Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          lsclTDT157dawUFZbj/nRlqpFoww9lBB8l/5oT4zBzc=
Subject key identifier:   D5:95:90:66:39:12:C0:C6:19:7B:FA:5F:49:AA:E3:FD:8E:C3:21:6E
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       01A1273095AA2CBFF8EA3432358505D65498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1A98
Signing time:             Sat 10 Oct 2026 19:00:57 +0000
Manifest this update:     Sat 10 Oct 2026 19:00:57 +0000
Manifest next update:     Sun 11 Oct 2026 19:00:57 +0000
Files and hashes:         1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: oK62aVIio5JomgSTx/gmh8Cvmrq4bo1ITvrv+g5XU1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:30:95:aa:2c:bf:f8:ea:34:32:35:85:05:d6:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Oct 10 19:00:57 2026 GMT
            Not After : Oct 11 19:00:57 2026 GMT
        Subject: CN=d59590663912c0c6197bfa5f49aae3fd8ec3216e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:7e:5c:b4:18:2b:a1:de:8a:9a:74:dc:28:
                    fd:c0:4f:d4:c0:45:78:08:fe:e7:50:9a:02:c2:11:
                    a1:09:c9:92:0e:5d:4f:84:d1:5c:5d:48:85:38:95:
                    78:79:d8:cd:47:94:a4:b5:db:12:63:fc:6a:d4:d9:
                    e5:6f:87:99:e1:29:4e:45:1e:90:1b:f7:a0:ec:a9:
                    b8:e6:7d:4f:fd:f9:0e:32:d7:72:e7:76:1a:af:12:
                    79:53:ca:1b:50:c0:a8:15:5d:f1:73:e4:0b:96:96:
                    a2:10:66:d4:5d:b3:df:79:a9:55:85:97:ad:59:c9:
                    04:48:84:84:db:bb:56:e4:03:dc:a6:42:fb:0b:49:
                    24:28:32:ad:90:b8:46:cb:42:24:ef:99:90:7b:cc:
                    66:06:22:88:1e:60:54:c7:d2:79:0f:23:8b:81:01:
                    f8:d0:fc:13:30:0b:29:56:b8:bf:d7:d9:89:3e:98:
                    85:85:ee:14:69:d8:1c:1d:b0:c7:17:48:54:1f:92:
                    bd:1e:b0:74:8e:d7:10:b2:ad:3f:6c:3b:36:82:ed:
                    94:3f:a7:29:3f:f0:29:1e:9c:9c:d8:d6:39:db:25:
                    14:cf:50:10:e3:1a:96:25:af:24:cc:be:99:e1:3a:
                    c8:38:38:92:94:40:7e:49:ee:61:ad:9b:2e:23:da:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:90:66:39:12:C0:C6:19:7B:FA:5F:49:AA:E3:FD:8E:C3:21:6E
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:42:83:bd:10:ed:80:14:89:cd:7b:3c:d0:c9:f5:00:12:57:
         80:83:bd:ad:1a:a9:a1:ad:f8:fc:68:f1:e4:aa:c1:94:68:8d:
         39:f8:19:df:5e:cc:1c:c8:52:e3:a7:9a:88:fe:c9:5c:0e:47:
         33:e5:e8:52:0d:a4:02:42:91:85:39:f6:79:b0:b6:75:c0:81:
         0d:d9:87:21:1b:58:67:0f:e0:98:f2:60:bf:dc:8c:35:43:a4:
         97:e2:b1:ff:51:4c:ef:67:ee:76:a6:9f:eb:44:8e:ac:22:89:
         68:d8:78:41:cc:f5:e2:93:66:82:cc:86:c4:5a:05:1a:3b:f9:
         1b:f3:bc:b2:7d:c3:10:1c:fe:e3:36:60:31:cf:93:a4:53:81:
         a6:fa:90:6e:d0:34:e7:0e:1d:68:bb:05:30:30:b0:5e:20:d9:
         fb:98:1f:ae:5f:0b:3a:dc:12:8c:5c:d3:30:90:c0:88:4e:86:
         e8:9f:8c:ea:0b:b0:1a:7c:5d:52:76:97:9d:d8:e0:bf:78:b5:
         33:70:ff:47:e5:8e:ff:7c:bd:86:58:1a:15:ba:fe:84:a7:ea:
         50:5f:a0:2b:94:4e:a6:7f:18:13:66:76:cf:f9:d3:5f:f9:23:
         3b:40:2c:b8:d4:ae:bd:b1:4e:9f:b0:bf:25:05:11:48:af:84:
         8b:85:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:39:28 2026 by rpki-client