Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          kJAPHaDSEHJCZn+Rm4ZUHVRN6NYIyjUJtzAd0F75JnI=
Subject key identifier:   F7:77:58:CB:98:90:97:0B:D9:E7:C5:D4:0A:1A:69:7A:46:A7:EE:C3
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       01A0EC6633787EC3E8D647675033FC7E377D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          15B0
Signing time:             Tue 29 Sep 2026 09:01:55 +0000
Manifest this update:     Tue 29 Sep 2026 09:01:55 +0000
Manifest next update:     Wed 30 Sep 2026 09:01:55 +0000
Files and hashes:         1: Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa (hash: iHuFlOzhqVh9TVA/RdSn3C6VoHbo7FF1nq7e3/ScdEM=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: 2Fbx79AXURrAagcw5M1BdI061ADPhJ5L3hUppz1VJAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:66:33:78:7e:c3:e8:d6:47:67:50:33:fc:7e:37:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Sep 29 09:01:55 2026 GMT
            Not After : Sep 30 09:01:55 2026 GMT
        Subject: CN=f77758cb9890970bd9e7c5d40a1a697a46a7eec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:bf:e1:30:7a:02:9e:c5:fc:a7:09:36:cf:
                    e5:d3:b1:b5:21:1c:04:23:09:bf:13:04:dc:be:b4:
                    45:4f:02:c0:f6:b0:ca:99:b0:f8:ba:3e:db:54:b1:
                    83:4c:43:3a:18:f0:a6:d8:9b:e5:db:4b:62:1f:dc:
                    54:80:47:6d:9b:c5:0b:87:c6:54:b1:61:34:59:05:
                    fd:57:69:21:99:3c:71:e6:fd:82:36:1f:97:52:eb:
                    3e:24:3f:d7:d0:ac:47:8e:36:24:77:05:37:f7:5f:
                    5f:15:06:1b:83:bb:1c:19:5e:f6:9f:b5:2b:9e:bf:
                    b6:1a:fd:35:75:69:5d:0a:95:11:db:ed:36:39:9f:
                    6c:aa:e1:78:ee:f7:38:69:a5:36:d6:92:69:8e:6c:
                    6c:6c:a5:40:fd:c2:6f:35:6d:11:79:6c:ac:82:f6:
                    99:9a:e7:60:2e:d6:bf:f8:7e:97:9e:b7:a9:c3:be:
                    97:5b:6e:f4:b4:74:fc:98:ff:30:9d:cb:8f:b1:9a:
                    68:08:41:3b:67:ad:fd:da:5c:ff:89:48:e2:1e:dd:
                    90:3e:a3:3c:84:41:bf:5f:32:e1:06:12:7a:a1:06:
                    2a:5e:46:ee:04:af:ce:ae:8a:65:12:6d:32:ef:39:
                    86:ee:5d:86:04:72:f5:bb:3a:f5:56:58:ca:f3:93:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:77:58:CB:98:90:97:0B:D9:E7:C5:D4:0A:1A:69:7A:46:A7:EE:C3
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:30:4a:b7:b3:c5:1f:15:19:2f:db:26:d6:65:4e:f3:7a:47:
         7f:df:2e:8b:db:cf:03:b0:bf:f0:76:1e:4f:13:b4:75:5e:58:
         8a:80:f6:7d:fa:25:bb:fd:94:ff:50:7b:9a:90:66:2f:00:54:
         77:c6:0f:74:b8:2c:b5:e0:6f:37:49:87:4b:0b:df:bb:3a:49:
         71:de:71:c7:ec:11:0e:7c:97:a2:08:f5:0f:d1:be:d3:bc:4c:
         6c:84:60:41:dc:78:62:e9:0b:30:a9:78:1e:d2:81:8f:c6:c7:
         33:1f:07:fa:22:b0:cc:e6:f7:5b:65:68:10:e5:e6:6b:2f:bd:
         f1:28:60:41:fc:56:31:40:89:86:fb:b4:c5:13:27:05:e9:71:
         60:2d:ef:83:8e:1b:1f:4a:6e:1b:f0:3f:60:c8:44:b2:74:8c:
         b3:b8:85:0c:24:24:95:b0:ff:fa:90:10:7e:e6:39:36:ad:a9:
         4f:8a:f7:98:66:ed:4f:2a:bf:be:b7:ea:c7:e0:d2:cc:90:d1:
         b8:ac:f3:9e:48:39:bc:44:72:46:0f:9f:09:cb:e0:67:ae:cd:
         65:a2:dc:fc:8a:9e:0a:fa:aa:a1:d3:21:f2:c7:0b:84:48:2b:
         c1:56:94:e4:54:01:d3:44:60:08:82:d2:23:6c:87:eb:11:12:
         19:4c:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:37:30 2026 by rpki-client