Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File:                     wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier:          Uh5nAV5HeqMy/j8UYDcNV4NNxfVganoH1FKjXyQZdfc=
Subject key identifier:   84:3B:20:7A:45:98:91:98:91:C2:37:06:7C:CA:EA:69:47:A9:74:8A
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer:       /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial:       01A0EC2F0D06A85893EED3808CE8AB42E1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number:          08BC
Signing time:             Tue 29 Sep 2026 08:01:41 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:41 +0000
Manifest next update:     Wed 30 Sep 2026 08:01:41 +0000
Files and hashes:         1: cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa (hash: AIiSdddDnEI2m5R7XY5zbokXJZOOTj517t6eCwoUwtY=)
                          2: cWok4mUxGOzfb6X_Ih_xWHzxHzE.asa (hash: FK9I5rimcLzHZdpfkaUGYs6IrGmTI38YsRySON+jkaM=)
                          3: ma1O2DltnndXpH9aWxYN2FdTRIE.roa (hash: y57vLDkssL86NAU7EWD13+ZBmcV21SBi3gDMpAVaAnQ=)
                          4: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: 1BObpN1uTBEHV6vjk5IsixKyG5rUIyfPtNEsuGfPoo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2f:0d:06:a8:58:93:ee:d3:80:8c:e8:ab:42:e1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
        Validity
            Not Before: Sep 29 08:01:41 2026 GMT
            Not After : Sep 30 08:01:41 2026 GMT
        Subject: CN=843b207a4598919891c237067ccaea6947a9748a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:97:f7:f2:d7:84:b4:86:b7:09:4d:1c:02:
                    6b:3b:f8:6b:06:c1:14:bf:fc:f2:4b:d5:37:08:42:
                    1c:e7:39:58:e3:72:5e:dd:a5:f4:af:02:05:e1:6c:
                    0c:a0:20:99:05:9e:01:3c:35:e5:97:c0:03:2e:2c:
                    e6:6c:51:a6:44:9e:fd:fa:9d:1d:10:02:bf:1f:a9:
                    2d:8a:e0:04:de:e9:3c:5d:6b:4d:73:61:7a:02:71:
                    3a:a9:f4:a2:6e:44:13:16:0c:7c:a0:7a:a1:5b:76:
                    11:73:a3:af:e5:dd:b6:14:c8:47:c4:d1:f4:0a:8a:
                    88:2f:b4:53:34:5e:39:7c:b3:e5:9e:2b:0f:f7:86:
                    9c:e2:cb:95:30:73:20:e6:4d:ca:97:9f:1d:6e:81:
                    43:1e:d1:00:bb:f4:88:17:c4:a0:e8:30:89:3a:73:
                    de:01:ff:31:44:35:7f:36:2b:51:e1:62:84:03:21:
                    f6:54:cd:e3:b9:1d:4b:d6:d9:dd:83:9f:3a:9f:90:
                    42:22:35:48:ac:af:eb:9d:13:e2:9f:19:85:97:64:
                    b9:ee:33:16:05:4a:43:1f:5d:8b:42:b0:36:8a:56:
                    f3:d7:b5:d6:9c:32:e7:04:3a:ae:fe:78:1d:ff:25:
                    64:e8:f0:b2:0f:86:87:b6:b1:c7:f0:90:af:6d:6c:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:20:7A:45:98:91:98:91:C2:37:06:7C:CA:EA:69:47:A9:74:8A
            X509v3 Authority Key Identifier:
                keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:49:71:fa:94:23:0c:76:01:9c:27:23:66:85:dc:24:b4:ab:
         2c:72:f6:44:ad:10:4b:70:d1:e2:cc:1a:ed:be:9c:78:99:16:
         ef:ab:8d:bd:8c:2c:e6:5b:82:bc:0b:de:fe:9f:9c:92:bd:d3:
         fe:01:4a:91:b6:5c:44:15:81:81:fd:6e:ca:33:80:7b:15:c2:
         cc:4d:d3:80:d6:b3:8e:a0:52:bb:4d:3a:e6:48:03:94:16:38:
         37:9a:29:f6:58:3a:c1:73:fd:46:22:ea:98:da:07:83:7a:a8:
         7a:be:0b:2b:8d:29:01:6d:8b:01:0c:3d:69:65:f9:b5:f5:22:
         43:a2:6f:aa:60:e0:f7:63:67:3a:67:1d:7b:89:f5:3c:6f:62:
         de:8c:5c:5f:85:0b:68:17:da:a4:4c:86:56:0d:27:5c:dd:ff:
         4c:65:8d:c2:b3:a9:f2:e7:24:98:17:99:c5:df:4a:11:c8:c1:
         71:86:57:5f:78:d5:fe:b2:d6:22:d6:2d:fa:17:d3:04:ab:82:
         ad:ad:61:97:db:87:aa:e2:8d:4c:16:eb:c2:3e:41:63:8e:5b:
         de:74:6c:e2:65:f6:97:bb:93:d8:8a:20:93:3b:3c:a9:39:b0:
         f3:58:de:50:be:16:9c:e4:b3:b9:18:96:e0:1e:a5:c0:40:1c:
         27:3f:98:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:14:24 2026 by rpki-client