Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
File:                     WnZf6z4obI26qbHWJoLkT76AByI.mft (raw, json)
Hash identifier:          buHfDMGMsXAAvrbxpG9Pn8+drvkasMcwSwPJdB5hRy8=
Subject key identifier:   FF:83:D4:F8:1A:B3:78:E6:37:1A:A7:7B:63:58:AE:BA:7E:E9:2E:8C
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Certificate issuer:       /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial:       01A0CA7DFEA675F06D295C018AF522DACFA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
Manifest number:          013E
Signing time:             Tue 22 Sep 2026 19:00:49 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:49 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:49 +0000
Files and hashes:         1: KFB95yaF5_FIPvwwGwGsxqSxMs8.roa (hash: 3ZADI8L29it0agLfCEEeq7mz9EEsHFHU3bBFXh0L8uI=)
                          2: WnZf6z4obI26qbHWJoLkT76AByI.crl (hash: fY8j8YyfLaYL5rcbPxdoPqJw36qblVJxFNv5v5MgOL8=)
                          3: i7pkQ_qCDYcLrdDN91rJhafVESI.asa (hash: AiqBocMFUWHp3rzWKv/UFjipRopIcsJnP0v/MVSOmZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:fe:a6:75:f0:6d:29:5c:01:8a:f5:22:da:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
        Validity
            Not Before: Sep 22 19:00:49 2026 GMT
            Not After : Sep 23 19:00:49 2026 GMT
        Subject: CN=ff83d4f81ab378e6371aa77b6358aeba7ee92e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:9c:8d:d9:6f:ea:77:d4:75:f7:cf:41:59:
                    c5:79:e1:55:4f:7a:ea:64:3b:74:23:c1:1c:73:5a:
                    f5:10:79:e8:b9:44:de:35:65:54:6a:94:f4:18:f1:
                    d7:8c:9f:f0:fe:55:e5:f6:f6:1e:bd:65:82:d2:bf:
                    18:74:e6:e5:e1:7d:e0:22:28:52:93:9b:9f:ba:dc:
                    f6:48:de:b5:c6:7e:d4:33:79:b7:f6:b7:8b:2b:95:
                    59:2d:bb:48:de:7d:25:c7:d4:d7:bb:64:17:e8:6b:
                    07:3c:fe:e8:70:58:62:d4:21:8b:be:46:e8:19:84:
                    ac:95:75:ad:29:60:2e:cd:91:5c:c5:80:59:ea:47:
                    aa:ec:97:57:0d:c0:14:f4:a0:50:0d:e5:41:cf:6a:
                    58:d9:3a:c3:df:9f:a7:41:72:d1:a8:42:55:a8:ef:
                    67:de:48:6e:58:39:38:37:8f:af:87:31:b8:3a:6d:
                    9e:be:78:da:60:e0:da:09:01:9d:41:31:cb:b0:bf:
                    76:39:b2:eb:c0:4a:3f:db:fd:fe:68:86:59:74:28:
                    50:5c:89:aa:c4:43:f7:16:c1:cb:38:eb:2c:00:22:
                    9d:19:01:1d:61:9a:f5:3c:28:1d:7f:6a:f0:64:d5:
                    3e:6b:b1:04:25:a3:ea:dc:dc:81:fb:bc:e7:77:e4:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:83:D4:F8:1A:B3:78:E6:37:1A:A7:7B:63:58:AE:BA:7E:E9:2E:8C
            X509v3 Authority Key Identifier:
                keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:72:e9:2f:7a:ca:c0:1a:07:7a:fd:15:5e:66:1a:2b:ec:27:
         b7:84:7b:3d:e0:b0:a4:de:40:52:ef:a9:d8:89:69:d6:de:ce:
         9e:68:6c:3a:be:cd:31:44:9c:dc:94:6b:28:21:2d:d5:f1:dd:
         f5:18:4a:ca:42:bb:90:64:ff:26:74:ea:49:a8:b2:7c:ea:11:
         16:65:6f:12:51:66:35:42:10:30:35:b4:ba:2f:41:70:16:26:
         fe:a5:80:0a:8a:c4:fb:c7:de:65:20:ef:ff:21:3e:32:bf:22:
         bb:b1:ab:3e:68:c1:23:60:29:07:b7:e8:55:e1:e8:bc:86:d7:
         90:7d:c3:ec:e2:65:30:b6:3a:9e:ea:de:80:d1:2a:20:c2:b5:
         a3:79:4f:ca:85:68:5a:61:9e:e1:a4:d2:b2:aa:40:03:ed:c0:
         29:de:60:e3:ec:18:f3:61:00:92:5a:db:da:d9:74:d5:48:c0:
         6b:ca:d6:d3:2c:78:67:2c:61:bd:b1:77:4d:c7:89:94:ad:71:
         24:4d:86:65:c3:cf:10:88:17:4a:7d:32:b8:ee:1e:4d:80:29:
         64:a9:e7:a9:05:95:bd:e8:82:a3:44:97:92:2d:3c:15:b0:ef:
         2e:a6:a1:f3:2c:e7:3e:d6:93:77:70:db:d8:00:c5:e8:f4:86:
         8c:e3:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:18:44 2026 by rpki-client