Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
File:                     wxnuerHO5AZ2b7iNAMdLgds6GV4.mft (raw, json)
Hash identifier:          6JKVeGndRB6rpsZW99kGfJRw0Kfr35klQCBXw1Dk7MQ=
Subject key identifier:   20:C2:61:AD:7E:2A:92:76:25:4B:A5:65:26:DF:E1:BF:DD:86:F8:F4
Authority key identifier: C3:19:EE:7A:B1:CE:E4:06:76:6F:B8:8D:00:C7:4B:81:DB:3A:19:5E
Certificate issuer:       /CN=c319ee7ab1cee406766fb88d00c74b81db3a195e
Certificate serial:       01A13CA58626F946334DAD54673E3EACCD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
Manifest number:          49
Signing time:             Wed 14 Oct 2026 23:00:43 +0000
Manifest this update:     Wed 14 Oct 2026 23:00:43 +0000
Manifest next update:     Thu 15 Oct 2026 23:00:43 +0000
Files and hashes:         1: rzdIO2OXr8tsFJeaYCu7d4gHu20.asa (hash: XYBVQtAgzd2CRZDKGPsc0cHFoK5RdDZS1cD9OQQcREA=)
                          2: wxnuerHO5AZ2b7iNAMdLgds6GV4.crl (hash: VUQCXqBx5caNpAjyomf71INii1xZmIwMvoEJQ0vtJCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:a5:86:26:f9:46:33:4d:ad:54:67:3e:3e:ac:cd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319ee7ab1cee406766fb88d00c74b81db3a195e
        Validity
            Not Before: Oct 14 23:00:43 2026 GMT
            Not After : Oct 15 23:00:43 2026 GMT
        Subject: CN=20c261ad7e2a9276254ba56526dfe1bfdd86f8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:76:60:08:45:b5:01:19:e0:c1:bf:77:b1:
                    35:9b:f6:80:28:c4:c5:60:ba:84:71:d9:6f:e3:02:
                    95:38:90:b4:58:55:99:a5:5c:56:7f:24:6e:e1:08:
                    04:0a:cb:5c:10:be:b9:74:bd:42:3e:ab:81:75:f4:
                    e9:7f:ca:13:c5:6f:6c:cd:a7:5b:c3:5b:5a:8f:cc:
                    02:aa:72:57:83:9a:66:a2:3b:2e:4a:1f:fb:89:40:
                    99:cd:65:da:ee:30:cc:49:3c:33:d2:be:3f:0b:a7:
                    c3:c2:96:d0:df:45:27:f2:39:0e:11:82:8e:b4:ea:
                    76:ea:8c:e9:92:c1:8d:ea:4c:1e:56:6f:f0:e5:15:
                    c2:f2:b6:12:6a:69:c8:8a:58:b3:e4:91:13:f7:57:
                    f1:7b:59:dc:13:7d:4f:14:d9:e5:88:1a:c0:2e:fb:
                    9f:86:8d:f2:6d:89:13:72:8b:eb:1e:5e:e1:a3:14:
                    e0:c9:11:ee:d5:27:9a:c1:8a:3c:51:09:31:de:d9:
                    22:50:dd:53:cf:1b:9f:55:58:3f:f5:41:4b:d4:79:
                    c4:1c:71:a1:49:d8:ed:73:22:ea:59:92:38:ea:07:
                    ac:7d:a0:ad:7c:c9:6b:9f:b2:fa:90:bd:68:63:92:
                    34:b1:ff:9e:f2:d5:a7:f7:f6:6f:ec:18:62:2e:72:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C2:61:AD:7E:2A:92:76:25:4B:A5:65:26:DF:E1:BF:DD:86:F8:F4
            X509v3 Authority Key Identifier:
                keyid:C3:19:EE:7A:B1:CE:E4:06:76:6F:B8:8D:00:C7:4B:81:DB:3A:19:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:de:ef:b6:56:b8:c5:0b:71:6c:96:15:4a:3b:73:f2:b7:f7:
         ec:00:55:8e:af:52:d8:e1:31:c2:67:e8:ce:6c:18:24:0e:f0:
         0d:14:9a:9a:13:8d:c6:ea:4e:f3:c8:73:a1:da:36:5c:b7:b5:
         51:ef:d8:86:42:29:dc:30:57:33:1e:94:06:b7:59:47:d4:1f:
         47:36:07:b5:1c:38:3b:fd:13:9d:fa:30:8d:e6:0a:17:1e:1c:
         cf:84:4b:2e:b3:ae:8b:40:69:d4:d0:b5:8d:bb:af:89:08:d4:
         a2:ac:50:6d:9e:97:04:5e:51:5f:f7:22:d0:cc:68:ed:cc:07:
         0e:58:8e:7f:b6:bf:0e:25:bc:06:70:8d:1d:87:72:5d:8a:ef:
         28:ef:27:77:e8:09:ed:6b:7c:d9:32:33:ae:7c:a9:ef:8c:b3:
         aa:6a:26:d4:27:c9:bb:28:e1:16:17:11:6c:49:26:c6:87:6a:
         bb:71:43:1e:73:4f:f5:df:80:48:2e:b8:77:d6:04:c1:7b:89:
         2b:7b:6e:3c:0f:08:ca:c4:bd:15:84:0d:2b:6d:83:01:7c:1e:
         e3:4c:1d:13:a4:60:70:f7:dd:c5:d7:32:1b:93:a9:ee:6f:7a:
         dc:4e:31:06:02:fe:71:46:03:63:1b:bb:c2:87:25:7e:1d:ce:
         63:d9:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:23:08 2026 by rpki-client