Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File:                     wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier:          JkrNIsQWv2QAFMXmMrN7ssbLEH7sRSEB5M9kzM99Pkw=
Subject key identifier:   99:AE:11:90:C5:BB:53:49:EB:28:EF:9E:A3:E6:52:A4:A6:62:A3:0E
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer:       /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial:       01A0DBE01246BD5450FA1FD2C65B9526C6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number:          1A7D
Signing time:             Sat 26 Sep 2026 04:01:30 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:30 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:30 +0000
Files and hashes:         1: Dsjm5lEJ-mNO_tD0Cpd2DuOIRbQ.roa (hash: Bmyti0ynns0DSd3t3OVqpc7WopgOOQGAXnl/+74Jywk=)
                          2: FoYyMk5nn_mx43Eqm4w9S-GFiOo.asa (hash: tIjIVbBkyqnMiqD5rmUgC1pkH2WtDxCN/8HGaRwdDA0=)
                          3: c0Jzt3bIEhRRa4PKEVY4MtsUsds.asa (hash: gGqMQoDe6c9sXdZ7ZcSzgdriRo31EV4kvGW39wn8ulc=)
                          4: o1AmIopz9q4zRTmrcoM47cDuCHY.roa (hash: LYe2LtBXErpEaI3qCk1VoxCUPxgfpnC7P/suMsnuTlY=)
                          5: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: boLDPlHvrkncQVlVpJvM2w8zE+tvGxrxVL9F/LWlGyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:e0:12:46:bd:54:50:fa:1f:d2:c6:5b:95:26:c6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
        Validity
            Not Before: Sep 26 04:01:30 2026 GMT
            Not After : Sep 27 04:01:30 2026 GMT
        Subject: CN=99ae1190c5bb5349eb28ef9ea3e652a4a662a30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:27:dd:13:3d:2e:c7:34:cd:30:1f:38:f0:
                    19:e3:92:13:f4:d9:ba:07:b9:e6:32:51:b4:a8:47:
                    b8:bf:0e:54:e6:7d:af:c6:d1:94:ce:8b:57:c5:0e:
                    b4:03:20:8c:38:4a:39:a8:e1:42:3b:17:97:be:72:
                    54:5c:d0:3e:ba:09:d3:73:b0:69:cb:fa:23:a1:0c:
                    7e:cf:dc:c3:1b:38:19:c9:ef:be:53:52:d3:2f:6f:
                    a2:15:54:33:70:3c:b9:2a:92:58:52:8a:7c:8e:7d:
                    66:b6:45:00:14:63:5f:bd:23:3a:08:8f:33:0e:98:
                    6f:3c:6d:ec:df:b7:c6:e6:58:77:bd:d3:80:0e:4f:
                    37:2f:38:f2:22:50:2d:ff:6c:12:43:ce:68:aa:47:
                    7b:fa:9c:29:ec:55:33:f2:b4:5d:07:fa:b2:59:86:
                    af:e2:32:9e:bf:d1:e7:9a:35:d6:bc:69:c8:0e:41:
                    33:14:88:d9:18:e0:25:9d:39:60:b1:32:96:dc:3e:
                    14:e7:9a:64:c1:6d:c7:11:6d:1a:a4:84:d0:fc:33:
                    de:b9:91:50:af:fd:e9:c2:56:a1:36:63:b7:37:74:
                    6e:45:bf:45:7c:9f:0b:7e:b9:15:48:66:76:d1:f1:
                    b2:33:f9:ad:8e:04:56:e9:45:15:34:6a:18:20:62:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:11:90:C5:BB:53:49:EB:28:EF:9E:A3:E6:52:A4:A6:62:A3:0E
            X509v3 Authority Key Identifier:
                keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:99:d2:3d:28:89:2d:e1:76:84:df:7b:91:4d:e3:09:25:81:
         94:54:c6:6a:cf:1e:00:f9:d6:35:86:7f:84:af:b3:5f:06:64:
         fd:b6:4d:f3:22:55:76:a2:27:ce:12:1c:cd:df:a0:25:3a:2d:
         43:39:ef:54:f5:9c:7d:c8:d2:31:78:15:b1:2a:ce:d9:e0:7e:
         ce:7c:84:d1:a6:df:9f:cb:bf:6f:1e:c2:80:ba:01:79:85:1a:
         b9:a4:1f:3c:6a:d2:ae:9d:20:25:9d:81:7a:24:4f:96:c9:0c:
         6c:a9:95:20:a9:7c:9b:9e:6f:ba:bb:3e:0d:19:d2:8a:f9:a9:
         72:13:b8:7a:00:9d:c2:da:1f:9c:d7:7d:8f:13:2d:1f:d2:b3:
         ed:b9:a6:c6:4b:c5:29:6e:84:c5:d2:3b:bf:ae:ee:cd:99:03:
         73:08:b5:99:b5:61:f2:0a:14:56:32:57:43:84:1b:46:25:aa:
         5b:86:b0:a7:c0:bf:04:63:71:90:74:5a:86:36:2e:83:9b:eb:
         c7:1f:a9:6f:3f:f7:f2:61:2b:da:24:52:c5:25:40:3c:cb:26:
         e2:40:6e:23:1f:bb:9f:c6:bd:ec:2f:56:5b:b4:92:cb:73:00:
         20:bf:c9:f1:c2:ac:e1:1f:d6:eb:30:80:c3:c0:2c:72:4e:7c:
         60:73:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:21:50 2026 by rpki-client