Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          Ue+n3RzBr014mpYwL3TSOqUttAINjBiikWlJzGr4AXw=
Subject key identifier:   AC:31:9B:15:64:59:28:89:2A:24:E7:B5:FA:FD:7F:BE:0B:45:E8:3B
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       01A0D9836913636649BC737EBA410121CBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          0C52
Signing time:             Fri 25 Sep 2026 17:01:02 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:02 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:02 +0000
Files and hashes:         1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=)
                          2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=)
                          3: PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa (hash: upIljczPhg0qz3Pzpmtl5kRlJn9GZ5N1pBXA6jY4G1g=)
                          4: Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa (hash: f+vgH/8lCAyoaopM+ARWem0PqsHCRHeZDcYhmCyBUow=)
                          5: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: L102wU+JN6bkV/AzTEMBS9jakq3YmdA6Kuf27Pqq5ag=)
                          6: beCqMYhwCg21aSUTwrhNMW4LcEY.asa (hash: 1lmykIh7IPZhs4mpEd/DgaG6yCKrGTPv5ZzBaPKUw4c=)
                          7: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:69:13:63:66:49:bc:73:7e:ba:41:01:21:cb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Sep 25 17:01:02 2026 GMT
            Not After : Sep 26 17:01:02 2026 GMT
        Subject: CN=ac319b15645928892a24e7b5fafd7fbe0b45e83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:71:8d:15:a1:06:15:f9:6a:7b:b0:9d:b4:
                    85:cc:b3:bc:95:b4:b0:6a:37:ec:15:71:b6:0e:ed:
                    c1:2f:7c:9d:8f:8a:b9:55:41:fe:e8:26:f7:f5:c0:
                    3c:38:a8:fe:00:25:f0:81:ed:10:93:4c:3f:ad:2c:
                    82:da:e0:b8:c6:27:c1:11:19:00:c0:90:8f:14:eb:
                    aa:0f:6c:a5:71:b9:09:4b:08:d2:e4:d0:10:ee:0e:
                    22:3d:48:e8:d3:46:eb:36:1b:c2:b3:4d:76:f2:fc:
                    95:83:5e:7e:3e:98:fc:e8:a6:92:49:d5:fb:63:d5:
                    db:ee:91:fa:f0:c8:20:9b:c7:fa:91:33:26:c1:ad:
                    e7:77:f3:b9:b1:7e:56:39:4c:bd:9d:5f:3d:8a:a5:
                    de:87:d1:5b:98:1d:3e:69:49:c9:04:fe:8e:7c:cf:
                    c8:61:96:95:8c:d6:0b:cd:e7:0c:2d:1d:d7:a4:18:
                    61:2b:a0:31:51:47:5b:c1:a7:5f:2b:79:35:1d:a3:
                    e6:9c:5d:29:0a:47:55:ea:51:af:b3:cf:75:c5:b0:
                    ec:35:52:a3:a6:09:73:0c:9b:5e:0d:82:5c:b1:21:
                    37:d2:64:7d:de:90:15:16:6c:5c:93:bd:26:16:ca:
                    dd:f9:df:09:c1:be:66:86:f1:c4:51:0c:04:0f:73:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:9B:15:64:59:28:89:2A:24:E7:B5:FA:FD:7F:BE:0B:45:E8:3B
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:4f:10:48:54:97:54:86:9b:06:6a:f3:40:fd:ab:10:93:
         c1:0b:74:43:cb:5c:11:b5:ac:a0:f2:89:24:2a:45:cc:ef:7a:
         91:ed:6d:28:25:3f:f1:48:82:a8:03:ff:c8:b6:95:97:84:c8:
         d1:f5:19:ea:cb:30:9c:f1:cf:a0:62:fa:66:a8:b4:a4:d1:48:
         22:38:d6:67:a5:ec:18:61:c3:43:7c:cf:b2:4b:a7:f3:ce:24:
         4c:82:74:bf:c1:9e:6d:b0:a1:c3:ed:2e:db:c3:26:87:0e:76:
         4e:32:3b:46:82:b4:19:1f:14:d0:51:ab:3b:b7:99:14:4e:06:
         61:ff:96:75:11:ab:65:8d:d9:91:ad:46:b5:19:dd:03:f8:e7:
         d0:0c:8f:c8:fa:6c:35:1a:75:e9:e3:44:fb:96:7f:11:a7:5d:
         d0:06:3e:51:f8:61:f3:5d:cd:11:cb:4c:ab:30:33:b3:9d:19:
         df:b8:3f:58:18:33:41:0b:0c:b2:52:91:55:cc:a1:8e:17:4c:
         1a:d1:63:1c:d4:d7:b2:74:4f:d2:5a:56:56:69:b6:6e:54:d1:
         43:9e:e4:01:aa:66:86:34:a7:61:67:cf:1e:1b:de:4e:5a:91:
         f9:a1:eb:8e:f7:33:81:e0:61:56:0f:7a:b3:7a:87:11:f8:e5:
         97:23:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:07:49 2026 by rpki-client