Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
File:                     waTZZ9XMsUJbke9O14moOvzkYS4.mft (raw, json)
Hash identifier:          VX7NdEIz0W09YG8aiKfT0PU0ebWgh9vLXRTD6hN6vPo=
Subject key identifier:   CF:BF:60:90:66:31:80:5B:5A:99:3C:E7:50:50:92:CB:9C:F4:BB:B1
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Certificate issuer:       /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial:       01A0EA77122D8C6918730687E08928258DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
Manifest number:          F5
Signing time:             Tue 29 Sep 2026 00:01:07 +0000
Manifest this update:     Tue 29 Sep 2026 00:01:07 +0000
Manifest next update:     Wed 30 Sep 2026 00:01:07 +0000
Files and hashes:         1: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (hash: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=)
                          2: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (hash: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=)
                          3: waTZZ9XMsUJbke9O14moOvzkYS4.crl (hash: fs3Ch8/EUTwe/0B1xQGR3lqCwS+vv+6emf3KPSv1cvQ=)
                          4: zK_O173R9rM6kmYP6t5ZMpzvyj8.roa (hash: 8jI4m5E4Fs/hNYjrx6Dlw+4Ou6r9lvQaFPoouEIUKzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:77:12:2d:8c:69:18:73:06:87:e0:89:28:25:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
        Validity
            Not Before: Sep 29 00:01:07 2026 GMT
            Not After : Sep 30 00:01:07 2026 GMT
        Subject: CN=cfbf60906631805b5a993ce7505092cb9cf4bbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cf:ee:a6:46:3c:66:13:3c:cf:52:ae:ee:b5:
                    74:75:c2:bb:f4:52:49:23:cc:39:a3:50:be:ee:ec:
                    f5:72:29:1c:34:55:f0:42:06:16:8d:4e:0e:9e:b8:
                    2a:bf:75:7c:04:e8:c6:ef:c5:5a:fd:97:cb:b2:17:
                    87:c3:bf:c4:22:95:52:0a:d0:01:88:19:81:ea:4a:
                    c1:eb:84:b3:01:c8:a5:be:99:5e:c4:ac:e9:43:0d:
                    59:eb:19:d0:10:dd:c1:2a:15:76:66:ce:cd:b4:55:
                    2c:c1:a5:1d:1e:3d:b0:d6:9c:77:98:0f:8c:8d:2f:
                    65:6f:62:d0:8f:81:34:33:06:40:3a:8d:57:66:60:
                    57:c9:c5:29:57:a2:cb:48:48:73:b4:cf:d1:29:84:
                    88:55:08:18:fd:d8:dd:7f:bb:5a:0a:51:af:1f:3d:
                    77:9c:a3:4b:b2:a9:69:47:08:ac:d5:22:69:2d:8e:
                    92:70:6a:5b:2e:47:fb:aa:1b:6d:fe:f4:27:2e:9f:
                    b6:ee:a2:cc:2b:ea:eb:ed:2f:13:ad:6e:b2:2c:85:
                    13:d5:01:94:af:7d:c1:31:d8:62:6f:2d:55:7e:c6:
                    dd:15:74:84:9f:49:4a:3d:fd:08:7a:a5:21:0b:4c:
                    fb:13:fc:8c:9a:ff:da:b2:bf:f0:20:2f:b6:9b:68:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BF:60:90:66:31:80:5B:5A:99:3C:E7:50:50:92:CB:9C:F4:BB:B1
            X509v3 Authority Key Identifier:
                keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5d:2f:6e:ca:b0:50:fa:9d:2f:a5:9a:85:ea:89:34:6f:8c:
         03:cb:40:1a:c7:21:c6:13:3d:1a:71:57:15:0b:ff:51:d4:03:
         61:5e:fa:bb:31:74:47:43:75:56:09:92:6e:d9:2c:66:53:8c:
         7a:cd:dc:71:e6:4f:c6:aa:21:07:90:99:11:6e:28:80:87:17:
         37:69:51:44:e1:5f:14:68:a6:0d:54:44:ca:c9:da:40:ed:2d:
         89:b3:7a:4b:28:a6:15:22:0a:f1:4e:48:b6:0f:8c:0f:83:1e:
         b2:21:06:00:bc:a0:81:c5:63:1b:2e:08:cd:84:99:10:c8:75:
         16:85:8b:94:61:80:06:8b:bc:51:94:cf:7e:7c:1c:5d:4b:e7:
         9a:78:19:35:a2:95:93:55:ca:80:22:98:08:2b:17:1a:81:d6:
         6c:71:07:79:65:f4:e6:b4:0c:05:f1:f0:59:64:4b:e0:fd:89:
         46:ea:0a:ea:dc:e7:b0:c6:28:64:e7:70:dd:96:90:15:02:c3:
         5e:57:9e:56:b3:15:c7:7c:3c:92:50:c7:0e:0b:56:b4:af:49:
         46:77:bc:e5:3e:f3:46:0d:0b:6e:55:f1:d4:2d:43:df:8d:0b:
         f9:73:2f:90:87:27:ee:bb:a9:67:fa:e2:f4:24:f3:0d:48:8d:
         69:24:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:55 2026 by rpki-client