Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          tV3xFXJFxuIGFldZi5VQIJ38xb/y3aGVNKxCIK1Ki1M=
Subject key identifier:   30:8A:CA:E4:E6:F6:0B:DE:59:BF:DC:BF:38:D3:0B:D2:63:00:D7:A2
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       01A0CAEB7DC33B0EE50ABF4F6FDC1C0B3865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 21:00:25 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:25 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:25 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: /cJGToQM8o9j5JVZqZv1aMukeKRrZFiBPHkpWKqIK94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:7d:c3:3b:0e:e5:0a:bf:4f:6f:dc:1c:0b:38:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Sep 22 21:00:25 2026 GMT
            Not After : Sep 23 21:00:25 2026 GMT
        Subject: CN=308acae4e6f60bde59bfdcbf38d30bd26300d7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:17:bf:c3:b0:8a:97:c1:f9:c0:a3:07:2e:
                    60:1d:f6:71:e3:b6:f3:06:34:e8:f6:e9:e7:74:18:
                    d9:48:3f:e6:58:64:a3:13:40:5f:3a:e1:cb:e0:81:
                    2e:d7:d8:db:63:33:04:00:da:4f:26:b2:cf:d3:14:
                    47:76:0e:a8:c0:e7:4d:9b:54:bf:1c:77:15:3d:7c:
                    3a:a6:20:b7:e2:a9:55:cb:4b:b0:5e:b1:18:84:70:
                    08:97:4e:78:57:47:f1:48:95:56:b3:b0:63:5e:cb:
                    2a:c3:01:e8:3d:59:94:45:35:b2:19:16:e0:cd:7e:
                    a4:74:c3:0c:17:15:a0:d0:b7:65:7e:fe:5a:6f:69:
                    d5:ab:3d:4b:59:70:41:4a:cd:2f:9b:6d:34:41:2c:
                    56:37:f0:1a:1b:b5:ba:1c:19:a7:f6:6c:08:3d:ff:
                    d3:3a:73:d0:05:f4:d3:fa:fc:a0:aa:35:b7:ea:e3:
                    d8:45:32:90:6b:d6:45:5d:54:c0:01:05:bf:1e:f9:
                    ad:f7:8e:b3:5b:56:b2:53:a0:e9:3c:df:8d:c0:24:
                    da:ce:7f:1b:f4:61:f8:37:52:02:40:ac:84:ef:9a:
                    a8:48:8b:50:dd:b9:d7:e9:1a:1b:83:39:1e:05:74:
                    8a:ea:52:4e:3c:31:56:a4:29:9c:65:34:91:27:18:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8A:CA:E4:E6:F6:0B:DE:59:BF:DC:BF:38:D3:0B:D2:63:00:D7:A2
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:23:6f:5c:35:25:ce:ea:2d:eb:8b:02:b7:90:04:26:4f:2c:
         1e:08:b6:d0:56:0c:1c:7d:2b:ed:93:90:83:0e:65:d6:8a:7d:
         6c:cf:75:df:63:d3:37:7e:11:68:00:4d:37:e3:ee:aa:4d:7a:
         d6:8f:f0:d9:27:9b:a7:af:9a:44:ca:9c:70:6a:ac:5f:d0:c5:
         2b:49:f8:8e:ea:80:0b:c0:e4:35:85:17:30:51:de:96:5a:9a:
         04:7d:c9:00:a7:f2:5c:7a:d7:d2:66:39:95:60:b3:52:f3:4c:
         93:eb:27:d3:a0:d1:b5:bf:87:d5:c8:4a:98:a5:0a:69:88:98:
         e6:4d:ad:1f:23:29:6b:af:7f:04:fe:6a:2a:1e:a2:e2:bc:0f:
         0e:3f:a6:3a:fb:0b:e7:a0:4e:70:06:b9:43:15:01:5d:70:bf:
         87:c4:78:39:81:12:37:b9:88:e4:27:e6:07:7b:3b:24:5b:d0:
         ce:8e:9c:32:a3:63:62:a0:77:22:2c:54:c9:35:a1:9d:fc:97:
         b2:99:59:88:e2:9a:56:4d:89:0b:ff:8e:61:42:81:07:8b:2a:
         20:36:41:b5:69:d9:f2:a3:73:bc:40:9c:ea:5b:00:b1:c2:b0:
         c7:72:01:fb:44:b9:94:f2:24:6e:3c:cb:05:5c:5a:64:58:37:
         5a:7b:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:22 2026 by rpki-client