Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          wx4xlLAuI9R93H7ORGOmlt5p7XsDLA5P/Bju7c/4vv0=
Subject key identifier:   10:6A:3F:1E:4E:80:2F:5D:B4:EB:BC:37:99:D6:BF:E1:1F:81:B7:B1
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       01A0DFBCF21BC2F12E6BE4FF022717DE4E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          087D
Signing time:             Sat 26 Sep 2026 22:01:36 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:36 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:36 +0000
Files and hashes:         1: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          2: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          3: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          4: uTr13Te3pwYYdTFAT-0rxl4K2a4.roa (hash: oQV4cNUdbV2vNfYqR3e7xR1qkeePDkN6t+oSOnNTZ8M=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: C+eHm78spY0n08HfEXQizfm1fXCtcXGb8lzU8OH3Ai8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:f2:1b:c2:f1:2e:6b:e4:ff:02:27:17:de:4e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Sep 26 22:01:36 2026 GMT
            Not After : Sep 27 22:01:36 2026 GMT
        Subject: CN=106a3f1e4e802f5db4ebbc3799d6bfe11f81b7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:ca:11:ef:55:e7:15:75:e9:76:1f:15:2f:
                    e2:b7:ca:58:d5:36:a9:c4:ee:d5:b3:ff:f0:75:79:
                    c4:c3:a5:3f:a8:7e:92:68:b4:7b:f9:98:ed:33:76:
                    13:74:f3:69:72:80:85:01:fb:1c:b3:93:a0:85:45:
                    be:45:47:72:80:18:7e:b7:8d:f7:99:44:a9:eb:ea:
                    66:83:69:95:54:8d:7b:6f:61:1c:cb:c9:f8:ca:d4:
                    a1:2e:78:63:f3:cf:97:a5:75:a7:51:3a:bb:ff:30:
                    10:77:31:82:4b:cc:da:c5:64:bc:0e:9b:66:cb:b2:
                    84:f6:5f:24:80:1d:6f:ad:f9:ce:2d:12:c0:2e:4a:
                    79:a6:de:24:65:7d:0e:a8:8f:66:77:51:75:fd:00:
                    e5:40:02:86:59:d0:b0:95:70:33:67:a5:32:a5:bd:
                    01:6a:61:d8:18:1c:41:5b:a3:5d:bf:bd:5f:85:34:
                    d9:59:84:e2:cc:dd:90:16:69:5e:a8:4b:5f:35:22:
                    34:4a:23:0c:16:63:f2:ca:e9:d2:54:4c:0f:1e:9f:
                    4a:f6:f8:ad:fe:41:65:86:bd:fc:c2:ba:39:fe:29:
                    c3:05:31:16:81:1a:61:d3:66:e4:64:14:8c:86:8b:
                    9d:55:81:7d:36:0f:1c:2e:d0:64:44:f4:b5:c8:10:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:3F:1E:4E:80:2F:5D:B4:EB:BC:37:99:D6:BF:E1:1F:81:B7:B1
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:53:13:f5:52:66:4e:7c:5f:a1:56:59:bd:a8:4c:9e:80:63:
         91:69:ec:6b:a0:34:ae:4a:1f:80:d5:6e:e7:16:1e:98:fb:43:
         33:c2:4e:27:93:ec:17:91:fd:67:4d:3e:e4:f0:ce:c0:a4:ba:
         de:f8:0a:9c:e6:0f:93:da:b5:21:4c:b9:28:ce:68:fd:48:92:
         e8:f0:b5:75:d3:53:ff:01:1e:ca:17:0b:34:15:23:fa:59:9a:
         4e:93:67:dc:62:de:06:70:29:6f:be:d7:ab:d2:ad:e1:20:dc:
         01:51:b0:7d:f8:c9:19:1e:69:c1:9e:e9:ff:82:ad:2c:7b:0f:
         50:19:03:52:84:81:db:89:8e:17:82:4d:04:3c:eb:5f:9b:2a:
         eb:7e:0a:09:85:92:fe:73:33:66:89:97:7b:ad:44:2b:56:7a:
         96:84:e1:43:c0:a4:38:7f:04:fc:02:fd:ef:d8:4e:aa:54:9c:
         2a:5a:b8:25:31:3c:56:06:a8:b5:d9:13:e8:47:54:23:39:66:
         d1:f7:40:f8:cc:99:44:bc:2f:1e:74:eb:72:93:d2:1b:22:cf:
         74:11:d0:20:52:e0:15:6f:88:f2:7a:3f:7b:9a:41:13:6a:85:
         5e:3a:a1:03:9c:5d:52:30:96:61:ff:bf:04:32:7b:c0:a0:f4:
         a3:c4:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:57 2026 by rpki-client