34:c3:c5:57:63:aa:f4:b5:
                    f8:52:30:1d:6d:6a:fd:2b:51:72:96:4d:37:73:6a:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0E:1F:0C:72:43:0F:EC:E5:E7:EB:22:F0:AE:10:54:0A:9B:52:F3
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:05:b0:36:3c:fd:4f:14:51:58:ed:cd:42:40:e0:29:f5:95:
         63:6d:ef:79:67:59:be:16:da:81:13:07:70:35:4e:cd:3d:d1:
         dc:71:ec:f9:b7:c6:71:0d:6d:8d:00:e9:b4:75:31:0d:6d:0a:
         a4:b0:16:fc:b3:4e:c2:43:8f:eb:90:06:03:fe:49:05:a0:99:
         35:4b:da:79:02:26:f9:3a:74:3c:3c:fe:86:6e:ce:72:c8:23:
         de:47:c8:8f:91:ee:02:63:e9:c9:9a:57:31:6f:ee:e5:84:a0:
         30:21:e4:00:4f:a6:b8:54:16:7e:4b:03:ec:02:25:42:dd:7f:
         97:61:c5:ee:05:94:dd:32:8a:db:4f:39:3c:39:dc:a5:38:0d:
         83:70:a8:da:5c:9d:19:fe:28:78:32:25:2b:8d:a1:5c:86:c1:
         a8:f2:42:0c:77:07:9b:37:59:39:5d:a3:da:cf:f4:64:50:58:
         1e:0e:ee:b6:4e:2c:b7:ec:c7:b6:53:6f:92:61:b5:fe:ab:c0:
         0d:00:7e:24:4a:84:83:ee:e5:72:06:23:ae:7f:11:97:38:bc:
         a7:7e:20:bb:64:7d:27:7d:af:ea:29:55:62:81:8b:ac:4a:27:
         e8:81:36:22:8f:82:a1:e7:de:2f:cf:9c:4a:d7:8c:9f:1f:d9:
         af:6d:cf:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS7oh3UXcJiS16SZTWWz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4
M2E3YjMwHhcNMjYwOTI1MDIwMTIyWhcNMjYwOTI2MDIwMTIyWjAzMTEwLwYDVQQD
Eyg4NDBlMWYwYzcyNDMwZmVjZTVlN2ViMjJmMGFlMTA1NDBhOWI1MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWSIdRZynqEVdpPWg2zkrjEw5Sut
5cyw5VNYNvq1BEVa6SQ5QbSRSo6mBzS1ixPFTOLw4zXy4OnjTIVHrcY3zQQSvth6
r3Ss8J30xg0vO5mR8H2+ThAj8mbPp81EntI07zvxWEDhM31tC2AyhY2L6GhnNjv2
y/zHX4bH/bwuykqdbRb7vbmvDIsj+0p8szooYxvNtWQ6nufgyOsFgcnS6/QIpR7M
2zyZW+vEsfjbzNoZmZPfcR60XODsB6QyC1q+52oPYZzPag0BB9dbxeaHF0gWB49a
QAFu/Tq6BI1YKlXwTYSsApvdNMPFV2Oq9LX4UjAdbWr9K1Fylk03c2qpNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQOHwxyQw/s5efrIvCuEFQKm1LzMB8GA1UdIwQY
MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt
MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi
LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgWwNjz9
TxRRWO3NQkDgKfWVY23veWdZvhbagRMHcDVOzT3R3HHs+bfGcQ1tjQDptHUxDW0K
pLAW/LNOwkOP65AGA/5JBaCZNUvaeQIm+Tp0PDz+hm7Ocsgj3kfIj5HuAmPpyZpX
MW/u5YSgMCHkAE+muFQWfksD7AIlQt1/l2HF7gWU3TKK2085PDncpTgNg3Co2lyd
Gf4oeDIlK42hXIbBqPJCDHcHmzdZOV2j2s/0ZFBYHg7utk4st+zHtlNvkmG1/qvA
DQB+JEqEg+7lcgYjrn8Rlzi8p34gu2R9J32v6ilVYoGLrEon6IE2Io+CoefeL8+c
SteMnx/Zr23PAQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:50:58 2026 by rpki-client