Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File:                     wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier:          SR7rbIhsNj8d+NIcRpwwpaZDNpu/jjRLJSl0/F4bqu4=
Subject key identifier:   B6:01:86:6A:AA:96:B1:D5:52:AE:C8:DC:F6:AD:84:F8:A5:7F:CD:8E
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer:       /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial:       01A0CD47F767930FD61CAC71706DACC03BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 08:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:40 +0000
Files and hashes:         1: CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa (hash: ZsAGggLHZ5c9tfsaL3W8Tzgr18wNOwRPUVw/KIp0Zec=)
                          2: UTrB-eqS9W6US57i4mIaxwF_LT4.roa (hash: /qJvylYZag2Wv3AD9lsMVc7eYv0lH1eOQvu0T60dUUc=)
                          3: neQNKLpCfakNl9D-xr1vgggjRHw.roa (hash: fXE9P5Vbl/ZNMcrpupVcZ1b+IXnjJzLD2Jyf3B1lxGU=)
                          4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: CoeEB3GgVFfX7kH9r5jX8ocVXbLdUO5pGY1FxWOazl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:f7:67:93:0f:d6:1c:ac:71:70:6d:ac:c0:3b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
        Validity
            Not Before: Sep 23 08:00:40 2026 GMT
            Not After : Sep 24 08:00:40 2026 GMT
        Subject: CN=b601866aaa96b1d552aec8dcf6ad84f8a57fcd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:f3:f4:b5:8d:a8:e8:b5:2b:b9:be:23:65:
                    d3:7a:11:89:17:29:c9:e5:7f:d5:ea:11:5e:67:13:
                    fc:7f:68:66:3f:63:c8:7b:1f:27:7a:80:4a:b7:93:
                    c7:f0:8e:47:0f:c4:b8:90:fa:8f:4f:6b:8c:a7:b9:
                    e0:71:0b:7a:d7:fa:da:82:7f:23:38:a0:29:0c:6e:
                    20:7e:07:fe:42:9b:51:73:4f:2a:ce:fd:c8:80:ae:
                    c4:66:9b:e9:ed:01:36:a2:7f:ef:e2:53:e1:2b:e2:
                    87:26:16:36:d5:6d:12:9a:01:8e:65:3f:14:12:82:
                    44:50:b9:30:b4:f3:c9:d5:cf:ac:ef:44:00:41:a7:
                    d4:37:45:94:9e:75:5b:02:d6:3f:7f:bb:8c:82:d9:
                    34:c7:46:13:0b:12:d4:11:e7:d8:b2:00:c4:39:5e:
                    07:ab:ad:01:eb:4e:3b:7b:eb:64:b8:70:7b:89:89:
                    9f:69:98:4a:9e:46:83:6a:d9:3e:8c:88:40:cf:46:
                    06:61:8f:6a:bf:f3:db:03:49:ad:82:ed:44:a6:12:
                    8b:07:d9:5a:a5:ca:18:f2:1a:c7:86:59:e4:d0:19:
                    b1:89:50:ca:c1:7e:18:2a:f0:46:48:ef:58:56:43:
                    e9:42:c5:d2:3c:15:6c:87:b6:c4:25:b3:25:c6:0c:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:01:86:6A:AA:96:B1:D5:52:AE:C8:DC:F6:AD:84:F8:A5:7F:CD:8E
            X509v3 Authority Key Identifier:
                keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:4d:3b:6e:ac:ae:c6:61:ad:49:a4:3a:8f:33:20:b1:08:
         54:34:a9:f8:6e:82:7c:bd:1d:6c:c9:66:88:4a:0d:c4:8f:76:
         99:f5:a1:55:31:01:a8:38:9f:00:7c:a3:04:11:57:ca:8e:65:
         e4:69:2e:40:27:17:0c:7a:41:90:9b:07:20:43:6c:a7:47:8c:
         8b:dc:00:ed:64:5f:57:97:b4:1c:af:3f:d7:98:ff:7d:02:3d:
         c8:3e:a4:1a:9a:26:cf:75:0c:9a:04:33:cf:99:8e:61:ed:0b:
         92:f1:f9:d9:11:68:60:62:36:01:b4:fa:a6:d4:02:f5:23:5b:
         f4:6c:c2:e2:de:7a:e6:e8:8f:0e:4f:21:7c:7c:26:40:92:78:
         e7:55:be:b2:c4:70:71:a9:ce:cb:62:b3:92:23:ff:17:d1:b2:
         b3:4c:ca:0a:18:c5:31:e2:89:76:41:44:c1:a1:49:aa:44:25:
         95:0d:59:4f:fa:3c:75:d7:84:b3:85:36:1d:17:4d:2f:7a:c9:
         4c:a7:17:e7:82:ba:e1:53:55:b0:67:10:14:5a:3e:b3:f5:ef:
         90:07:12:eb:20:46:01:5c:d7:c9:01:0e:dc:92:1d:1b:72:62:
         ba:f5:02:b8:ee:6a:4e:8b:2e:d6:b7:e0:d8:71:b1:42:94:95:
         35:b6:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:05:32 2026 by rpki-client