Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          FdtAJS3JbWHp3HTODdJgbukRw/lOEZmJLJU2fKD+dLY=
Subject key identifier:   26:C2:81:53:71:E3:87:BB:EE:F5:00:C0:3B:7F:2E:A1:DF:B4:7B:3F
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       01A0DFF41126E1061DAB838F1A80B9992331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          08F1
Signing time:             Sat 26 Sep 2026 23:01:49 +0000
Manifest this update:     Sat 26 Sep 2026 23:01:49 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:49 +0000
Files and hashes:         1: 62PT7sxdgGjHV3OVRPh7QUfGyJE.roa (hash: byTcXWsJhZ5Kbxnpg94vw37iP5ONtgL7nIpG2rEwMlc=)
                          2: G85Xi6LQh9YeTjxANf7Y_P92uAU.roa (hash: nfrcxJEREXgjydTZq0oYL3+pGSmL4O7eo8LJD41jFaA=)
                          3: Q_2dI4MAgteIfC8fliTVnwdDpEo.roa (hash: FeIbDHDY5bISxy8cTg5A5vpLXI7Ze/YbhEveF3uIwyw=)
                          4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: rTiF2LmSEjQKbXlkUAvmU6eKc20oS/a90aPH86+13ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f4:11:26:e1:06:1d:ab:83:8f:1a:80:b9:99:23:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: Sep 26 23:01:49 2026 GMT
            Not After : Sep 27 23:01:49 2026 GMT
        Subject: CN=26c2815371e387bbeef500c03b7f2ea1dfb47b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:11:4d:8e:b2:e1:bb:c4:eb:03:33:5a:91:
                    25:6b:47:f7:1c:f8:2f:3a:30:26:c4:dd:ed:fe:67:
                    8a:6e:d7:18:c5:b5:f4:a8:c0:2a:25:f3:be:a6:80:
                    80:00:30:05:8c:24:ed:00:c4:6d:7f:b6:f5:98:97:
                    21:86:51:63:89:34:00:23:9b:a6:c6:25:ee:62:3a:
                    a1:d4:22:69:9e:80:0f:40:6b:c1:14:14:44:4b:ac:
                    04:c4:d4:eb:27:3b:1d:86:55:34:a4:15:1e:1a:67:
                    9a:c9:93:54:89:b2:d7:46:29:8d:e7:c1:1f:80:26:
                    76:66:e6:d4:b8:f4:22:df:3f:73:2d:ff:20:93:7f:
                    12:fc:26:a4:17:00:15:ba:8d:96:03:e6:84:82:42:
                    d1:00:c8:32:66:c6:02:37:30:59:f5:f3:1f:b2:ff:
                    16:f0:51:0e:9e:43:86:ad:97:bd:d9:74:0d:28:28:
                    0e:51:18:a7:a9:cf:89:d4:f2:dd:62:c2:fc:ec:a9:
                    46:76:1a:35:95:28:86:fe:09:15:43:f1:a4:6f:f5:
                    5b:33:ee:09:1f:b4:97:48:4b:2e:62:02:75:d0:8d:
                    72:4a:3c:0d:23:3b:03:e2:62:d8:7b:0b:90:e0:12:
                    c7:2e:f7:ff:7a:cd:1e:69:f5:f5:f3:07:a3:fc:d4:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C2:81:53:71:E3:87:BB:EE:F5:00:C0:3B:7F:2E:A1:DF:B4:7B:3F
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:d7:89:24:7f:26:bb:33:2e:93:4c:b1:c4:94:39:12:f1:
         93:88:6e:1e:53:bd:e0:75:44:16:1d:77:94:a8:cd:fb:79:0e:
         ab:40:8e:f0:b8:52:01:e5:c8:ed:68:87:aa:27:c9:05:b5:03:
         9f:3d:58:bd:f5:1a:e7:07:d5:7d:f5:12:9e:b6:e0:22:e7:e7:
         c9:b8:3c:ba:f5:e9:99:f6:bf:c2:e3:14:55:52:23:56:59:66:
         95:bc:0d:e1:5b:bd:db:eb:26:b9:1b:6c:23:14:1c:c3:8d:fd:
         0d:45:8a:72:22:80:37:3c:13:b4:47:1b:fd:95:67:c8:f0:e7:
         f2:ff:d6:bf:fd:ed:63:cb:2d:29:b4:33:1c:19:4f:23:de:bd:
         f3:d7:53:69:85:de:da:6e:c8:ca:07:70:fe:15:7e:5a:87:9c:
         df:96:47:a6:2d:c8:27:13:dc:15:bb:7e:ae:1a:55:a3:d6:12:
         bf:e5:aa:a8:12:ec:ac:d0:69:b0:32:be:1b:9a:a0:a1:cf:e5:
         e3:da:22:09:14:9f:f2:69:25:6e:9d:05:e9:8c:70:0d:6c:7e:
         83:cb:70:2c:a8:55:63:34:81:3f:f1:a6:24:14:a9:1c:2f:bb:
         71:24:01:75:44:1f:8c:ba:2d:ef:16:bf:43:8b:2b:f8:b3:c7:
         c4:a5:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:38 2026 by rpki-client