Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          xxfK7JHdYUCwE8CAjZDePPNdh9+TIfiP5MyVQtSmJng=
Subject key identifier:   07:18:13:FE:C1:82:B8:E4:EA:A4:58:3E:CF:88:4F:5A:1A:BB:34:21
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       01A128E7FEF2DB95BC6BFF784353A1E80268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          083C
Signing time:             Sun 11 Oct 2026 03:00:54 +0000
Manifest this update:     Sun 11 Oct 2026 03:00:54 +0000
Manifest next update:     Mon 12 Oct 2026 03:00:54 +0000
Files and hashes:         1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: FAuogOsTlJtUAyXnG+3w8iRr7STR1qHKbyfuNlBozyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e7:fe:f2:db:95:bc:6b:ff:78:43:53:a1:e8:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Oct 11 03:00:54 2026 GMT
            Not After : Oct 12 03:00:54 2026 GMT
        Subject: CN=071813fec182b8e4eaa4583ecf884f5a1abb3421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:4f:7e:35:d6:fc:a8:bc:b0:91:83:16:f1:
                    2e:68:82:2d:65:cf:7f:99:81:f8:83:76:21:76:e6:
                    87:ee:a5:79:3c:c2:a6:4a:5f:d8:07:96:70:a8:3c:
                    50:da:89:b6:6f:28:af:6a:d5:1d:ab:f4:b5:8a:3d:
                    fb:b2:12:f7:8c:45:a6:1f:86:a2:9d:72:5a:ea:e8:
                    b3:6f:96:37:fd:ab:37:4a:99:a3:e6:18:b2:89:9d:
                    d8:4e:09:5f:8a:00:cd:f3:f2:94:51:07:39:91:38:
                    68:ca:bb:6a:a6:7d:89:d6:40:a8:ce:00:d3:dc:06:
                    66:0a:7e:b3:5d:00:32:4d:01:25:f4:23:86:5b:3d:
                    b9:e4:11:ed:20:98:b1:3e:cb:69:ba:dd:e1:4d:18:
                    76:b5:6a:6d:f8:ab:ad:36:32:9e:99:76:12:2c:73:
                    08:ad:37:77:a5:64:f3:0f:e7:f5:3d:b8:c1:7f:f3:
                    e1:25:8f:f8:7e:a0:b3:a6:1b:97:b6:42:70:2b:29:
                    b8:ca:12:0c:9f:16:c8:fc:11:3a:3f:23:54:88:de:
                    f2:c1:d4:3a:f9:bf:5a:f9:8f:03:ba:db:ff:39:7b:
                    9f:e5:17:99:7b:b7:6b:de:f1:7e:3b:fc:96:f5:95:
                    20:89:a6:76:7e:ca:61:f6:59:55:e0:cb:df:0a:d3:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:18:13:FE:C1:82:B8:E4:EA:A4:58:3E:CF:88:4F:5A:1A:BB:34:21
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:ee:05:cd:51:e8:28:91:3d:98:23:81:e0:9d:7a:cc:da:
         b8:0b:09:1f:d6:22:68:75:ce:f7:cb:e0:06:b3:0d:7b:a9:4d:
         31:ab:65:33:bf:0a:d2:1b:a4:f1:26:18:fb:b9:37:d4:aa:14:
         33:f5:76:d4:0e:26:96:a4:20:68:fd:a0:59:9a:d4:b9:a5:72:
         c9:b4:57:18:d7:16:3e:e1:c9:2e:e6:1c:a6:fe:97:d8:32:a3:
         0f:e7:5e:c8:58:c8:17:de:4d:aa:11:c1:ff:05:92:d3:6c:97:
         c0:d5:b4:27:7e:94:aa:e8:65:88:15:cf:92:b0:17:8d:3a:ce:
         d9:71:f0:01:1d:8c:1a:a0:b2:ae:77:e0:8c:d5:6d:e3:73:60:
         50:37:b7:cf:91:11:8e:e3:de:cb:4a:f0:3a:0b:d7:46:0b:29:
         a2:10:11:ba:b1:3d:37:0a:16:60:2d:2e:be:dd:f6:d1:60:ce:
         bc:86:62:fb:55:1a:d3:1e:1b:0d:5f:84:8a:96:85:10:fa:29:
         c9:d4:70:60:d3:78:e3:fc:65:a1:57:26:fb:9d:a1:5d:7c:08:
         cd:20:07:31:65:08:9a:cb:c1:4c:39:03:13:e5:45:90:7e:b4:
         6f:bb:47:b1:6d:74:ed:85:4c:00:4a:7a:0c:15:dc:25:3c:b0:
         92:57:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:59:52 2026 by rpki-client