Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
File:                     WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft (raw, json)
Hash identifier:          R9muSBwP91kfkNG1v9KHQsH156p3TO1LNrDSwcRhj7Y=
Subject key identifier:   A1:8E:FE:3F:6E:CB:14:1A:42:08:EA:85:11:53:BF:EE:E4:42:3F:8B
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Certificate issuer:       /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial:       01A0D5DE861CBC8531BE31A05AD2704E042E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 00:02:05 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:05 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:05 +0000
Files and hashes:         1: 8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa (hash: UTaNMd3CEd0lWrDH+fieqbIVnu1cLWotgckfZ6yVE20=)
                          2: WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl (hash: TwJbYaykCZF3fdVCbAg6yQ+m0m+i+KoMpuXIww9Y78U=)
                          3: _5WF2PQCdHfSB17pJupjN-FIiNc.roa (hash: Ya29FAa0OUkvMPvOrcq7snCU9GLA5RS5i5UVH+eGNFE=)
                          4: s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa (hash: IH63TUzfzMb/SQxlsB7kB/bwWUNTCvlV00UxXhSJjuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:86:1c:bc:85:31:be:31:a0:5a:d2:70:4e:04:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
        Validity
            Not Before: Sep 25 00:02:05 2026 GMT
            Not After : Sep 26 00:02:05 2026 GMT
        Subject: CN=a18efe3f6ecb141a4208ea851153bfeee4423f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:72:71:8c:71:fe:3c:56:de:03:a2:41:e4:
                    7c:02:62:58:78:e6:a6:eb:05:56:df:be:d1:e5:13:
                    27:fa:53:8e:4b:b5:d7:de:30:6a:a0:ec:ce:c6:bc:
                    4c:56:6c:51:1e:c3:34:62:5b:6c:19:88:23:48:3f:
                    ec:21:2d:c2:37:6e:51:e4:c1:11:f5:1b:86:ba:0b:
                    0c:20:4a:6e:25:02:e8:8d:dc:85:da:b4:7d:71:43:
                    69:c6:35:88:56:f9:67:f8:64:a5:42:b1:d8:0e:94:
                    98:4a:62:21:75:b4:fb:91:48:1e:24:e8:ad:98:cd:
                    27:02:be:a6:25:21:37:1f:d6:59:f6:c7:01:5d:1a:
                    ef:3d:81:b2:04:dd:61:b7:4e:8f:58:b8:7a:b1:b4:
                    4b:b8:24:7a:b1:39:14:5b:56:95:81:38:07:d7:57:
                    b7:a3:5b:19:1b:59:d0:18:02:17:06:ef:ab:1b:ca:
                    71:f3:cd:3b:85:5f:2f:95:67:ef:ff:0b:ac:14:8d:
                    43:cc:4e:de:9f:14:e6:ef:54:6d:a8:0f:68:14:b5:
                    34:87:34:42:11:22:8c:01:73:be:d1:b3:8b:7a:66:
                    88:76:8b:70:28:be:71:28:47:91:89:e7:5d:16:64:
                    21:4d:62:3e:54:fd:88:38:f9:ca:b2:a8:d5:7e:e4:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:FE:3F:6E:CB:14:1A:42:08:EA:85:11:53:BF:EE:E4:42:3F:8B
            X509v3 Authority Key Identifier:
                keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:d1:8e:fe:92:1f:da:55:89:f2:00:e1:bd:b8:61:4e:fb:
         86:e8:7f:69:70:f6:3e:a3:b2:54:8b:e1:2e:d5:f1:8b:9e:a2:
         51:2e:ab:e7:f3:b8:43:7e:b3:aa:74:e3:6b:ff:de:73:fc:06:
         7e:6e:c9:4d:29:3f:1d:06:01:1c:84:5c:58:ef:52:47:0a:0c:
         a0:28:dd:42:f1:1b:45:d0:14:03:05:64:bc:c5:b8:e5:ca:9b:
         52:78:08:4d:e8:83:3f:ae:e9:ee:26:19:a5:70:c1:2e:9e:dc:
         2d:1a:b1:f3:d7:bc:ed:70:57:7d:5a:91:4c:37:42:82:25:e1:
         71:51:1d:48:c8:0b:e1:69:d4:54:55:ef:27:b6:46:e6:5c:87:
         d8:39:12:b1:89:46:2e:ab:53:63:d2:4f:23:6e:9d:59:9d:9c:
         13:ef:62:31:56:07:3a:d4:06:41:48:e0:f2:01:94:9d:fb:42:
         c8:78:5c:de:36:81:5c:40:c7:a4:ac:ff:50:9d:63:0d:78:c7:
         15:18:87:65:70:e0:b4:34:85:45:ba:e5:4c:82:05:2a:fb:38:
         91:f5:85:f3:96:22:c4:a6:37:f3:d4:b3:b6:8f:c5:cd:f0:7f:
         e7:42:b9:76:ec:41:53:5e:9d:9c:14:d7:cd:fc:8e:da:c5:24:
         17:5a:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:02:10 2026 by rpki-client