Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          9Jzi19UnHFS2zpjFMbmQKLbj2CvllQT2QpeNFysX4B8=
Subject key identifier:   7B:20:3E:CA:EA:B4:07:B5:9D:01:24:5B:A4:27:75:5F:40:8C:D2:54
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       01A0DD9780B8FF08CCA15202EB080BD9EAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          1A06
Signing time:             Sat 26 Sep 2026 12:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:28 +0000
Files and hashes:         1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: ASAeQ+Yy5EII42YtvGuDOMcDTm4aagYedXcomnpWqdI=)
                          3: dZTs0EIjPnxi68tbTokfAbw6h7g.roa (hash: /Yw0GBij2t0h3+q9/KbDbCPzij5LVOg+e269LitDfx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:80:b8:ff:08:cc:a1:52:02:eb:08:0b:d9:ea:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Sep 26 12:01:28 2026 GMT
            Not After : Sep 27 12:01:28 2026 GMT
        Subject: CN=7b203ecaeab407b59d01245ba427755f408cd254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:2e:f7:cf:4b:e1:ca:c7:d2:fb:46:1d:a1:
                    a6:93:01:e6:0e:be:c8:86:cd:ac:b5:0b:6a:70:b0:
                    c4:9c:09:5c:67:06:0f:86:03:09:7a:19:81:89:e7:
                    2e:03:4b:27:0b:22:2a:08:c9:26:05:bf:7d:87:8d:
                    7c:e7:bf:d2:82:04:c7:19:be:f3:2b:45:fb:03:a1:
                    52:fe:b3:00:fb:88:52:b5:f1:3a:d8:46:b9:ec:55:
                    7b:d5:eb:b6:31:c9:02:f5:d0:78:db:90:65:89:49:
                    87:21:57:2b:78:e8:6a:0d:1b:dd:42:49:e5:08:4a:
                    1e:ae:03:9f:7e:59:9f:8d:82:9c:85:93:c0:af:05:
                    64:bc:eb:14:db:50:e8:d9:c8:bc:94:8f:93:1f:70:
                    9e:61:2e:7e:1f:a5:f3:0b:41:59:06:c8:1b:cf:b1:
                    a3:0c:02:41:74:c1:9d:79:cc:5d:39:c4:d3:77:20:
                    c0:c4:4b:d5:cb:8d:72:6b:7d:05:7f:99:b5:1d:f7:
                    bb:95:21:8e:9c:b7:db:c4:5a:6b:f8:6a:e1:62:11:
                    91:41:74:53:14:c9:fe:04:b9:9a:92:e9:65:ac:90:
                    54:87:75:61:33:9c:63:91:41:e9:fe:91:e6:75:65:
                    49:b2:46:09:07:16:53:ed:33:4a:36:3c:c6:7c:8f:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:3E:CA:EA:B4:07:B5:9D:01:24:5B:A4:27:75:5F:40:8C:D2:54
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:80:70:b7:60:ea:4a:5f:7e:ea:5f:eb:76:d3:8d:bc:95:
         6e:e3:3a:fe:1e:12:46:44:d0:f1:5a:66:33:2e:b0:0d:7a:3c:
         00:dd:91:1a:6a:0f:60:63:67:85:51:c1:95:db:39:9e:a9:e6:
         d6:03:4a:30:24:13:6e:f2:2a:69:75:18:be:c5:4a:4e:0a:18:
         7e:83:ea:62:27:a6:64:2e:6a:7c:b6:c2:f6:f7:fd:7c:32:43:
         a4:b6:99:bf:e2:24:a1:92:ae:e1:ea:a8:b9:af:4e:f7:4b:72:
         7f:3e:d6:2c:d3:04:fb:df:c1:12:63:1f:7b:bf:40:0d:2f:17:
         de:18:6a:9d:31:4b:a7:9f:db:2b:ec:f6:20:36:f8:85:dc:c4:
         46:30:a0:3e:28:25:93:1e:96:a6:d7:d3:97:38:67:19:b5:97:
         17:d9:96:02:d4:f8:d9:e3:7a:2c:21:6f:8b:8c:ae:b8:21:61:
         e8:40:19:45:1d:8e:bc:cb:cd:1f:b1:00:04:53:68:c3:3c:1e:
         62:43:12:5d:40:1b:9a:a3:5e:f6:6c:23:02:bd:dd:4a:88:52:
         44:ed:11:93:7c:81:03:51:1c:e2:60:b7:de:45:91:5d:d4:9f:
         c0:a9:98:b0:c9:9f:ae:d5:c9:59:6b:f6:da:49:6d:81:f3:1d:
         5c:9d:09:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl4C4/wjMoVIC6wgL2erkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw
YjUyZjQwHhcNMjYwOTI2MTIwMTI4WhcNMjYwOTI3MTIwMTI4WjAzMTEwLwYDVQQD
Eyg3YjIwM2VjYWVhYjQwN2I1OWQwMTI0NWJhNDI3NzU1ZjQwOGNkMjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiMu989L4crH0vtGHaGmkwHmDr7I
hs2stQtqcLDEnAlcZwYPhgMJehmBiecuA0snCyIqCMkmBb99h41857/SggTHGb7z
K0X7A6FS/rMA+4hStfE62Ea57FV71eu2MckC9dB425BliUmHIVcreOhqDRvdQknl
CEoergOfflmfjYKchZPArwVkvOsU21Do2ci8lI+TH3CeYS5+H6XzC0FZBsgbz7Gj
DAJBdMGdecxdOcTTdyDAxEvVy41ya30Ff5m1Hfe7lSGOnLfbxFpr+GrhYhGRQXRT
FMn+BLmakullrJBUh3VhM5xjkUHp/pHmdWVJskYJBxZT7TNKNjzGfI/5iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsgPsrqtAe1nQEkW6QndV9AjNJUMB8GA1UdIwQY
MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt
NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk
LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPiAcLdg
6kpffupf63bTjbyVbuM6/h4SRkTQ8VpmMy6wDXo8AN2RGmoPYGNnhVHBlds5nqnm
1gNKMCQTbvIqaXUYvsVKTgoYfoPqYiemZC5qfLbC9vf9fDJDpLaZv+IkoZKu4eqo
ua9O90tyfz7WLNME+9/BEmMfe79ADS8X3hhqnTFLp5/bK+z2IDb4hdzERjCgPigl
kx6WptfTlzhnGbWXF9mWAtT42eN6LCFvi4yuuCFh6EAZRR2OvMvNH7EABFNowzwe
YkMSXUAbmqNe9mwjAr3dSohSRO0Rk3yBA1Ec4mC33kWRXdSfwKmYsMmfrtXJWWv2
2kltgfMdXJ0JrQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:59:05 2026 by rpki-client