Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          tzxar2vnKrJv23GhvdS2ocr6Z0inTw23YLRvhGmkpI4=
Subject key identifier:   E2:39:86:FF:5B:51:2E:36:25:BE:14:31:74:F7:52:9A:06:67:D5:52
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       01A0D8A8CE3D1600352C1B3444EE9C5B40BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          1384
Signing time:             Fri 25 Sep 2026 13:02:16 +0000
Manifest this update:     Fri 25 Sep 2026 13:02:16 +0000
Manifest next update:     Sat 26 Sep 2026 13:02:16 +0000
Files and hashes:         1: 8XEzSk8CvDfLkSMnM2czmx_ulWg.roa (hash: 40hPE/BqPPQ7BBdeMCvpBaKM0QkTjFWRsFW8s0ufoAc=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: SCjBQ0GSSFOnj/n8ELfuIfvlIr+MbUbQEHX55R7E38w=)
                          3: _Dc_bdIAZYdrEnNJICuszN__3rw.roa (hash: AzuIghqugc9hzzBm4Id+ZUX9fazI5NRXP0v6O6ZJMDc=)
                          4: kRwhJc9YP7PBT_VxjXqr6kKnSig.roa (hash: sdwxFkjlQepYKbUeVajivy+Ki1wWl6h3Im8+Blt6i98=)
                          5: t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa (hash: UydhtoR4+IQ54e3x5h5+w3ijtAQlUzFvVelsUAahRqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:ce:3d:16:00:35:2c:1b:34:44:ee:9c:5b:40:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Sep 25 13:02:16 2026 GMT
            Not After : Sep 26 13:02:16 2026 GMT
        Subject: CN=e23986ff5b512e3625be143174f7529a0667d552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:15:2d:41:1d:98:83:a7:1e:aa:4f:95:9d:
                    57:ff:d0:44:51:b6:56:07:43:9a:69:31:fe:bd:83:
                    14:0a:0f:c6:66:c8:9c:df:57:46:02:a0:ee:17:b5:
                    9f:14:33:14:08:c0:5f:ae:76:9c:60:54:f8:25:40:
                    6d:fa:f7:f7:89:12:8a:99:b1:4b:92:86:f2:83:9c:
                    a7:61:d2:86:c7:85:2c:2b:79:30:7e:8c:78:a2:ce:
                    53:df:af:b8:b5:e8:50:42:7a:fe:79:49:2c:9f:c1:
                    cb:d4:4d:a4:f1:5d:0e:95:fd:32:57:43:0f:4a:47:
                    3c:83:5d:96:44:5e:fd:da:6d:4f:2b:ca:19:19:68:
                    5e:56:14:19:2f:03:a2:72:a3:fc:17:bc:0e:df:57:
                    3a:59:3d:b6:38:ac:fc:b9:f4:38:77:bd:42:e4:70:
                    4a:02:c0:0d:ce:e6:41:ad:01:d6:28:bc:5f:07:4b:
                    9d:f1:23:83:a1:64:3f:8a:3b:68:70:18:19:4c:18:
                    ee:72:e0:4c:71:c2:79:35:09:23:fc:0d:3d:23:f7:
                    a1:15:72:ca:29:82:0f:05:7c:bd:87:60:fa:51:6f:
                    6f:d4:93:2d:0c:9f:06:be:e8:11:3c:7c:2a:ea:dd:
                    a0:88:33:31:b5:0c:c3:7e:0a:d4:1d:e5:89:db:83:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:86:FF:5B:51:2E:36:25:BE:14:31:74:F7:52:9A:06:67:D5:52
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9f:af:d2:4d:2f:c3:db:14:2c:4c:25:1e:b8:d0:2c:79:3c:
         f9:75:e0:3e:e3:f4:7c:06:3a:4d:8d:0d:7a:4d:6a:8f:d6:bd:
         e7:88:9c:8f:b2:bd:d2:82:ca:08:36:40:54:f7:d4:98:d8:ab:
         9e:87:71:11:6a:2a:3f:3d:42:ca:8a:0d:b7:c7:c9:01:88:5b:
         1f:50:2f:92:08:b3:01:6a:ec:b8:07:77:be:a2:d4:2b:77:9c:
         45:ee:96:01:90:82:c4:9b:c0:67:26:57:87:b0:db:bf:a9:9c:
         68:6d:f2:74:96:c5:46:7b:87:60:d6:10:c6:5b:90:53:90:d6:
         6a:4c:08:d5:fc:d5:37:a9:51:24:2a:ab:07:a3:57:bd:dc:fc:
         76:b7:7e:3c:87:3a:09:48:7f:56:6a:22:4f:80:59:79:32:8b:
         31:87:26:a2:1d:2d:1b:81:13:4c:bb:b2:d1:5a:ca:5a:e5:d9:
         01:bb:27:ee:40:0a:d7:93:db:75:37:28:b5:b8:ea:85:ce:ea:
         c6:b2:82:22:56:37:0f:70:f1:c7:0b:7a:8f:b5:0e:ef:56:31:
         b8:59:f2:a3:00:ca:fa:c4:6a:3a:1e:a8:8c:09:a2:07:0b:92:
         e3:d2:c1:25:1a:ba:fe:a5:64:34:8d:47:94:08:56:d3:d4:89:
         fe:4d:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:33:50 2026 by rpki-client