Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          HoC9JT1/XOJE8iU7HCmTI2LNVQeyWbWljSY3g0AiYBE=
Subject key identifier:   56:55:CB:70:17:4C:D0:B4:10:4F:9F:65:2E:A1:A5:46:EF:2C:EF:C6
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       01A0DE05D9C6C0427C5F049D58460701678D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          1A79
Signing time:             Sat 26 Sep 2026 14:02:00 +0000
Manifest this update:     Sat 26 Sep 2026 14:02:00 +0000
Manifest next update:     Sun 27 Sep 2026 14:02:00 +0000
Files and hashes:         1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
                          2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
                          3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
                          4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: e/O6eDddacVqAkgNkfZ968bSsXQ72YBK5nAOoK2UQCw=)
                          5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:05:d9:c6:c0:42:7c:5f:04:9d:58:46:07:01:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Sep 26 14:02:00 2026 GMT
            Not After : Sep 27 14:02:00 2026 GMT
        Subject: CN=5655cb70174cd0b4104f9f652ea1a546ef2cefc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:71:2f:c7:18:52:20:73:2d:a3:7e:be:1c:
                    56:d7:16:22:17:0b:af:22:2c:1b:1f:a1:5b:51:34:
                    4c:4a:92:6f:d4:a0:92:e5:f2:e1:ef:52:43:76:32:
                    af:db:e5:68:b8:28:08:1e:10:18:9c:eb:b3:4e:d9:
                    fd:b3:1d:b5:7f:6f:d8:b9:19:52:cf:ca:33:a6:c1:
                    4a:b7:bb:59:61:7a:d9:26:86:8d:04:39:ee:45:c8:
                    bc:26:7c:c8:28:58:92:51:27:67:34:79:93:f4:8a:
                    7d:89:08:ed:49:7d:f0:f0:03:c9:a4:23:ab:8d:b8:
                    1a:d8:b3:3b:cb:05:90:1b:d1:c6:29:69:78:4c:0d:
                    fc:80:c8:fd:ab:42:7f:02:9c:f3:03:64:df:c4:12:
                    6e:9c:18:a4:31:f0:29:13:e5:b3:53:24:23:89:2c:
                    f0:ee:c5:30:05:c6:70:2e:fb:77:03:a2:46:9a:ed:
                    6e:04:b1:f3:33:6c:bc:64:5a:37:e5:5b:bb:7e:52:
                    7b:24:72:1e:c8:60:45:4a:cb:23:4c:38:19:97:71:
                    6a:15:4b:f0:ae:9a:4e:d0:2f:fa:32:a9:79:d2:2c:
                    cf:08:ea:b2:c8:1e:f3:c1:ba:61:49:31:00:f8:58:
                    e2:31:c5:89:51:7c:c6:68:4c:ee:72:fd:10:26:4a:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:CB:70:17:4C:D0:B4:10:4F:9F:65:2E:A1:A5:46:EF:2C:EF:C6
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:e6:b4:41:0d:f6:ea:fd:73:c6:eb:62:32:f8:05:9f:53:
         71:3e:1d:52:0b:cc:d0:8e:27:8a:57:f9:95:bb:e2:9d:36:24:
         7e:29:69:e1:cb:71:03:9c:26:a0:c3:b6:99:2d:f8:01:74:bb:
         21:d1:2b:9d:d9:da:86:e1:ab:f5:0f:c6:0e:5a:b4:bb:9c:59:
         db:bb:6d:4b:39:80:e6:7d:c1:56:2b:f7:6c:2d:59:10:d3:13:
         f1:e4:27:35:26:15:60:cf:bb:7a:4e:99:c7:c9:c6:c7:62:a7:
         2a:52:97:17:0a:b1:9a:b3:85:43:bb:8f:cc:33:84:00:4d:07:
         e8:03:86:d3:0a:5a:af:00:2e:17:37:7f:68:6e:36:17:7e:30:
         d8:23:0a:d4:1a:06:9c:22:2c:9c:81:f9:f8:68:52:0a:0c:6d:
         4e:bf:c2:8c:da:1c:f2:91:d6:c3:dc:6c:c4:6f:ce:37:a3:f1:
         30:c3:bc:11:85:74:98:73:e2:1b:5b:37:0d:14:1e:1d:db:7c:
         0c:ee:fa:05:12:46:e9:00:41:12:ca:65:77:31:dc:e4:62:25:
         95:33:fe:65:2e:e0:b7:65:1e:9b:80:0f:fa:b0:3b:7c:52:2b:
         7f:7b:ab:81:f4:26:84:51:43:ce:13:4b:f0:7b:bc:34:5b:8d:
         d7:d8:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:22:35 2026 by rpki-client