Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
File:                     wSWw9XiOWBEj5eSfAB1S16f89a8.mft (raw, json)
Hash identifier:          oQE9W2TthCPeUdSnWHglTnaGLMH0N2OvyWGRLnkLEMA=
Subject key identifier:   09:19:CF:D3:7E:03:04:08:8D:EA:D3:C0:0B:34:30:82:78:D6:2D:D4
Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
Certificate issuer:       /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Certificate serial:       01A0DB7277DD228CFAE3024EBE8AEBFA5878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
Manifest number:          04CC
Signing time:             Sat 26 Sep 2026 02:01:47 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:47 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:47 +0000
Files and hashes:         1: vmkoqoQ_otv0F89R60xz-Vuo-2g.roa (hash: iq0VYDEcTpvgBWZIkkSwVuASLLS7URTHNl2Z2J0KqqE=)
                          2: wSWw9XiOWBEj5eSfAB1S16f89a8.crl (hash: it15J6j2UymUz24msDqDHe0Ac63pJbnGyM6z3H5xMao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:77:dd:22:8c:fa:e3:02:4e:be:8a:eb:fa:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
        Validity
            Not Before: Sep 26 02:01:47 2026 GMT
            Not After : Sep 27 02:01:47 2026 GMT
        Subject: CN=0919cfd37e0304088dead3c00b34308278d62dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:6e:43:cf:d2:47:bc:44:3d:da:ee:ac:45:
                    ca:5b:f6:2f:ef:00:ab:27:4d:be:84:1a:79:b5:1d:
                    57:b0:18:b4:6a:d5:8f:62:10:e1:f6:09:5d:55:6f:
                    c2:1b:8e:2f:e9:6d:ee:9e:d0:49:e1:07:bc:2d:31:
                    57:bd:15:c4:9c:65:bf:b3:34:10:04:c9:63:c9:da:
                    7c:09:3b:79:93:68:0d:43:3a:13:a8:cc:a7:f0:c9:
                    0d:28:cf:4d:5d:11:1d:0b:8a:1f:7c:6f:5d:39:ac:
                    08:49:f5:f5:8d:3e:9c:24:37:0a:c0:1d:63:4f:2f:
                    17:27:af:ca:66:0d:93:5d:da:83:a7:7f:d3:6d:a1:
                    59:14:40:7a:20:d0:3d:26:1a:4f:9a:91:82:9c:44:
                    fd:47:de:4d:8e:c5:8a:02:f7:54:d0:2b:8c:b2:b6:
                    48:4b:6b:a9:ac:7b:63:23:35:2a:90:49:66:f9:a5:
                    22:60:95:a4:7c:6b:19:93:3b:c5:e0:fa:2c:83:50:
                    2e:bc:e5:ee:8a:86:a7:ec:ad:fe:39:f5:7f:1a:28:
                    e3:bd:0b:ce:ee:82:a1:e5:58:4f:99:a0:79:3f:85:
                    d7:b7:d2:29:51:32:26:65:c5:b0:a9:24:d9:e3:a6:
                    f2:e8:3f:af:b3:34:47:cd:75:5c:59:a3:31:13:c8:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:CF:D3:7E:03:04:08:8D:EA:D3:C0:0B:34:30:82:78:D6:2D:D4
            X509v3 Authority Key Identifier:
                keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:57:cb:ee:27:2a:82:7f:95:21:11:5b:58:df:8c:0b:22:
         5d:73:05:cb:89:8b:ab:ff:07:a3:b8:b1:7e:41:22:c4:71:1e:
         7a:03:ee:ff:ac:b7:79:21:56:e8:f1:1b:66:c4:58:33:53:e3:
         fd:ba:3d:6d:94:23:94:6e:b5:a9:96:ff:95:a4:58:af:fe:c3:
         85:d2:46:53:8e:7d:b8:76:d6:c7:7c:74:86:16:ab:90:02:8b:
         80:d8:0f:4d:13:01:78:f7:bc:e0:83:32:45:42:6b:0c:c1:fd:
         00:3d:8e:37:b7:6c:a6:fb:87:0a:de:8f:69:ec:78:3f:e7:2b:
         5e:5b:6b:14:35:ed:46:98:68:04:db:62:0e:21:db:dd:00:07:
         ef:ad:0c:38:91:6f:a0:e5:f6:a7:7d:e1:df:f7:20:71:5a:5e:
         3f:fe:86:47:21:00:09:84:9a:97:07:29:15:3b:de:a0:4d:dc:
         04:3f:11:63:94:16:47:79:cf:42:cf:c9:53:e7:a0:15:19:75:
         39:23:f7:cf:fa:4a:61:f1:f0:28:58:46:85:2a:1f:05:5d:3b:
         be:38:ee:3a:e1:57:bc:8f:09:ed:76:97:40:d6:3b:75:11:74:
         67:3c:8c:aa:ce:bd:f3:79:68:21:38:de:9e:da:e7:b1:46:14:
         f8:c2:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:10 2026 by rpki-client