Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          PySFiOBTOLeP2H40i3xba8LNEGE6FP/s3vjtIv+x9cQ=
Subject key identifier:   AD:E3:EA:9B:60:57:F9:35:B3:17:25:09:EB:71:C2:73:98:1E:7C:48
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       01A100913232DA52319FF5495AF8AFCA7CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          1A84
Signing time:             Sat 03 Oct 2026 07:01:17 +0000
Manifest this update:     Sat 03 Oct 2026 07:01:17 +0000
Manifest next update:     Sun 04 Oct 2026 07:01:17 +0000
Files and hashes:         1: aNasyvhnecUaGBiJJmKLy86blxw.roa (hash: SzBG9cwAKB7DYZM2SXTm4Asbf+eO0ZOQ6ca0yvr84RI=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: mdJ97qT9XlzdOOOQUA9a8WKo/wzWhGg6rvo5SgyPveE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:91:32:32:da:52:31:9f:f5:49:5a:f8:af:ca:7c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Oct  3 07:01:17 2026 GMT
            Not After : Oct  4 07:01:17 2026 GMT
        Subject: CN=ade3ea9b6057f935b3172509eb71c273981e7c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:72:ee:3b:71:aa:d7:2e:72:3a:8d:5f:a3:34:
                    40:c3:9a:40:a9:4c:00:83:24:f6:03:9f:36:5d:e5:
                    4f:85:90:24:ab:f9:8d:27:fd:3c:16:95:27:fa:00:
                    4b:0c:fb:7a:c3:4b:68:1c:53:b9:3d:db:60:b1:1f:
                    aa:b6:a6:a0:23:2f:86:83:c3:65:95:3b:f4:7b:7b:
                    64:29:0a:61:ba:4e:94:c1:ef:17:d4:3b:40:67:d2:
                    80:70:8a:6c:34:aa:07:d7:57:75:7a:f2:92:11:ef:
                    98:fe:6e:41:ac:09:ed:29:fa:e8:2a:0e:98:cf:6c:
                    8e:a5:2c:fc:64:70:70:b2:ea:e0:ed:c1:ae:df:0b:
                    6e:21:27:10:a0:29:27:a9:91:5f:2e:ca:df:57:43:
                    29:44:82:fc:c2:ac:3c:20:e2:2e:67:2f:90:36:fb:
                    5e:54:d7:3f:98:f7:fb:b4:a6:bd:3e:42:de:56:e9:
                    b6:8e:ae:7f:b1:fc:75:cb:10:c5:57:a3:ce:ae:f8:
                    af:e2:0c:d8:22:d5:de:bd:d6:28:5a:b0:7c:e5:b5:
                    e4:4d:3a:d7:c7:b7:46:a9:8f:2a:de:4e:6f:ef:9a:
                    e1:b1:a0:e1:5e:49:a9:37:fa:2e:19:f4:28:53:af:
                    3a:2d:af:f4:3d:0e:1e:42:90:37:0a:87:45:93:9e:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:EA:9B:60:57:F9:35:B3:17:25:09:EB:71:C2:73:98:1E:7C:48
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:58:bc:82:c4:59:42:7d:7f:54:52:ed:ad:58:d5:ed:fd:fd:
         ae:e8:cd:f7:76:55:38:62:ac:e0:29:7a:8e:74:e1:96:c6:89:
         72:64:1c:fe:a9:cc:a1:fa:38:a8:05:dd:a2:03:ca:dd:b5:d8:
         12:c1:49:ef:32:f4:43:60:70:fb:65:d9:23:1b:a8:70:e8:21:
         df:9d:11:32:7f:73:e0:c3:ff:c7:ca:25:5a:e1:60:f9:ad:68:
         62:a1:25:73:fb:a0:b2:e1:e0:1e:db:8d:94:bb:ec:d1:c6:e9:
         65:da:0a:0b:d7:60:05:f3:3f:07:d0:2d:32:a9:b0:57:6b:60:
         cc:11:e3:69:7e:5e:61:dd:f5:14:a0:94:de:cc:81:55:eb:38:
         24:b8:a9:05:71:8d:46:88:7e:ca:cd:11:92:1f:bf:8e:a2:45:
         c4:50:37:d5:ec:27:f9:01:17:47:01:5f:73:2f:c0:3a:c5:71:
         06:39:c1:1c:34:ef:1b:56:58:ea:b5:45:4a:6c:13:e8:f1:84:
         c4:05:c7:12:02:bd:9f:99:bb:10:67:1f:dc:9e:3d:38:ae:d8:
         24:90:e0:dc:81:3a:19:93:ce:69:43:0e:5e:51:f6:15:5b:60:
         c1:96:52:e4:5e:76:cf:e3:a7:71:55:15:fe:6c:5c:f5:71:8a:
         0b:90:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:08:36 2026 by rpki-client