Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File:                     wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier:          /o3sRvJHrrImmTS7kIqdwUVGAGX0sN8ocV7G3G09s2Y=
Subject key identifier:   22:15:73:CE:2D:2B:8B:A0:47:A1:9A:49:E0:1C:D8:0A:D5:A2:BF:51
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer:       /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial:       01A0D9F147264D39A54C64C86EE2E4B5E684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 19:01:03 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:03 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:03 +0000
Files and hashes:         1: U0AA7EaHxwqbTPzMCeNQUIYG4PQ.roa (hash: 5cImUEVKi/8eDo+GCbXnHQDUtXyra6YYdj1pJzdPRCQ=)
                          2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: hiwXiyoPiqy4t/t3evyC01lMFHVD934i9Di40Lgz0/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:47:26:4d:39:a5:4c:64:c8:6e:e2:e4:b5:e6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
        Validity
            Not Before: Sep 25 19:01:03 2026 GMT
            Not After : Sep 26 19:01:03 2026 GMT
        Subject: CN=221573ce2d2b8ba047a19a49e01cd80ad5a2bf51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:80:29:8d:da:c2:f6:87:63:0e:07:e7:39:
                    d6:50:32:dc:a1:23:5f:ed:a1:04:10:d5:57:5d:c5:
                    59:0e:3e:d4:e6:76:d7:07:a5:05:9f:d2:93:ec:54:
                    40:57:bc:a6:82:b2:37:32:74:19:a4:f9:b9:8e:db:
                    37:97:62:51:c8:0d:ad:c6:52:e7:c9:f7:b4:05:0f:
                    54:f2:80:1c:44:5f:b8:eb:69:b4:67:b4:9f:35:a8:
                    7b:ed:e0:97:2c:ab:e0:a2:dd:3d:de:3a:d6:54:ed:
                    a5:fc:41:43:4b:18:84:7b:e6:99:ac:eb:a3:f3:9f:
                    90:8c:86:38:33:d9:d1:6a:0a:7e:fc:20:76:f1:e6:
                    64:ca:68:66:1e:8c:87:5a:84:a0:ef:be:66:96:f9:
                    18:46:8c:18:15:13:41:43:38:3c:b8:dc:50:f0:25:
                    79:28:f0:9f:37:f6:aa:50:d6:ea:8a:99:47:b4:c5:
                    31:49:a3:7a:85:5a:27:bc:26:4d:f4:a4:2b:1a:10:
                    49:93:af:0f:78:ab:d4:15:ae:9f:bf:53:09:df:de:
                    1c:14:ab:a3:10:1f:31:b1:83:8d:cd:b6:6e:8b:a6:
                    c5:05:96:ce:90:a2:b6:18:5c:df:85:03:6f:57:5b:
                    4c:39:c6:95:95:2a:11:50:e2:99:75:fb:c9:3e:a1:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:15:73:CE:2D:2B:8B:A0:47:A1:9A:49:E0:1C:D8:0A:D5:A2:BF:51
            X509v3 Authority Key Identifier:
                keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:08:3e:10:84:06:90:66:7a:f8:b0:b2:50:0b:79:4f:13:
         21:30:f5:f8:60:3a:5e:f8:12:3f:3b:93:3a:67:41:6e:c5:77:
         a2:93:b1:29:90:4b:eb:53:82:90:35:27:d3:48:eb:42:ad:33:
         8a:0b:25:69:5a:9a:73:10:43:46:a2:8d:59:4e:93:fc:1f:8f:
         f8:25:09:97:ef:cf:30:9e:e7:70:e3:bc:b7:3c:b3:e2:c7:fc:
         8e:48:6e:25:a9:61:06:67:be:a0:de:54:90:86:61:4c:d2:d3:
         5e:dd:40:8e:76:39:85:6a:7c:1c:87:2d:dd:f7:41:9d:52:cc:
         b7:a0:76:92:88:1b:cb:d4:4c:ab:c7:ee:7b:b5:17:77:af:f4:
         44:e4:f7:77:ad:98:2e:5f:83:96:53:cf:c0:7d:ac:82:2c:19:
         e6:a9:04:52:d3:38:49:c1:42:04:8a:d6:4f:0a:2f:53:b0:9b:
         c1:ba:79:74:d3:65:7b:19:78:6a:46:b1:ee:a2:8d:b0:b9:9b:
         8e:b6:e8:58:2a:12:58:dd:2a:6c:b7:76:83:0a:06:62:73:c9:
         19:03:c5:d6:14:a4:51:22:42:25:09:3c:91:b5:05:7f:75:6b:
         4f:b9:83:ec:a8:25:37:8a:ab:86:8e:97:51:cf:bb:8a:fc:e5:
         95:49:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:54 2026 by rpki-client