Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          6PnsG9FCYWuzDKDHOh7i6e2Z1cGVO3WWIvdj0xf4RQk=
Subject key identifier:   61:AF:CF:46:C2:DA:0E:FF:F1:44:C4:9B:16:69:4F:C2:BC:6F:08:14
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       01A12A9F3B2D5A23ED1D52912C183F833669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          0297
Signing time:             Sun 11 Oct 2026 11:00:40 +0000
Manifest this update:     Sun 11 Oct 2026 11:00:40 +0000
Manifest next update:     Mon 12 Oct 2026 11:00:40 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: 1L9tj5VR19E2ZzGHEL/k6sTj04OPURlngtq2cmfgb2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:9f:3b:2d:5a:23:ed:1d:52:91:2c:18:3f:83:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Oct 11 11:00:40 2026 GMT
            Not After : Oct 12 11:00:40 2026 GMT
        Subject: CN=61afcf46c2da0efff144c49b16694fc2bc6f0814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:da:06:bb:13:00:14:a9:a3:fd:63:46:04:7e:
                    72:6f:20:54:bb:04:c4:75:de:35:12:47:a6:1d:5c:
                    76:8e:4e:51:5e:58:37:6f:d0:5d:8b:0e:68:21:fb:
                    fc:61:a2:34:f5:d3:a9:e1:9a:15:f2:11:df:9b:56:
                    27:43:10:19:a0:99:df:13:a1:3e:6c:86:bc:1d:d3:
                    63:82:01:5a:90:3c:90:b2:f2:de:dd:36:04:80:e7:
                    76:e2:c8:8c:32:0d:7d:15:3c:33:e2:3f:d0:cc:4e:
                    d2:90:c4:8b:6d:16:2c:56:71:86:bf:bf:29:c4:3f:
                    85:e6:6e:04:a9:97:34:0d:b8:e4:12:3e:69:ae:99:
                    d5:0a:0e:2a:be:85:bd:09:0f:ed:2f:86:bd:13:03:
                    1a:3a:11:53:9e:6d:d3:74:09:65:1d:a0:ba:50:62:
                    e9:ce:e2:07:f3:dd:64:f9:d2:7c:3d:16:a9:58:2d:
                    2c:36:d2:03:5f:9e:1b:6e:8c:38:1d:a8:5b:d3:8d:
                    bd:67:a3:15:ba:2e:5f:9b:28:e3:8d:77:8b:dc:89:
                    e1:f9:be:cb:ef:8a:a7:77:a9:36:df:ea:7f:b9:3d:
                    d5:d7:44:59:48:e7:93:f6:48:d8:e5:81:91:cc:e0:
                    72:4d:22:8f:62:a6:27:88:a9:d9:9d:ac:8c:9d:b2:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:CF:46:C2:DA:0E:FF:F1:44:C4:9B:16:69:4F:C2:BC:6F:08:14
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:32:66:66:e8:e5:45:e4:47:09:92:0a:38:7d:e3:bc:6a:70:
         ca:26:97:cd:fc:09:30:a8:f7:9d:c1:89:4d:a8:18:52:b1:d0:
         85:c3:f9:84:96:13:69:72:ee:5c:bc:eb:8c:ea:96:a7:e7:d8:
         10:1b:a2:3f:e5:20:9c:cb:82:cc:74:ba:55:b3:cc:c8:29:2c:
         4b:27:95:46:8c:f4:de:f1:81:56:2a:4d:af:19:b6:79:2b:5a:
         8b:d7:1a:b7:a0:1c:5f:fe:43:63:de:5c:66:4b:5a:c8:10:ae:
         29:8a:e1:78:39:82:b4:d1:a1:fc:fd:12:eb:9b:48:ad:c2:0f:
         30:f4:e3:76:a0:ca:6c:27:5c:5b:74:57:f8:64:b0:b7:09:1c:
         1b:99:93:22:76:cc:69:af:53:70:9b:64:05:53:db:e6:b0:b8:
         17:f6:92:ab:48:18:e3:86:5e:77:df:e3:34:72:50:a4:7d:3b:
         43:9a:df:8e:c9:ae:63:b7:40:54:47:3c:e9:70:04:b8:9f:b9:
         41:e9:78:3d:f2:ce:b5:16:03:1c:6c:3a:95:d7:11:6a:b9:61:
         f6:c2:0d:17:95:1b:3a:09:b8:b6:87:f2:95:04:c8:45:70:e1:
         5a:eb:54:07:4a:4e:74:79:a5:03:59:f1:fe:24:a1:d3:c9:de:
         94:c0:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:23:35 2026 by rpki-client