Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File:                     wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier:          XGbjLjGzm72S8rm/4IhM/bioN/YNFgQhPdmep1oMiOI=
Subject key identifier:   B7:ED:01:5C:D2:9C:82:20:20:92:0C:91:E1:AD:D8:9B:18:1F:14:F8
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer:       /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial:       01A0E474D646FC362B91814CD5687135A80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number:          1A7E
Signing time:             Sun 27 Sep 2026 20:00:57 +0000
Manifest this update:     Sun 27 Sep 2026 20:00:57 +0000
Manifest next update:     Mon 28 Sep 2026 20:00:57 +0000
Files and hashes:         1: 5WEnbblEZtQsZWSDelwG3J1pba8.asa (hash: 4QjBmUp9P1OJcT9dX1PWuBFeKLqpYu8jvIADduFcr9Q=)
                          2: KvzDHgVmpEkdkjHPk99sFJrY1zs.roa (hash: l/TyURMCTytuEA/n9GPaS9YbOV/gxZwZ/TqXXQqrbdc=)
                          3: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: 3faeCRY4l+nhopDTLWKyszq+WvPkCshCvzz5AFnFBc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:74:d6:46:fc:36:2b:91:81:4c:d5:68:71:35:a8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
        Validity
            Not Before: Sep 27 20:00:57 2026 GMT
            Not After : Sep 28 20:00:57 2026 GMT
        Subject: CN=b7ed015cd29c822020920c91e1add89b181f14f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:9a:34:ff:dd:3d:d2:8a:4c:a9:cd:7d:f6:
                    e8:7b:03:e4:ec:a1:cc:8f:5f:be:de:87:f4:a3:fd:
                    9d:7c:f2:f3:32:5a:23:97:89:a3:70:29:48:0b:7d:
                    dc:0f:b1:5d:85:ae:2a:23:28:13:8f:11:9f:27:21:
                    26:16:4c:20:60:95:96:de:e5:00:42:3e:60:25:9f:
                    ca:3e:e9:36:4b:36:b3:04:1a:f0:11:2b:5f:0d:ab:
                    be:61:1c:1c:f4:6d:66:30:14:a1:fe:bf:d7:23:e0:
                    35:a6:8e:2e:d8:e1:55:32:25:2f:09:b8:75:e4:55:
                    43:b2:95:d2:92:4c:12:ce:b9:e8:8e:86:59:ba:8b:
                    de:f1:b2:fb:cd:4b:46:43:e2:a8:41:c9:e5:e8:42:
                    75:73:1b:55:47:ff:6f:7b:8b:1c:0d:7a:41:db:13:
                    61:c1:59:81:1d:09:51:c2:e3:5b:de:ca:4c:08:17:
                    a5:48:b9:0f:fe:b4:f3:dc:9a:2c:7a:6d:61:1c:b9:
                    4f:fa:cd:07:de:74:d4:66:7e:c3:c2:8b:99:0b:1c:
                    e4:4c:37:6c:24:94:ab:64:21:ac:6d:bd:4d:97:d2:
                    07:f7:55:c7:dc:95:31:fe:10:56:b9:80:5b:91:37:
                    66:1a:16:df:a3:cb:2d:47:83:a0:75:0a:7a:a2:bb:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:01:5C:D2:9C:82:20:20:92:0C:91:E1:AD:D8:9B:18:1F:14:F8
            X509v3 Authority Key Identifier:
                keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:68:ff:76:f5:41:94:fa:bf:be:d6:f7:48:cf:e9:b2:24:
         ea:b4:25:b9:d9:3b:4d:77:74:01:50:d1:22:9d:04:cf:72:fe:
         4c:c2:e9:aa:b8:cb:a0:e8:79:7c:5e:1c:cb:47:b3:ef:ed:3d:
         eb:05:bb:e1:20:a5:7b:0f:bb:4d:0e:39:94:fb:90:0e:38:11:
         7d:11:ec:df:0b:70:fa:4e:f6:f0:e8:47:f2:a7:34:ff:38:4d:
         39:70:61:c5:cb:f7:63:f9:9d:db:d8:62:c8:63:e0:b2:a5:3a:
         5c:02:56:85:9b:45:f4:08:04:33:71:7a:ef:2d:15:cb:c4:d0:
         be:a4:fa:bc:b4:2f:44:77:ad:3d:6c:34:7e:44:0d:3d:67:45:
         f0:4f:f3:4a:cc:36:cc:5f:57:59:64:7e:08:1e:7a:d0:eb:1a:
         ed:45:00:ec:25:5c:cc:e5:1d:7a:4f:4a:b4:bb:69:ab:33:ef:
         b6:bb:7e:1f:97:d2:fb:fb:c4:d8:4e:a5:1e:09:16:11:e1:3e:
         b5:a1:72:22:be:e7:f2:9d:55:03:19:cb:03:05:41:c8:61:ab:
         20:cd:25:b2:45:a5:4c:01:a7:98:f4:0b:d3:fc:e1:31:25:26:
         03:f7:4e:29:66:0f:58:87:39:73:82:33:5a:c8:81:5e:29:59:
         37:25:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:51 2026 by rpki-client