Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File:                     w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier:          yS71YPaHpmlfq0nR75/h78qd/LUmrpa9aJu+gLgpTGE=
Subject key identifier:   25:8C:C4:F8:9A:3D:FC:24:94:0A:8A:0D:7E:44:6F:09:FD:1B:9D:AC
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer:       /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial:       01A10692E980198EF6B795531DABC10AF627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number:          1A87
Signing time:             Sun 04 Oct 2026 11:00:53 +0000
Manifest this update:     Sun 04 Oct 2026 11:00:53 +0000
Manifest next update:     Mon 05 Oct 2026 11:00:53 +0000
Files and hashes:         1: tKeJVPQprzbHDozpuHwQaIkze-Y.roa (hash: MtFkxMtpBK9xKMV/TWfmwpZjiWuBHp0NnIWMjL58uD4=)
                          2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: Fiup9QscoEaah9aLEdrJLie+EqPrWNW47f7M5Vz//lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:92:e9:80:19:8e:f6:b7:95:53:1d:ab:c1:0a:f6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
        Validity
            Not Before: Oct  4 11:00:53 2026 GMT
            Not After : Oct  5 11:00:53 2026 GMT
        Subject: CN=258cc4f89a3dfc24940a8a0d7e446f09fd1b9dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:4f:5d:22:6a:04:39:b1:7d:0a:d9:25:32:
                    38:8a:92:8b:fe:28:ee:0c:90:8a:62:a1:ea:48:84:
                    bc:b9:09:e3:23:01:7a:eb:ac:5b:e6:95:36:8b:50:
                    f5:0b:4d:8c:af:16:38:dc:5d:d0:1c:17:c8:81:b1:
                    41:34:b3:53:09:76:95:2e:7f:c5:db:d7:80:30:4d:
                    4c:6c:f8:e6:10:d6:92:0a:98:f1:8d:64:63:9f:2e:
                    af:d4:f0:0b:10:7c:ab:17:2a:5a:3a:38:f3:e0:1e:
                    f8:a2:c1:a4:19:ca:8c:48:2c:13:13:ed:4c:4c:1a:
                    50:56:c2:2e:7f:17:ca:73:90:43:e2:ac:cc:a3:85:
                    b2:f9:86:d5:17:a9:82:00:a3:68:2c:fe:1f:82:87:
                    2d:5b:9a:5e:69:87:94:7e:b7:9c:d4:02:24:59:86:
                    38:ec:67:53:a8:12:5a:bc:f0:26:1b:a9:35:2c:49:
                    59:0f:67:49:41:43:42:e4:8f:c2:09:8b:4b:b4:3d:
                    ca:8c:7b:a6:8a:6b:7f:08:7d:9a:85:8b:f0:9a:03:
                    15:e2:30:a5:be:6f:e4:aa:7b:47:1b:e2:70:24:03:
                    fa:6d:cb:3b:7a:ad:35:bf:f3:7b:3f:2a:f9:9c:03:
                    30:3f:63:ed:e5:9d:34:54:d0:fa:23:a4:07:2d:da:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8C:C4:F8:9A:3D:FC:24:94:0A:8A:0D:7E:44:6F:09:FD:1B:9D:AC
            X509v3 Authority Key Identifier:
                keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:71:6d:42:a9:1a:0b:ef:7f:d9:95:72:3c:89:fd:d2:39:a9:
         0f:41:ef:a5:01:62:cc:dc:aa:31:49:5c:2f:e9:f8:5b:81:78:
         c6:d0:f9:19:4a:8f:d8:3f:d4:e7:de:42:a1:02:53:a6:85:dd:
         bf:35:28:9f:1d:a6:da:be:c6:f4:26:25:9c:d7:da:52:74:1d:
         76:18:6b:49:7e:50:21:ef:20:e6:29:54:4d:38:b8:91:4c:8b:
         67:87:66:95:c6:29:f1:a8:7a:6d:b9:33:a7:f5:70:d8:c4:8f:
         06:8b:25:de:14:97:f2:a5:23:8b:08:53:d8:f7:30:c9:ca:0c:
         0f:80:36:b9:bc:34:b6:11:c7:d0:40:e7:cf:ff:be:23:52:c1:
         23:fc:1f:42:a7:01:02:bc:1a:ce:aa:f0:3e:f5:b0:70:2f:c4:
         57:db:15:59:ac:24:6b:14:5a:a1:0c:2b:f1:41:9f:99:89:72:
         7b:74:94:a2:7a:70:8e:86:44:ac:74:8c:4c:91:27:78:21:a7:
         81:3c:a1:8e:38:f1:91:9e:53:ea:48:f6:e1:b2:f6:dc:ae:1b:
         51:4c:cf:d1:af:bf:b1:c4:a6:ba:1c:9c:cc:b0:0f:90:c5:8d:
         bb:56:96:b2:d3:ba:fc:c7:05:73:a2:15:bc:7d:0a:c1:3f:6a:
         2b:bb:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:27 2026 by rpki-client