Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
File:                     wA_3yZHBXTi_3_s648uYg1ZSnsI.mft (raw, json)
Hash identifier:          2AlqXGSwgXIdhZ6Bv1mSXKAaLjwl1Fv11toAUY86sCQ=
Subject key identifier:   4A:37:38:34:4A:26:D3:0D:EB:5F:8C:41:07:35:4B:9E:C7:8B:40:92
Authority key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Certificate issuer:       /CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Certificate serial:       01A100912428E4677C28A485B5420A25552B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
Manifest number:          D4
Signing time:             Sat 03 Oct 2026 07:01:14 +0000
Manifest this update:     Sat 03 Oct 2026 07:01:14 +0000
Manifest next update:     Sun 04 Oct 2026 07:01:14 +0000
Files and hashes:         1: tJdEpKTyQFiB6etKYnTD5TRM42I.roa (hash: fkYiQBu5Trdut7tZ/7hqit0Set+zAtJH4HGx3n50MEc=)
                          2: wA_3yZHBXTi_3_s648uYg1ZSnsI.crl (hash: WIdlG1r4t9wMe1dsFSJKZAO8r/IjXqXDwzpjNTvsT+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:91:24:28:e4:67:7c:28:a4:85:b5:42:0a:25:55:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
        Validity
            Not Before: Oct  3 07:01:14 2026 GMT
            Not After : Oct  4 07:01:14 2026 GMT
        Subject: CN=4a3738344a26d30deb5f8c4107354b9ec78b4092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:29:ca:c2:c7:f5:86:43:b1:53:78:8e:fe:
                    16:c0:df:36:f4:09:b9:db:10:41:6a:44:e3:12:77:
                    27:11:09:da:a7:61:1a:42:bb:bf:e2:53:69:0d:3a:
                    a6:88:b3:25:9c:69:0b:55:29:83:4f:34:c6:3b:d1:
                    b5:ab:88:c4:31:34:18:e3:e3:d7:55:18:84:28:4c:
                    8f:94:16:d1:85:74:c8:ba:fd:a0:18:6e:00:55:10:
                    44:05:58:46:d6:07:27:b3:da:60:a1:3d:54:12:4d:
                    33:0d:b1:d7:15:fa:e3:f0:91:08:e1:c5:16:49:4d:
                    71:b6:64:b2:e7:33:53:09:44:9b:0b:1f:50:4e:4d:
                    75:fe:03:e2:f5:f3:f8:55:9d:44:bd:af:97:2a:9d:
                    02:58:eb:6a:f4:57:25:b1:ea:dc:21:60:a4:6a:97:
                    8d:24:c3:fd:0f:35:3e:0c:0a:0f:66:67:89:b5:1c:
                    aa:56:27:95:44:ad:03:dd:de:91:e4:58:5d:93:66:
                    44:99:0b:84:fc:63:37:c3:e2:3d:7e:19:85:2b:b2:
                    df:63:f4:08:11:fd:6c:17:c4:1d:4d:bf:93:9e:9e:
                    8c:b0:31:fa:05:34:7a:b2:9a:7b:6c:f2:dc:4f:23:
                    f3:e5:e0:13:97:5e:41:c3:ab:2a:cc:5f:08:df:cf:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:38:34:4A:26:D3:0D:EB:5F:8C:41:07:35:4B:9E:C7:8B:40:92
            X509v3 Authority Key Identifier:
                keyid:C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:c7:5e:6a:63:e0:25:4b:17:2d:09:b2:e1:c6:9f:c2:fb:
         d0:d2:d9:bb:7f:2b:6b:4e:19:83:50:77:e6:76:6d:b4:6f:49:
         8f:b9:ea:4e:c1:e9:12:c2:dc:2b:61:04:8c:d5:45:db:33:28:
         a5:d9:9b:ad:a1:a4:c2:ce:0f:0b:85:dd:c0:be:d0:d3:f4:15:
         2e:92:23:38:7e:68:bd:45:f0:09:74:a8:3c:50:5f:f4:26:8d:
         d2:76:55:f0:6c:b2:b4:26:8a:63:41:a8:9c:91:33:9f:7b:63:
         27:05:cd:d6:b0:76:dc:b3:c9:d8:23:ed:fe:14:49:9f:16:7b:
         9b:f7:94:08:d4:dd:82:36:ee:f5:b5:a7:45:71:d8:3c:f0:73:
         5b:f3:49:e2:ea:cf:69:84:e3:06:fe:63:01:a3:d3:ba:ff:72:
         e7:19:d2:42:1c:21:70:fa:96:12:e2:81:7b:da:28:20:58:dc:
         15:29:21:5d:a4:8b:0b:b1:97:49:cd:2e:c6:1d:68:64:12:40:
         03:d1:80:52:0e:f4:3b:35:26:45:35:08:5a:36:14:e9:c4:7c:
         d7:f3:ac:d1:10:aa:a3:78:b6:48:33:5b:27:23:44:5a:9b:24:
         5a:7d:a2:13:8e:1c:3a:c6:1f:d5:9a:13:1c:bb:07:71:af:0c:
         ce:df:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:38:45 2026 by rpki-client