Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File:                     wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier:          9SbnanaBZqpwNLKG7D/zEH77qvVYV8vg9nqcertrplI=
Subject key identifier:   E2:60:2C:E4:2A:98:A9:3E:7B:47:1C:4C:56:E7:80:D8:BA:A6:2A:C3
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer:       /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial:       01A0D8DEF7A0D751590E067D322966C8DF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number:          0B6C
Signing time:             Fri 25 Sep 2026 14:01:26 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:26 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:26 +0000
Files and hashes:         1: VrmjHVAC_dTFireq6yrVrnJ1Qr8.roa (hash: 3FZStDcO/86XfV9ktKFi/0KRl54/2sqdqVE7Qc6xIko=)
                          2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: /yUD9XIZb0HkM4ObwlB541Q/8ffDg50cqfil7SHKm7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:f7:a0:d7:51:59:0e:06:7d:32:29:66:c8:df:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
        Validity
            Not Before: Sep 25 14:01:26 2026 GMT
            Not After : Sep 26 14:01:26 2026 GMT
        Subject: CN=e2602ce42a98a93e7b471c4c56e780d8baa62ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:94:99:53:52:9a:4b:fe:2f:b3:41:5b:56:
                    60:0a:b5:34:b0:bb:5e:b6:73:01:bd:4a:e7:1c:f6:
                    0d:54:1a:4d:af:7f:cf:9a:f1:58:cf:f4:f8:11:03:
                    27:6a:47:0d:41:00:e5:47:0d:06:44:bb:24:ef:26:
                    ed:15:75:74:e4:43:6f:fd:59:04:c6:24:dd:bc:68:
                    46:2c:95:18:59:26:41:5d:84:19:6f:8a:d1:27:f9:
                    5d:7a:b2:d4:f7:3b:7e:d1:ed:b1:c5:bb:02:7f:3b:
                    3e:3c:5a:d6:3f:29:a7:ae:d9:87:5d:fd:c9:03:7a:
                    9b:66:84:df:e3:34:c5:10:cb:35:7e:2f:30:ba:0d:
                    49:7a:95:47:ee:26:d9:2a:b3:cb:46:86:99:8c:a4:
                    c8:d7:33:66:2c:8d:19:2f:cc:77:d8:92:ab:e9:de:
                    43:8c:07:26:b3:05:84:a7:d0:f6:6a:9f:30:6d:86:
                    69:b2:d9:7c:94:30:83:f1:ec:ff:33:52:2b:8a:85:
                    20:d4:4d:4e:c5:89:fb:96:69:2e:f9:b0:9f:f0:67:
                    0e:ec:6f:a5:f8:ca:59:f1:76:00:cd:ce:0f:c6:4e:
                    cc:39:64:7a:7b:f2:cb:1c:de:8e:c1:46:77:07:20:
                    71:95:63:04:11:8c:e2:0b:d8:2e:24:eb:a0:7e:74:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:60:2C:E4:2A:98:A9:3E:7B:47:1C:4C:56:E7:80:D8:BA:A6:2A:C3
            X509v3 Authority Key Identifier:
                keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:dd:07:2e:7a:e3:1f:d6:ed:77:96:68:25:49:dd:34:0a:
         73:ab:33:dd:5c:5b:bf:55:67:8e:98:c3:fe:31:cc:7a:2a:1f:
         9c:4a:98:df:f0:51:05:56:61:db:00:e6:5c:23:82:ba:2f:7b:
         61:c4:85:13:86:b2:e4:7a:dc:4d:b6:75:ff:d5:06:18:02:3a:
         71:54:9e:60:d7:02:b6:51:0b:bb:2e:c4:a1:b2:b7:e8:c5:18:
         c8:7f:98:35:05:f0:3e:8a:c5:e3:52:84:63:0d:04:92:1f:95:
         8d:9c:0b:32:ca:f2:89:47:76:fe:e1:9f:86:60:c4:98:98:a8:
         9d:4c:ab:d9:32:93:fd:7b:f7:45:c4:7f:cc:e1:ba:24:b0:d4:
         d8:0a:08:aa:7c:73:37:62:e0:ca:1f:91:bd:d5:c5:33:1a:f8:
         e0:8b:d0:aa:8d:e4:07:a4:6f:4e:3d:bc:3a:f1:69:ea:c7:14:
         a8:26:c4:bd:54:67:d4:08:75:cc:94:ce:e6:bb:bb:81:6f:53:
         ae:46:ef:fd:54:cd:9d:05:06:ed:2e:46:90:03:6f:8f:d0:42:
         62:05:3f:13:b6:07:b8:9c:ea:50:17:49:41:1c:4a:79:53:5d:
         0b:18:11:b6:90:c6:47:82:28:df:53:74:f6:89:2a:66:22:d5:
         50:89:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:48 2026 by rpki-client