Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          q0etvvLibGoOJdQOfFhJGf5FjmUO7/x0J0EFFoOEOYA=
Subject key identifier:   0C:D8:6A:FB:B4:0C:6F:32:20:BC:DE:FB:7A:BD:79:55:26:8F:D4:76
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       01A0D3B88DBFF090783CA8B8B164B65213F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1A7F
Signing time:             Thu 24 Sep 2026 14:01:22 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:22 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:22 +0000
Files and hashes:         1: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (hash: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8=)
                          2: TURon6JiNs0lgTZSDniUslEGz9E.roa (hash: eXgvunaSwK3PiegbOluPRt7fixoWf2ckeL+bp42GNpc=)
                          3: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (hash: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: GoA+qxIgtGBh1SfhPWaONOV2/x/vFI9ydczjSdUgDHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:8d:bf:f0:90:78:3c:a8:b8:b1:64:b6:52:13:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Sep 24 14:01:22 2026 GMT
            Not After : Sep 25 14:01:22 2026 GMT
        Subject: CN=0cd86afbb40c6f3220bcdefb7abd7955268fd476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:c1:6f:fa:ba:dc:cd:5d:0b:f9:6a:24:b7:
                    8e:56:f1:07:84:48:20:8c:5a:3b:c3:15:d4:ae:33:
                    f1:57:ca:34:0e:39:de:ed:0d:80:77:07:d9:01:f2:
                    3b:87:0f:6f:7a:cc:c4:60:1b:d9:ea:db:6c:f3:11:
                    20:17:75:64:61:61:9e:b2:59:2f:3a:45:57:df:d4:
                    b9:ef:b4:db:b8:93:90:31:b7:11:0b:3a:e6:65:0c:
                    07:4b:31:d0:4e:17:72:2e:5a:5b:1b:1f:14:47:ce:
                    65:4a:ae:a9:1e:22:90:9a:45:33:bc:e8:b7:3b:59:
                    4f:95:8f:e5:08:82:81:08:72:5d:97:fb:c1:04:53:
                    76:c7:02:d8:ca:62:6d:fc:37:1b:ab:3c:9e:9a:33:
                    0e:f7:e1:d2:ff:4f:9b:00:13:80:9d:95:51:f1:df:
                    23:fd:7a:bb:c9:77:51:45:cc:d2:1a:78:4b:bd:8b:
                    2a:76:98:74:09:1d:a5:58:19:4d:f7:05:a9:3d:ee:
                    fb:57:60:85:a6:74:9d:d0:75:5e:2d:e4:fe:7d:67:
                    39:65:3b:59:71:43:d0:0b:26:c7:12:97:95:fa:7f:
                    11:9a:af:de:e0:54:3e:2e:ba:61:4f:8b:26:37:10:
                    c5:90:2b:28:dd:10:a5:98:6d:2e:d7:03:ee:f1:36:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:6A:FB:B4:0C:6F:32:20:BC:DE:FB:7A:BD:79:55:26:8F:D4:76
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:43:dd:11:96:01:45:71:fa:5c:60:aa:7f:e3:7e:06:5f:bb:
         a9:c0:c5:6f:f1:d3:26:fe:05:a7:3b:fd:83:4f:78:cd:ad:c3:
         da:dd:43:5e:da:a7:f3:94:f2:1e:88:2d:a0:7e:ba:e2:28:db:
         fe:26:90:f1:b5:92:f8:6e:53:bb:7a:04:43:3b:6d:c6:d4:fb:
         9a:fe:1b:ea:b0:a1:dc:46:db:fc:12:a3:15:6e:ef:87:21:2d:
         a2:24:41:6d:c4:59:30:91:cc:81:49:18:73:4d:60:c1:ce:b6:
         d8:c5:8a:d3:f8:7e:b6:a4:bc:b4:d1:25:d0:d0:43:e5:f0:b5:
         1e:1d:36:9f:bd:46:b2:65:ef:19:45:a6:f2:4b:71:98:1b:97:
         13:38:67:a6:c3:11:a3:51:e6:65:10:85:f8:c1:70:ff:5d:14:
         36:ec:9f:7d:27:90:a7:7f:d6:36:d3:40:96:94:b9:29:38:c2:
         77:fd:e2:2e:ef:a0:17:cf:f5:cd:ef:57:33:fa:f4:15:5b:13:
         f2:a7:42:37:48:27:7e:c8:b8:39:af:5e:92:0e:7e:50:fb:f4:
         14:49:ef:13:b5:b5:e0:f2:df:00:b2:41:2a:e9:7e:af:31:d4:
         b6:b9:20:92:d0:32:ea:2b:34:62:70:a4:4a:49:c2:c0:bf:c1:
         69:e0:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:01:47 2026 by rpki-client