Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File:                     wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier:          c2q16/lP/QX+Lh/gFBCshAmkwITErmqQl++bLz/smmM=
Subject key identifier:   14:75:3F:D2:3C:BC:73:66:D8:3E:66:FC:74:EE:C0:19:26:58:4A:E1
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer:       /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial:       01A0D4CB4E3CC3814BC4C3E8ADC31D2B8746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number:          1145
Signing time:             Thu 24 Sep 2026 19:01:28 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:28 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:28 +0000
Files and hashes:         1: 2WG9_auLWLnABS1HW4iOt2pWC_o.roa (hash: 7Sy76mTSIMhku20UWsQfLStgGuU+xLVJeVa4x3HtASs=)
                          2: _45yXBMLPa0cZDY0d-X3m4x1Jfs.roa (hash: ZWvTH3Xi9Fnbl1xX9A2cm14ISlca+xERk+35mL0vJLY=)
                          3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: QA12vRFZr3b3FYFCONDsXtGYAehtAApYh13/jhirTqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:4e:3c:c3:81:4b:c4:c3:e8:ad:c3:1d:2b:87:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
        Validity
            Not Before: Sep 24 19:01:28 2026 GMT
            Not After : Sep 25 19:01:28 2026 GMT
        Subject: CN=14753fd23cbc7366d83e66fc74eec01926584ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:34:f0:b1:72:88:65:e8:82:8b:17:7d:35:
                    55:25:d6:04:86:fc:c4:7a:96:71:ef:ea:80:91:a7:
                    76:29:c2:49:71:4a:6d:d9:ad:e0:ba:0a:2d:ba:21:
                    66:1e:f3:15:83:07:e1:bd:05:67:da:aa:c2:6b:1b:
                    33:3f:27:29:dd:3f:9a:69:4d:bd:64:ca:50:b5:14:
                    2e:38:1e:29:3b:cb:a5:fe:d7:14:e4:67:87:49:21:
                    8d:f9:d5:0b:1e:74:0e:b4:7d:49:77:35:ff:67:d8:
                    3c:b6:2a:17:8c:7c:41:b1:f3:a8:23:fb:98:01:b4:
                    53:4c:9e:a4:8b:bb:19:12:a1:07:34:4b:6d:8c:0e:
                    94:99:be:f1:b0:e9:54:1d:08:a4:e7:ff:68:b1:52:
                    4e:5d:78:6f:db:5a:f1:f1:89:f9:bf:b3:40:48:72:
                    79:8b:b8:ad:f8:73:d5:98:c5:af:03:6a:a7:2d:9c:
                    5e:66:cf:6c:7d:e2:9a:b1:15:07:b5:d6:89:3d:a8:
                    0a:97:ac:de:25:37:09:58:e2:08:00:cc:21:da:22:
                    74:77:99:f1:5c:10:b7:50:2f:c5:03:77:42:64:63:
                    2f:87:63:7c:4b:5a:52:10:15:5a:fa:12:d1:4c:a2:
                    38:bb:f1:e2:1c:08:9e:0c:61:32:b0:08:0b:39:9f:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:75:3F:D2:3C:BC:73:66:D8:3E:66:FC:74:EE:C0:19:26:58:4A:E1
            X509v3 Authority Key Identifier:
                keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:ca:eb:30:52:50:7c:87:71:48:65:a9:3b:64:ca:51:9a:
         ff:5d:55:5e:5c:ba:09:c1:88:ee:ed:bb:8a:41:9c:d3:e3:59:
         7f:bf:63:0b:92:46:74:9a:d5:c7:39:c7:cb:95:06:9a:11:6d:
         21:a5:a5:b1:4f:ea:eb:10:7b:11:04:d6:03:cd:07:b8:6c:05:
         f8:89:9a:2c:e1:c3:e7:85:de:80:b4:d0:55:51:3f:d7:9e:8b:
         a0:62:99:23:3b:0a:5e:81:2e:a2:c9:ed:8e:f9:c3:e4:dc:2f:
         1e:2e:71:d4:f7:c8:43:2a:a6:29:3d:f0:d3:59:5d:be:0d:f3:
         bb:3d:f3:19:3f:1a:95:c2:7b:78:1d:88:01:fe:c5:32:f9:85:
         7a:3a:d0:48:16:7a:2b:a0:52:bc:3e:e6:68:92:fa:d5:cc:a0:
         fb:33:6f:dd:1b:ee:e9:26:d3:a6:54:5d:81:9c:ef:e9:87:49:
         2e:63:30:bf:ce:4c:f0:0b:87:26:04:f3:81:c4:c3:04:f2:27:
         5c:eb:33:12:76:36:ea:55:6f:95:b1:89:cc:a0:b1:b5:24:86:
         55:ab:5c:90:9b:00:96:3e:9b:4a:ac:a9:e9:8f:03:dc:e0:95:
         06:3e:19:a0:82:89:bb:f6:da:2d:be:1f:7b:71:44:d1:78:cd:
         6f:44:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:15 2026 by rpki-client