Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File:                     wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier:          uiCRh55BdqfjeCqCkh893grZaJwVbYUvcJ1BPwNLTq8=
Subject key identifier:   FA:E6:91:AE:3C:E4:89:00:17:CB:1C:85:23:AC:A1:0F:81:49:1C:70
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer:       /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial:       01A13D4A6F17E7180E9BBCF9A022A47F7013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number:          1503
Signing time:             Thu 15 Oct 2026 02:00:50 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:50 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:50 +0000
Files and hashes:         1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
                          2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
                          3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: izeyP0FldAHqrVHccvK8YK1mKdTTbHRJz6qUkwLFu/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:6f:17:e7:18:0e:9b:bc:f9:a0:22:a4:7f:70:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
        Validity
            Not Before: Oct 15 02:00:50 2026 GMT
            Not After : Oct 16 02:00:50 2026 GMT
        Subject: CN=fae691ae3ce4890017cb1c8523aca10f81491c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:47:ff:99:bd:ff:1a:22:5c:10:e9:90:df:
                    68:b4:1f:44:88:94:7f:c6:90:b7:74:ad:00:83:71:
                    e2:78:2c:3c:8d:2c:8d:95:88:5f:c8:f5:d1:d9:85:
                    e4:43:ca:01:e9:14:21:ca:21:fe:df:40:0e:c6:77:
                    36:cf:b2:05:6a:c9:f7:e3:01:92:cb:d5:19:73:b8:
                    ae:6f:2f:10:ac:d7:a6:29:67:95:59:39:74:6f:60:
                    d9:c9:ec:5a:01:c5:32:22:f3:b0:ff:6f:dc:51:b5:
                    c4:46:8d:ff:b8:36:13:24:c7:32:ab:9e:3c:26:c9:
                    e0:35:71:76:f7:e1:54:43:aa:ae:07:b1:6d:c3:65:
                    f3:40:bf:b4:a6:c7:74:db:ef:36:a0:b4:f8:bc:4e:
                    8c:30:a7:ff:3b:e3:5e:86:15:38:c3:47:57:58:b9:
                    3f:a8:db:88:6b:9d:42:bb:fa:d9:51:23:4c:06:4b:
                    62:48:6d:4b:d2:ae:62:ff:5f:42:54:ed:7c:cb:15:
                    73:93:3d:d4:a1:63:7b:93:d6:be:b0:1f:1b:80:b5:
                    1f:e7:02:2c:6a:b9:8e:7c:b6:a1:61:59:d1:b4:5a:
                    45:aa:c4:16:5a:da:7f:63:b7:69:fa:e9:37:74:65:
                    81:47:e9:9f:cb:e0:9a:22:fe:87:e0:55:9b:05:f4:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:91:AE:3C:E4:89:00:17:CB:1C:85:23:AC:A1:0F:81:49:1C:70
            X509v3 Authority Key Identifier:
                keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:55:96:10:3c:69:d8:1f:e8:3f:41:6e:05:d2:16:04:2c:67:
         25:4c:51:a6:4e:11:99:6f:e3:95:79:4b:68:2c:c2:0f:8c:0a:
         ac:06:1b:45:46:89:f8:0c:8f:c0:2f:59:2c:22:ef:1e:a5:02:
         f9:72:79:85:5a:0a:84:29:11:c2:63:1a:3c:1a:a8:0d:35:ad:
         88:2b:ba:b1:9f:1f:30:d4:b7:b6:28:67:fe:4a:bc:58:31:73:
         fe:8c:11:61:67:e6:d3:d5:39:cd:81:81:e4:39:77:af:d3:42:
         97:97:23:ba:c6:76:d0:ca:ea:fa:2b:b6:86:fa:a0:b1:b9:9d:
         8e:38:41:67:18:3f:d0:1b:da:28:09:68:34:59:27:74:6b:9a:
         4c:8a:ed:54:d8:aa:e1:65:d2:14:ba:0e:9b:21:91:f1:7a:21:
         0b:b1:26:5b:23:d8:8f:a7:5f:dc:a0:87:18:43:0a:9c:8e:ee:
         eb:10:43:db:74:e6:2b:1f:ce:27:bc:f4:53:b5:d4:2e:4a:76:
         cb:72:17:a0:b1:f5:41:ce:94:c1:5c:88:48:9e:b2:9f:e7:89:
         c7:ad:32:d8:34:f4:60:55:e8:3b:6a:84:06:38:29:ec:a3:59:
         63:cb:db:c9:47:82:50:f3:92:5a:e3:fe:69:56:b9:18:a2:c7:
         15:3d:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:40:50 2026 by rpki-client