Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File:                     w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier:          /iGm4EYw+DckY2Vhn+5CZLhVYKd1gIqzNVEz2ENdsWM=
Subject key identifier:   76:1C:40:DF:1C:94:3E:75:A6:43:95:11:7D:5E:48:74:10:0F:A2:55
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer:       /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial:       01A1DDCBFED382260550F0EBCCB744740B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number:          0EE9
Signing time:             Sun 15 Nov 2026 06:01:35 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:35 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:35 +0000
Files and hashes:         1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=)
                          2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: kjePJWJj1wvvRA5fpC+q2ZCj5K+GMexOKOWEaEg1M8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:fe:d3:82:26:05:50:f0:eb:cc:b7:44:74:0b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
        Validity
            Not Before: Nov 15 06:01:35 2026 GMT
            Not After : Nov 16 06:01:35 2026 GMT
        Subject: CN=761c40df1c943e75a64395117d5e4874100fa255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:59:78:1f:2c:94:fc:0a:92:c2:48:17:bd:
                    df:ec:34:a9:0f:64:7a:88:6d:c8:9f:0c:6f:7a:6c:
                    8a:93:75:ff:5a:e9:51:fa:fe:91:bf:69:83:af:20:
                    21:5e:ed:a2:94:4a:8d:b9:3e:9d:56:e7:79:1c:6d:
                    5e:ca:28:34:0c:f1:7c:ae:fe:ac:a1:2f:42:fe:14:
                    47:b2:79:b6:4d:26:9d:20:3d:1b:66:d5:f7:6f:b6:
                    02:2f:9c:f5:2d:bd:11:a1:aa:3d:2f:97:f8:22:26:
                    78:f0:b9:42:20:4f:f2:ad:97:b8:06:dd:f9:c3:42:
                    ff:28:da:54:69:51:23:bb:a5:72:5c:73:36:1d:3c:
                    25:b1:49:a0:6b:57:ee:c7:64:75:00:09:03:da:f9:
                    0c:38:d9:06:e7:3f:92:5b:a5:95:a1:9a:bc:77:bc:
                    5b:38:37:ce:2e:66:c7:c9:5e:e6:bd:4c:b1:6c:b8:
                    94:02:9d:30:75:32:0e:aa:89:d0:de:a7:13:76:b9:
                    c3:0e:ea:a4:2d:87:da:0a:f2:aa:1d:70:bc:bb:e7:
                    5d:0e:86:7a:2c:c7:50:a2:3b:22:f8:dc:83:94:6e:
                    2e:a5:60:19:15:01:f6:9e:26:b8:c8:d6:bf:e6:19:
                    7f:f1:2b:5e:4f:ff:37:23:a8:05:40:35:fc:11:05:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1C:40:DF:1C:94:3E:75:A6:43:95:11:7D:5E:48:74:10:0F:A2:55
            X509v3 Authority Key Identifier:
                keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:e5:54:35:ed:20:90:8b:21:c0:7f:8a:a7:2e:e2:fb:fa:
         49:88:6c:a2:68:a6:4f:ab:f7:10:69:00:00:21:12:9e:23:b6:
         46:13:a3:c3:80:6b:d5:5a:11:34:b9:a6:0e:9f:53:7c:c8:1f:
         a8:65:66:b1:92:ea:b1:a9:cf:b2:9c:69:04:ea:df:7f:42:2f:
         3b:93:0a:61:c3:c3:01:82:6b:ab:2d:3d:25:26:04:6a:36:d7:
         30:bf:4c:52:0f:d9:41:c0:5a:23:e7:97:b9:97:19:56:da:54:
         a8:fc:0d:56:ad:a1:aa:85:86:6a:eb:7c:eb:34:f4:0a:d2:a9:
         18:56:50:5e:3b:d3:8c:c5:65:e0:6d:06:1e:ca:17:e7:d4:17:
         ca:6a:c1:96:70:5a:a0:57:f3:34:49:83:74:a4:43:d1:c6:6e:
         4d:ec:a2:5d:b3:89:c0:a2:5f:75:c4:08:a1:e8:4a:2d:d7:8a:
         4e:0f:a3:25:06:2f:3c:c2:4b:27:d1:79:79:e6:f0:cc:fa:da:
         29:f4:5f:b8:dc:59:24:ac:94:94:0e:06:e2:dc:d1:0f:e4:91:
         28:f6:e7:db:5b:f4:f6:95:db:a0:69:1d:d3:9e:6f:ad:61:96:
         af:0e:ea:37:da:e7:1b:6c:82:8c:6b:a8:9e:87:67:39:70:e5:
         3f:c0:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:33:59 2026 by rpki-client