Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File:                     wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier:          BoVfKpEMJBk/ZKioe67OoXHeEctcJtU4jO73UUQO0DE=
Subject key identifier:   B5:CC:6A:F4:11:B4:40:74:66:3B:CC:10:1A:DF:80:0F:07:81:32:8C
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer:       /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial:       01A12277FECC5EC6A9619550974567D73837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number:          0DB9
Signing time:             Fri 09 Oct 2026 21:00:51 +0000
Manifest this update:     Fri 09 Oct 2026 21:00:51 +0000
Manifest next update:     Sat 10 Oct 2026 21:00:51 +0000
Files and hashes:         1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
                          2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: G5J0dAA1hQPCLlrv0GbYsTyS2xjYFCfKtzwHp3XV+vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:77:fe:cc:5e:c6:a9:61:95:50:97:45:67:d7:38:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
        Validity
            Not Before: Oct  9 21:00:51 2026 GMT
            Not After : Oct 10 21:00:51 2026 GMT
        Subject: CN=b5cc6af411b44074663bcc101adf800f0781328c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:a8:a7:ec:53:79:3c:13:b8:19:15:b7:be:
                    96:5a:8a:d3:83:73:ff:3e:cb:14:53:bb:f7:3f:b6:
                    6f:94:1c:4c:ff:50:11:ba:3e:07:e0:75:5e:ae:86:
                    3d:3f:b7:40:a1:8f:a6:4b:fd:72:fb:9f:ed:fc:f7:
                    b5:bc:8e:0a:93:4b:a0:55:01:cc:06:23:5f:4d:fd:
                    2a:4f:77:a4:3c:32:0c:41:5a:32:db:94:eb:4e:6e:
                    b4:38:12:31:35:03:69:50:9b:91:e6:3e:63:b1:81:
                    1a:68:60:2b:36:13:d2:35:1a:2f:01:18:d3:ba:45:
                    4b:c8:ac:87:b9:08:3f:32:34:48:25:a8:3a:03:50:
                    c6:a9:92:08:d0:34:07:42:fa:15:f1:2f:ed:1a:d9:
                    4a:30:b1:59:5d:b5:8d:f5:d0:20:5d:fb:cf:e7:3d:
                    3c:ee:ca:0b:05:4c:d0:9f:4a:50:fe:45:2a:66:5f:
                    c7:b0:bb:f7:6a:bc:c1:78:47:7d:92:24:62:b9:73:
                    c1:2e:37:a0:3b:83:91:7f:03:c0:f4:c9:6a:6d:87:
                    f2:bd:f9:d3:11:a0:9a:60:d7:42:57:62:3d:b8:ca:
                    ea:25:99:32:8f:22:39:56:95:63:da:67:a4:14:03:
                    f4:d3:0c:b5:b0:c4:1d:0d:b2:3d:6f:44:54:dd:48:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CC:6A:F4:11:B4:40:74:66:3B:CC:10:1A:DF:80:0F:07:81:32:8C
            X509v3 Authority Key Identifier:
                keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:43:c7:54:77:ba:b1:c4:26:b0:16:e0:fd:30:a3:66:a4:d3:
         ea:d8:bf:85:ac:f6:2e:6d:e6:e1:22:12:8e:b1:ce:df:25:44:
         a9:d3:61:52:7e:52:30:43:c5:28:0f:9c:78:17:a2:44:80:80:
         cf:b4:44:fb:14:96:16:51:09:84:cf:db:94:6d:c4:32:05:36:
         96:fb:3e:f0:30:57:de:d6:d7:46:64:ba:49:ec:b8:37:11:93:
         46:07:70:49:5c:23:6d:3f:cb:84:7a:a1:db:d4:be:82:7f:bc:
         04:66:23:ea:f9:39:5d:62:dc:fa:25:6d:d1:92:39:8d:c4:35:
         ba:7d:f1:74:b7:13:a8:2f:3e:59:e5:5c:9a:95:ba:cf:97:bb:
         09:ab:eb:a2:10:97:96:67:39:de:17:25:b6:fd:e2:38:e7:54:
         26:4a:cb:66:4f:3f:bf:b8:b7:98:7d:a4:05:6a:fc:5a:4a:e2:
         79:3f:c0:1a:e0:c4:27:2e:b9:b9:fa:5e:5d:c4:4c:bc:1b:ab:
         17:d7:ef:91:61:ce:fb:53:9f:eb:be:31:e3:89:ff:41:8a:8b:
         f3:f2:c5:58:55:af:71:98:78:83:ba:9d:77:f1:1b:5a:38:7e:
         85:e1:03:aa:a3:36:cb:24:04:43:dd:24:0c:b3:a6:63:be:ca:
         1b:2d:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:14:21 2026 by rpki-client