Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          HPOQR4r+eikt8RjYLyk1Zr7Me2rzJSXV72NAhXjDT50=
Subject key identifier:   A0:F1:67:CE:17:12:D6:DC:06:C3:97:44:33:33:A0:D9:85:D6:75:DD
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       01A125422D46CC508E5CDAD5EBAA88E471D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1A97
Signing time:             Sat 10 Oct 2026 10:00:56 +0000
Manifest this update:     Sat 10 Oct 2026 10:00:56 +0000
Manifest next update:     Sun 11 Oct 2026 10:00:56 +0000
Files and hashes:         1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: /pFr1zfdB1mlS/GBQP+mwJ5w1C8LnjkAvtwgxLP2Jjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:42:2d:46:cc:50:8e:5c:da:d5:eb:aa:88:e4:71:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Oct 10 10:00:56 2026 GMT
            Not After : Oct 11 10:00:56 2026 GMT
        Subject: CN=a0f167ce1712d6dc06c397443333a0d985d675dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:c9:4d:84:8d:c9:c8:2c:38:57:fe:84:ce:
                    5c:e7:a0:25:ad:5b:f7:8c:96:32:54:90:35:07:6f:
                    a1:34:a5:dc:0b:0b:4b:6b:26:37:5f:40:71:16:1f:
                    8a:80:af:55:e1:d3:88:bd:cf:f7:d9:5e:14:83:6f:
                    f4:0b:85:a4:c6:77:11:3b:81:7c:2b:72:52:3b:e9:
                    a5:e5:c1:d8:d1:24:a0:d8:fc:7d:eb:50:f8:43:aa:
                    57:3f:2c:ce:37:d2:fb:56:cd:31:ce:4f:e7:f3:ad:
                    db:02:9c:a2:33:b6:fa:b8:9e:97:c6:9a:70:4d:55:
                    e9:fd:c5:77:00:b4:39:68:5b:cd:44:9f:60:a3:b9:
                    1c:e0:1c:ac:c2:1a:a5:9f:06:84:22:2d:eb:1f:c8:
                    63:08:c3:91:c0:60:ea:c0:53:65:8f:20:b7:e2:2a:
                    e6:86:16:bd:fb:56:d0:89:6e:82:fe:84:7e:4e:93:
                    66:31:34:8b:bc:2c:13:e6:e3:6c:c2:08:ff:5a:54:
                    c1:b1:17:ca:06:4b:a5:b2:35:46:1f:4f:2b:81:cd:
                    12:b0:26:23:33:4f:55:7c:2e:f2:40:ea:b7:6d:92:
                    44:92:92:f8:d1:fc:44:3c:6a:3f:64:5e:71:0f:b8:
                    f2:f8:6f:b1:2d:5c:35:39:e6:63:f7:35:3e:04:5c:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F1:67:CE:17:12:D6:DC:06:C3:97:44:33:33:A0:D9:85:D6:75:DD
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:0f:04:c6:20:29:24:37:17:62:68:38:fa:e6:50:b0:3f:
         ea:35:36:69:6b:6f:ba:9a:15:b1:4c:54:13:9b:19:48:18:7d:
         32:dd:c9:52:cf:96:aa:5c:0f:ba:03:86:ae:8f:48:be:43:2a:
         db:88:ea:de:d0:34:09:d9:22:c8:f7:d3:95:ae:8d:fb:72:6c:
         5b:5e:b8:e6:86:3a:89:c5:8b:04:dd:df:10:ff:33:13:e4:29:
         89:11:3d:4a:a7:be:03:8f:71:75:1e:53:a7:83:04:fe:e0:50:
         b3:d4:50:e3:65:ee:54:8b:df:4b:e6:95:28:08:c6:a9:e2:5a:
         36:83:a8:ac:f6:ce:44:b6:e1:67:c0:7c:a6:03:44:8b:82:2a:
         62:f3:be:b8:f9:09:f8:24:3f:d6:d7:41:93:ad:3c:c4:d4:ff:
         b2:2d:f4:0c:01:98:f4:89:f3:f4:fb:e1:cf:9f:4e:42:3c:20:
         fe:e8:5c:da:62:11:90:cd:05:50:a8:d4:bd:0c:ec:00:8f:1a:
         95:0c:0e:83:c5:f4:b8:90:e2:f9:a6:08:d2:60:01:9b:5d:0a:
         82:d0:54:fe:8c:06:a9:50:4b:8d:43:17:d1:5a:3b:3e:23:65:
         cc:48:3e:1a:ed:ec:74:35:58:90:ac:cd:ce:65:9a:3f:6b:02:
         e7:87:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:57:33 2026 by rpki-client