Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          XsuTHgvCdnJH2jKp+ooSoXtIGoLO8gLHAvUnTPn9VDs=
Subject key identifier:   24:9D:CD:C6:19:A7:50:EF:63:E1:4B:D0:C9:3F:A0:5F:91:4B:E5:E6
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       01A102B65C22228D08E6FEA58860DC58E007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          1387
Signing time:             Sat 03 Oct 2026 17:01:07 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:07 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:07 +0000
Files and hashes:         1: WAm_tIyDAPRV3BNqWG57uTp7CzY.roa (hash: qS+vZJ+Ti9+HN+VBxaCgQjtizbbFP3FemK3D8+0KoO4=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: 9qRPzX2jqV5Aaosgw2e3DT+WYerO8KqEmRfZ5XgPayc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:5c:22:22:8d:08:e6:fe:a5:88:60:dc:58:e0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Oct  3 17:01:07 2026 GMT
            Not After : Oct  4 17:01:07 2026 GMT
        Subject: CN=249dcdc619a750ef63e14bd0c93fa05f914be5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:5e:5b:57:9e:64:4a:de:1c:ea:21:68:c7:
                    b7:26:0f:fd:5a:80:3d:ee:e7:4a:1c:28:0e:12:ba:
                    cb:1f:21:87:0e:f2:5f:b9:6e:e8:f4:64:5a:00:4a:
                    92:bc:ac:f9:18:12:47:f9:2c:52:10:d6:7a:40:89:
                    46:a1:d2:36:be:60:c0:60:36:26:6f:3e:98:33:59:
                    f7:e6:6c:01:7d:7e:18:6b:77:8f:f7:fc:1b:44:f9:
                    e1:b8:23:ad:bc:1b:0d:34:00:b9:bc:ee:69:a0:fa:
                    d0:b5:4e:cf:2a:54:76:66:5d:5d:42:c6:6c:68:3b:
                    22:05:f2:33:95:a6:b6:d3:20:e1:0a:29:d3:13:97:
                    97:40:5d:1c:e7:4a:bc:73:74:04:ad:9c:24:8b:ab:
                    5f:16:c4:50:6e:ad:4e:31:92:13:7f:f7:4f:bd:a1:
                    36:6a:62:69:7d:cc:de:eb:6b:0d:46:4f:79:fd:87:
                    b8:e5:eb:2e:04:a5:c7:0e:87:95:99:ce:3a:2d:61:
                    a7:75:ac:ba:6a:b3:86:ab:13:87:0e:75:86:d2:59:
                    81:92:95:b0:06:ca:2a:3e:9f:7d:45:0f:d6:f8:4e:
                    21:7a:f5:27:ea:9c:86:48:e2:04:4f:1b:ea:66:ae:
                    17:b7:cc:79:08:ef:29:fe:31:11:60:ff:ac:7e:0e:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9D:CD:C6:19:A7:50:EF:63:E1:4B:D0:C9:3F:A0:5F:91:4B:E5:E6
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:db:92:3c:f4:16:2e:33:1a:0b:7c:53:80:5e:7b:a7:37:ad:
         2e:ef:b6:3c:16:dc:47:ae:cb:8b:9b:7c:be:23:ab:5b:16:6e:
         3c:2c:af:0f:26:21:e5:ae:dc:f0:69:fc:20:00:1a:7b:f5:af:
         f9:c7:9e:43:dc:3e:3c:f8:f3:c6:54:38:95:85:d5:48:f7:43:
         12:41:bd:a8:5b:cb:f1:29:5d:b1:bf:e6:f6:16:68:bb:f2:ce:
         1b:6d:ef:03:59:e8:cc:ab:6a:44:ed:64:1a:38:3a:3f:c0:a6:
         51:52:29:55:15:56:98:f7:21:c9:c9:a8:a2:33:66:11:f2:a8:
         bb:45:8d:42:6c:0a:07:9d:08:6e:90:2b:84:28:b5:13:2b:04:
         8f:97:37:8c:49:fb:82:d4:d3:d7:2a:e6:52:7c:1a:ba:da:66:
         11:1a:08:7c:37:5a:b9:b8:8c:52:02:e1:2e:e5:bc:79:2b:a3:
         77:b8:c4:a2:9c:0f:99:16:53:de:88:f1:40:41:67:48:02:d5:
         36:0e:e3:6c:7b:25:f6:0a:bd:6a:ba:7b:c0:60:33:24:03:db:
         f0:a5:03:2d:51:6b:f3:9d:b2:a5:c3:29:2b:73:84:8a:c3:b4:
         0f:c7:58:2c:52:4d:18:84:40:12:ad:93:e6:f1:29:98:fb:be:
         53:af:fe:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECtlwiIo0I5v6liGDcWOAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw
YjFkMGYwHhcNMjYxMDAzMTcwMTA3WhcNMjYxMDA0MTcwMTA3WjAzMTEwLwYDVQQD
EygyNDlkY2RjNjE5YTc1MGVmNjNlMTRiZDBjOTNmYTA1ZjkxNGJlNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJeW1eeZEreHOohaMe3Jg/9WoA9
7udKHCgOErrLHyGHDvJfuW7o9GRaAEqSvKz5GBJH+SxSENZ6QIlGodI2vmDAYDYm
bz6YM1n35mwBfX4Ya3eP9/wbRPnhuCOtvBsNNAC5vO5poPrQtU7PKlR2Zl1dQsZs
aDsiBfIzlaa20yDhCinTE5eXQF0c50q8c3QErZwki6tfFsRQbq1OMZITf/dPvaE2
amJpfcze62sNRk95/Ye45esuBKXHDoeVmc46LWGnday6arOGqxOHDnWG0lmBkpWw
BsoqPp99RQ/W+E4hevUn6pyGSOIETxvqZq4Xt8x5CO8p/jERYP+sfg5ZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSdzcYZp1DvY+FL0Mk/oF+RS+XmMB8GA1UdIwQY
MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt
YjU1ZDdkN2YyYzQ4LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4
LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9uSPPQW
LjMaC3xTgF57pzetLu+2PBbcR67Li5t8viOrWxZuPCyvDyYh5a7c8Gn8IAAae/Wv
+ceeQ9w+PPjzxlQ4lYXVSPdDEkG9qFvL8Sldsb/m9hZou/LOG23vA1nozKtqRO1k
Gjg6P8CmUVIpVRVWmPchycmoojNmEfKou0WNQmwKB50IbpArhCi1EysEj5c3jEn7
gtTT1yrmUnwautpmERoIfDdaubiMUgLhLuW8eSujd7jEopwPmRZT3ojxQEFnSALV
Ng7jbHsl9gq9arp7wGAzJAPb8KUDLVFr852ypcMpK3OEisO0D8dYLFJNGIRAEq2T
5vEpmPu+U6/+Vw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:39:48 2026 by rpki-client