Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File:                     W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier:          BoZ2+HcmYIOTt/7sfc7k4pz8XWnns4THeIAbqLjmt6w=
Subject key identifier:   B3:73:CA:22:AC:88:33:E4:DB:62:2B:D7:79:99:AA:FC:EA:10:42:68
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer:       /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial:       01A0E13CE3A5D20FF3A328CFFD3D1368387E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number:          0A1F
Signing time:             Sun 27 Sep 2026 05:00:59 +0000
Manifest this update:     Sun 27 Sep 2026 05:00:59 +0000
Manifest next update:     Mon 28 Sep 2026 05:00:59 +0000
Files and hashes:         1: VAZohNpvO9_o7KjFilOTjZZYLIs.roa (hash: rwnYRxIBD/e1mgHLvJoCajFd/31HX2F77fRGUhaXShQ=)
                          2: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: 5Wck6jlRmAbrOv5dBIVU9pc/xSVf0oyTXNr8epFNSMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3c:e3:a5:d2:0f:f3:a3:28:cf:fd:3d:13:68:38:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
        Validity
            Not Before: Sep 27 05:00:59 2026 GMT
            Not After : Sep 28 05:00:59 2026 GMT
        Subject: CN=b373ca22ac8833e4db622bd77999aafcea104268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:fe:eb:b4:c2:43:ed:71:77:aa:85:a2:ac:
                    83:1e:59:6c:40:1c:7f:72:cb:f4:0c:16:e6:0b:04:
                    67:ce:e6:e0:86:78:8d:cd:5d:83:f1:ed:b4:3f:e6:
                    34:d9:f3:8d:62:f5:71:49:1f:e2:72:a9:75:08:c6:
                    34:92:64:90:fd:4d:c2:51:df:8b:92:1b:3f:bb:8a:
                    c4:48:08:db:d9:fe:9e:19:9a:f2:2a:24:6b:c6:80:
                    b6:a2:83:f5:fa:32:14:54:6e:bb:18:77:2d:f6:59:
                    8b:c4:6d:02:c2:ba:59:07:15:1d:a8:71:1b:12:52:
                    42:9e:df:d8:24:67:90:69:13:32:e4:72:52:2a:ef:
                    5b:da:23:88:30:ce:25:a8:bc:7f:89:2e:fe:60:91:
                    f0:7f:b3:c8:bd:cf:78:89:d9:e3:99:13:f4:1c:21:
                    33:0c:c8:fe:dd:1f:3d:6e:c4:bf:67:7d:30:6e:00:
                    87:3b:9f:a1:62:30:70:aa:7d:bd:73:38:92:69:77:
                    7e:b1:a4:60:a6:59:ea:46:52:ec:8f:fd:7a:4d:7d:
                    92:ab:70:71:04:ec:2d:73:1c:b4:f2:52:32:2c:6e:
                    73:59:af:4b:22:a6:e1:d3:81:85:40:ea:72:5e:a7:
                    a3:c2:b8:a4:08:aa:83:80:d9:97:f0:84:8a:f7:bd:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:CA:22:AC:88:33:E4:DB:62:2B:D7:79:99:AA:FC:EA:10:42:68
            X509v3 Authority Key Identifier:
                keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:af:12:1a:ce:c4:fd:75:9a:30:df:a5:54:32:8b:a1:4c:
         f7:dc:5f:95:52:28:80:3f:b2:9a:92:7f:5c:e6:26:d5:8e:7b:
         db:2d:f9:9e:ed:91:97:12:53:26:32:92:86:42:46:9d:11:11:
         81:20:0a:f2:d9:11:ab:fd:71:f7:8b:71:ee:8e:2c:90:ae:3b:
         80:ef:40:f7:8f:d4:03:25:90:05:0a:ab:e6:6a:40:f0:25:64:
         ad:f3:a0:c2:1f:61:b8:1d:01:04:90:8e:74:82:97:26:b5:2a:
         d4:79:db:e1:8d:41:92:d2:33:79:11:6b:4f:5a:cc:2f:af:c8:
         60:29:af:eb:2d:9b:8a:f5:43:63:21:cb:12:95:ed:d0:0c:fe:
         4b:61:c5:bd:7d:95:44:83:0c:d6:72:de:74:c0:e1:a0:7e:6c:
         2b:04:c1:df:9e:46:79:ed:05:63:a6:bf:97:78:06:bb:48:0a:
         e5:55:70:ce:c0:a9:a1:86:3a:9a:4b:c0:1e:d9:42:5b:46:43:
         55:3a:0c:34:cf:fe:bb:36:89:83:07:85:f6:1b:f2:6a:a6:51:
         f9:17:74:b9:df:03:90:b0:d7:19:ec:9d:2a:60:c2:8b:49:2b:
         22:8b:4e:7f:8b:7b:9a:f6:09:5f:97:f5:0c:e2:87:da:dd:72:
         fb:0c:f0:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPOOl0g/zoyjP/T0TaDh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTYyMjFkYTg1ZjZjOGE4MDcwMzU3NjY4M2FkMmMzOTNm
MjNiY2MwHhcNMjYwOTI3MDUwMDU5WhcNMjYwOTI4MDUwMDU5WjAzMTEwLwYDVQQD
EyhiMzczY2EyMmFjODgzM2U0ZGI2MjJiZDc3OTk5YWFmY2VhMTA0MjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz7+67TCQ+1xd6qFoqyDHllsQBx/
csv0DBbmCwRnzubghniNzV2D8e20P+Y02fONYvVxSR/icql1CMY0kmSQ/U3CUd+L
khs/u4rESAjb2f6eGZryKiRrxoC2ooP1+jIUVG67GHct9lmLxG0CwrpZBxUdqHEb
ElJCnt/YJGeQaRMy5HJSKu9b2iOIMM4lqLx/iS7+YJHwf7PIvc94idnjmRP0HCEz
DMj+3R89bsS/Z30wbgCHO5+hYjBwqn29cziSaXd+saRgplnqRlLsj/16TX2Sq3Bx
BOwtcxy08lIyLG5zWa9LIqbh04GFQOpyXqejwrikCKqDgNmX8ISK9710GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNzyiKsiDPk22Ir13mZqvzqEEJoMB8GA1UdIwQY
MBaAFFuWIh2oX2yKgHA1dmg60sOT8jvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVZaUhhaGZiSXFBY0RWMmFEclN3NVB5Tzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yNjAzYmQtODE1Yy00ZmIwLTliOWMt
NTUzNDU4YzkwODk5LzEvVzVZaUhhaGZiSXFBY0RWMmFEclN3NVB5Tzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8yNjAzYmQtODE1Yy00ZmIwLTliOWMtNTUzNDU4YzkwODk5
LzEvVzVZaUhhaGZiSXFBY0RWMmFEclN3NVB5Tzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkCvEhrO
xP11mjDfpVQyi6FM99xflVIogD+ympJ/XOYm1Y572y35nu2RlxJTJjKShkJGnRER
gSAK8tkRq/1x94tx7o4skK47gO9A94/UAyWQBQqr5mpA8CVkrfOgwh9huB0BBJCO
dIKXJrUq1Hnb4Y1BktIzeRFrT1rML6/IYCmv6y2bivVDYyHLEpXt0Az+S2HFvX2V
RIMM1nLedMDhoH5sKwTB355Gee0FY6a/l3gGu0gK5VVwzsCpoYY6mkvAHtlCW0ZD
VToMNM/+uzaJgweF9hvyaqZR+Rd0ud8DkLDXGeydKmDCi0krIotOf4t7mvYJX5f1
DOKH2t1y+wzwDQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:12:06 2026 by rpki-client