Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          /AnfgzZ4XFfa5rbj8G+nQE2XAXpOlrjuEmCtfwM8cR8=
Subject key identifier:   5D:B3:A5:2E:C4:2F:2D:0B:AB:9B:B7:15:76:03:97:8E:2C:C6:D2:8C
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       01A0DA2835393063EB569902E493DBDBCD10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          18BC
Signing time:             Fri 25 Sep 2026 20:01:03 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:03 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:03 +0000
Files and hashes:         1: FrTYd2n1mPMmnQqlw_GA42S0gns.roa (hash: 4LYehQSenwwS3QpKE9QMEjIzFleWyGwk4ZhWD2c4154=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: +sfv/aPJKXHGM5h2Pr3hsrEy76+MTerJytKMCsUr0HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:35:39:30:63:eb:56:99:02:e4:93:db:db:cd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Sep 25 20:01:03 2026 GMT
            Not After : Sep 26 20:01:03 2026 GMT
        Subject: CN=5db3a52ec42f2d0bab9bb7157603978e2cc6d28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:0c:73:88:fd:dc:f4:af:e9:61:86:c6:f2:
                    5b:70:4d:8b:07:eb:72:ce:02:52:fd:ff:27:1b:06:
                    19:0a:19:ff:79:55:1e:82:2f:eb:9a:3f:e3:33:db:
                    34:dd:7d:25:cd:79:33:b5:ee:78:62:9c:0c:a3:a1:
                    bb:9f:0c:59:3a:6b:b1:33:4b:a5:60:f8:24:46:f2:
                    8d:d3:78:21:dd:78:69:d9:fa:2e:61:8e:b9:b6:48:
                    bd:80:4a:a1:dd:eb:6e:4a:6c:14:3e:78:de:a1:94:
                    d4:9d:ff:25:5b:7b:1a:6b:2e:77:f2:51:47:01:3f:
                    0e:5d:64:0d:e9:33:1e:93:5a:51:85:33:01:aa:c0:
                    6c:69:48:c6:31:9f:d1:61:9b:20:7b:7d:8e:a6:6f:
                    3d:53:92:c6:94:0d:07:d8:c9:c7:5b:a9:38:d7:10:
                    cd:21:ee:db:3d:2e:3f:57:93:78:bb:05:94:97:23:
                    2f:84:51:7b:00:09:fc:16:3b:fe:2d:82:90:4c:39:
                    ba:d5:98:5c:57:06:d3:55:0f:50:c7:f3:44:ad:5c:
                    15:b9:d9:f8:b7:93:97:73:47:e8:8d:b0:37:74:e4:
                    10:63:37:0a:bb:79:3b:a7:fe:70:8f:b7:52:ae:51:
                    32:f7:02:ab:ab:fc:ee:a9:81:74:62:64:10:cc:34:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B3:A5:2E:C4:2F:2D:0B:AB:9B:B7:15:76:03:97:8E:2C:C6:D2:8C
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:f6:eb:b9:25:43:bd:30:e1:b9:f5:0f:01:d0:48:b1:da:
         7b:dd:44:29:f1:58:61:97:fc:87:00:80:c5:b3:be:82:74:40:
         35:de:4d:43:47:62:bc:38:00:9b:a6:da:c2:a4:22:bc:97:6f:
         33:9b:e8:bc:05:49:84:bf:c9:2a:66:86:e7:db:a6:50:8a:48:
         ed:56:35:52:d5:6e:d3:d6:70:e1:f5:82:5b:29:fc:9c:eb:b9:
         8f:e8:e6:93:4d:bd:18:67:c1:eb:32:26:59:ec:d9:dd:fa:36:
         3f:b8:bb:a4:62:04:0f:02:f0:75:b7:13:3e:7c:e0:f3:45:6f:
         3f:e4:3c:b5:af:4d:f5:14:be:07:0b:e1:5d:d7:76:d1:bc:01:
         6b:4b:8b:a4:e6:ac:ee:96:13:57:d0:a5:19:1f:74:02:44:b5:
         fc:c2:a5:1d:84:03:b6:cc:7d:86:61:a6:34:4d:97:00:96:25:
         d7:76:e7:33:b5:43:00:d9:6b:e2:76:0d:b8:7b:7a:04:d3:75:
         18:72:f2:86:8c:af:10:70:55:81:7a:72:d2:21:75:cd:54:76:
         e4:59:7a:23:cf:49:27:90:9e:39:20:7d:e7:ce:b2:5e:d6:68:
         37:84:e3:56:22:c7:0a:9a:bc:97:1d:60:5f:cc:13:f0:05:b4:
         57:40:c0:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKDU5MGPrVpkC5JPb280QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOGExNjUyMmVjMzRiMWM1YmM0NzA4MjA2Y2MxOTYzYTE1
YmJkYjEwHhcNMjYwOTI1MjAwMTAzWhcNMjYwOTI2MjAwMTAzWjAzMTEwLwYDVQQD
Eyg1ZGIzYTUyZWM0MmYyZDBiYWI5YmI3MTU3NjAzOTc4ZTJjYzZkMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z8Mc4j93PSv6WGGxvJbcE2LB+ty
zgJS/f8nGwYZChn/eVUegi/rmj/jM9s03X0lzXkzte54YpwMo6G7nwxZOmuxM0ul
YPgkRvKN03gh3Xhp2fouYY65tki9gEqh3etuSmwUPnjeoZTUnf8lW3saay538lFH
AT8OXWQN6TMek1pRhTMBqsBsaUjGMZ/RYZsge32Opm89U5LGlA0H2MnHW6k41xDN
Ie7bPS4/V5N4uwWUlyMvhFF7AAn8Fjv+LYKQTDm61ZhcVwbTVQ9Qx/NErVwVudn4
t5OXc0fojbA3dOQQYzcKu3k7p/5wj7dSrlEy9wKrq/zuqYF0YmQQzDSAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2zpS7ELy0Lq5u3FXYDl44sxtKMMB8GA1UdIwQY
MBaAFFuKFlIuw0scW8RwggbMGWOhW72xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQt
Y2FjOGVkNzZhODQ0LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQtY2FjOGVkNzZhODQ0
LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvK/267kl
Q70w4bn1DwHQSLHae91EKfFYYZf8hwCAxbO+gnRANd5NQ0divDgAm6bawqQivJdv
M5vovAVJhL/JKmaG59umUIpI7VY1UtVu09Zw4fWCWyn8nOu5j+jmk029GGfB6zIm
WezZ3fo2P7i7pGIEDwLwdbcTPnzg80VvP+Q8ta9N9RS+BwvhXdd20bwBa0uLpOas
7pYTV9ClGR90AkS1/MKlHYQDtsx9hmGmNE2XAJYl13bnM7VDANlr4nYNuHt6BNN1
GHLyhoyvEHBVgXpy0iF1zVR25Fl6I89JJ5CeOSB9586yXtZoN4TjViLHCpq8lx1g
X8wT8AW0V0DAng==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:44 2026 by rpki-client