Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File:                     wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier:          cYOyTPqaE7tOe1BR+sxr6mmMqTvfx9XIRPLfQ1EcNbo=
Subject key identifier:   82:EB:EE:DA:A1:67:C2:AB:F2:B0:FC:2B:AF:60:37:CF:AD:EF:F4:9E
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer:       /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial:       01A108EFA5A89DAB32A456C55B53A5670380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number:          1A8F
Signing time:             Sun 04 Oct 2026 22:01:25 +0000
Manifest this update:     Sun 04 Oct 2026 22:01:25 +0000
Manifest next update:     Mon 05 Oct 2026 22:01:25 +0000
Files and hashes:         1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
                          2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
                          3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 3Zr9arAPIz5FlTx6Xj+hzRNmAUZV/vmY8aNOlIIM6k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:ef:a5:a8:9d:ab:32:a4:56:c5:5b:53:a5:67:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
        Validity
            Not Before: Oct  4 22:01:25 2026 GMT
            Not After : Oct  5 22:01:25 2026 GMT
        Subject: CN=82ebeedaa167c2abf2b0fc2baf6037cfadeff49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:2c:3b:a6:13:1e:dc:11:5f:2e:f4:e0:50:
                    41:90:59:ab:ab:b8:bd:ad:f9:3c:15:3a:39:1c:d8:
                    49:34:9c:e5:ea:ea:2e:d8:c3:47:e4:36:c5:21:a3:
                    52:ef:35:fd:4e:47:83:45:3f:54:9f:ff:c3:f7:42:
                    7f:e4:1e:e2:9c:62:5a:ac:e2:c5:59:24:e7:18:1f:
                    04:14:ca:e8:82:03:ea:00:31:e7:3b:c0:89:34:e3:
                    ce:fb:f0:53:bf:e1:7d:b1:0c:a0:a6:7e:d6:10:10:
                    68:fe:fc:27:95:7b:74:75:1d:ae:7f:16:79:e3:24:
                    d4:8d:2b:44:0f:32:d9:fc:8e:5a:37:94:7a:b7:43:
                    eb:ff:f1:c0:55:61:80:c9:2a:49:4a:3f:39:b5:4d:
                    22:e9:f8:13:52:a7:eb:f5:bc:76:51:e9:16:95:8b:
                    f1:bb:d4:b3:e0:31:f8:f7:04:3c:6a:44:bb:a9:ef:
                    52:fd:cf:eb:9b:98:5f:d8:0a:06:dc:00:1f:19:ea:
                    1b:80:05:7a:8e:1e:cc:19:ad:7b:cb:b6:21:04:48:
                    c3:ec:f3:83:7d:f9:69:df:66:ed:a0:fa:77:3e:48:
                    93:10:39:67:f6:29:a7:c9:d1:81:62:7b:de:47:e4:
                    f4:77:be:de:ee:3f:de:5c:24:d3:13:fa:3e:f5:2a:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:EE:DA:A1:67:C2:AB:F2:B0:FC:2B:AF:60:37:CF:AD:EF:F4:9E
            X509v3 Authority Key Identifier:
                keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:92:62:de:39:9b:c4:a7:dc:5e:3d:fb:c1:5a:7a:67:58:
         bc:61:41:dc:e9:f5:58:bd:61:64:e4:51:0a:ea:fd:30:ac:7e:
         8b:78:3d:fc:ab:08:9b:fb:a3:6b:39:73:6b:52:ba:ab:ee:2b:
         d5:59:f7:be:4b:7d:92:5f:6c:3e:4b:fa:ae:70:e8:f8:61:60:
         ce:f6:96:b6:33:51:6d:48:68:62:7f:83:57:a1:e5:44:58:0c:
         1a:b6:48:23:9d:ac:3c:ee:ce:a9:e2:68:5b:1b:51:8e:93:af:
         35:85:0c:ee:41:fa:7d:7d:3f:9e:be:1f:23:33:40:26:b3:53:
         4e:b1:fd:f5:ee:69:cf:d7:92:ad:6e:e9:f1:1c:43:c6:fa:f1:
         77:96:03:c2:bf:bf:3b:0a:f8:38:8e:6b:45:85:a5:ef:51:29:
         f4:c6:3e:32:cc:c5:3e:b9:f3:e4:73:3f:7c:bf:66:a0:54:79:
         27:b9:ed:de:35:8f:eb:6e:9e:77:9f:2a:75:08:62:ca:9a:96:
         1a:0a:6c:dc:29:ce:f5:dd:97:57:8c:11:9e:00:46:0f:18:ca:
         f3:83:a6:5b:20:92:3f:dc:5b:35:9e:51:86:6a:b1:63:d8:ab:
         a8:50:03:9f:d5:db:7d:bf:0e:6a:68:85:d2:60:11:97:b3:84:
         5f:2c:07:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEI76WonasypFbFW1OlZwOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjYxMDA0MjIwMTI1WhcNMjYxMDA1MjIwMTI1WjAzMTEwLwYDVQQD
Eyg4MmViZWVkYWExNjdjMmFiZjJiMGZjMmJhZjYwMzdjZmFkZWZmNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhwsO6YTHtwRXy704FBBkFmrq7i9
rfk8FTo5HNhJNJzl6uou2MNH5DbFIaNS7zX9TkeDRT9Un//D90J/5B7inGJarOLF
WSTnGB8EFMroggPqADHnO8CJNOPO+/BTv+F9sQygpn7WEBBo/vwnlXt0dR2ufxZ5
4yTUjStEDzLZ/I5aN5R6t0Pr//HAVWGAySpJSj85tU0i6fgTUqfr9bx2UekWlYvx
u9Sz4DH49wQ8akS7qe9S/c/rm5hf2AoG3AAfGeobgAV6jh7MGa17y7YhBEjD7POD
fflp32btoPp3PkiTEDln9imnydGBYnveR+T0d77e7j/eXCTTE/o+9SotNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILr7tqhZ8Kr8rD8K69gN8+t7/SeMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7OSYt45
m8Sn3F49+8FaemdYvGFB3On1WL1hZORRCur9MKx+i3g9/KsIm/ujazlza1K6q+4r
1Vn3vkt9kl9sPkv6rnDo+GFgzvaWtjNRbUhoYn+DV6HlRFgMGrZII52sPO7OqeJo
WxtRjpOvNYUM7kH6fX0/nr4fIzNAJrNTTrH99e5pz9eSrW7p8RxDxvrxd5YDwr+/
Owr4OI5rRYWl71Ep9MY+MszFPrnz5HM/fL9moFR5J7nt3jWP626ed58qdQhiypqW
Ggps3CnO9d2XV4wRngBGDxjK84OmWyCSP9xbNZ5RhmqxY9irqFADn9Xbfb8OamiF
0mARl7OEXywHHw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:42:34 2026 by rpki-client