Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          H+MkdN9Xl04NfuWO8ysAj31Maue1FoHxVTRijxT/QSU=
Subject key identifier:   32:05:26:48:06:61:E9:73:B8:C8:FB:78:AD:79:F8:D4:0F:C6:3A:CF
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       01A0DD29317B4AC6F15DDC381AFE30E616B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          0F2E
Signing time:             Sat 26 Sep 2026 10:00:59 +0000
Manifest this update:     Sat 26 Sep 2026 10:00:59 +0000
Manifest next update:     Sun 27 Sep 2026 10:00:59 +0000
Files and hashes:         1: 0-_RZCB8euBSCwMBqJA3rIP3_ak.roa (hash: 81pSmGizza3WAQFGP1ckvbIll7c3WwUs6dpTUPhIokg=)
                          2: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
                          3: 3hoyMf4bitt7jwJRtcUeClUis-4.roa (hash: 3Q2574IoV1+PXA126yc1/pkJvBgiZb7epxUK3jkb8bg=)
                          4: 8yPXyFTgkgtYTMqpIyGD6WGQpbs.roa (hash: TPkch1MUj3NLgPFZhJqPVUIPJfq7KiSr5N+fQveEZ04=)
                          5: BEIGrcGAhMJx6HYIO_HXuuSU8QI.roa (hash: Nboe7PNCD4hAHDaooGSsb+eOcBbK8z/CbG1c/taypn8=)
                          6: DUl7Kze2ii5Dj3w_wT6hCtzrBXg.roa (hash: gntI7hjVaF7FvmC9MyaHIMr1VAinCkuK20uR11fgWMA=)
                          7: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
                          8: LSO-QOUPfTvpfYqHqssifWh280M.roa (hash: XvmDiwKThG2Ug/B5byI0VC8SfnhIoWAypV6Cpcv32NY=)
                          9: NHRtD-1iuAWGBwxUvwv6X0d5boE.roa (hash: XY3lQHbpR3n9vwmQCmG2QcF+cUoKEcLdIxhjuXS0pFo=)
                          10: Qy9KRB3QGK3zXMOw_VOH-jwp1cg.roa (hash: 8QsATaPXEcWA3tWk++uDPvHOlNGwIRxvnfoQCxEp5kA=)
                          11: VhswZeBBLnP2o1l-u_vqKhkjSO4.roa (hash: xCWijCyY25UTodJ47G9fvWDYCAxmvFOsV2CoCWkyjSs=)
                          12: XgWvPmBdiOyUfe_ZxfMGsQx0fYA.roa (hash: CV7N+v1sScuEFqNX1NAYUvqS4U0WvzqbFD2KZRvOCPg=)
                          13: ZpVr-oOXRalXl3fxDT4ShZx5jMI.roa (hash: UzHcOtz9eNTUdP6Kd324OaavBXklzzooqtwDCEZLsN8=)
                          14: g4ccENpjDDFMcTMqabTHvRMj89g.roa (hash: sXW3T2BkbAqgXtL812Wn6JCJrHTI/IVO6miHUNiiBdA=)
                          15: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
                          16: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
                          17: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
                          18: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: 3jM2oNRa/Mt1YCGxMpEr4bMz0/qqZnbfh/tYtqwSCgM=)
                          19: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
                          20: zfBdsVExv-Km-zpAmBaB1oux2mo.roa (hash: 7Q5ZHt7BLn5424Qae0fkfyUAvNqOvG5pFVX+wYmDoSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:29:31:7b:4a:c6:f1:5d:dc:38:1a:fe:30:e6:16:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Sep 26 10:00:59 2026 GMT
            Not After : Sep 27 10:00:59 2026 GMT
        Subject: CN=320526480661e973b8c8fb78ad79f8d40fc63acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:68:8e:13:5f:bc:c6:47:99:76:50:16:ef:
                    82:f1:67:e2:16:cd:57:a0:12:65:bf:89:d7:13:1e:
                    d5:12:84:85:0a:41:78:72:27:3e:93:3e:9e:b7:ad:
                    a1:94:2d:5f:b2:bd:f0:92:8e:c9:50:ac:6c:73:f1:
                    ba:8b:53:6d:9d:99:e0:47:18:ba:85:46:d6:81:77:
                    f6:dd:c8:0b:48:28:8b:2f:5f:8f:56:72:ed:7e:41:
                    b1:fb:a4:55:e8:04:e7:44:fe:fc:33:63:ef:71:5a:
                    7b:75:18:98:80:58:52:db:19:98:08:04:50:58:4d:
                    e8:92:8d:28:82:67:5d:64:28:75:aa:56:dc:16:b7:
                    70:de:78:da:b5:09:df:f4:61:84:82:3a:25:64:b8:
                    f2:e6:9b:1f:92:c0:52:a1:13:1b:33:a7:f2:83:33:
                    62:86:ca:2e:7c:30:06:a6:d2:f1:71:f7:a7:9f:71:
                    34:cf:81:82:3e:3a:3d:6e:47:d5:f0:ce:92:9b:e0:
                    8f:43:84:89:46:e6:cc:42:1c:22:ef:8c:4c:d3:9c:
                    4d:4d:64:d1:bd:db:45:75:39:88:b2:bc:a9:ac:10:
                    ba:36:67:ce:84:bc:b1:7b:6a:02:49:0f:e2:f3:ef:
                    12:59:73:fb:23:f6:91:ea:d7:08:63:b3:d1:97:a2:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:05:26:48:06:61:E9:73:B8:C8:FB:78:AD:79:F8:D4:0F:C6:3A:CF
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:7a:dd:66:f0:00:1d:84:6a:ea:c1:3d:15:6a:a3:1d:7e:
         5e:a8:49:df:06:7b:bf:f7:1e:88:58:5c:bf:a8:74:12:3a:ee:
         a8:43:13:dc:47:d9:20:00:a6:04:65:5e:5a:4f:30:fe:7d:b9:
         80:3f:c2:36:f4:e6:df:b2:42:fa:79:46:2b:3f:09:47:d2:5e:
         a0:7e:82:1a:26:52:28:5f:12:37:31:dc:5f:ff:63:ca:52:8d:
         31:6f:06:4a:27:b8:67:4f:72:f6:bb:1a:24:60:e1:65:ca:ce:
         17:58:21:10:b0:fd:d0:0e:e8:1b:8a:cc:44:42:15:ef:f2:9c:
         20:30:ca:2f:fa:40:5b:d9:8c:dd:ac:01:56:79:de:4b:0a:83:
         ac:d7:4a:e9:3e:ca:a8:67:28:3a:a1:30:0f:d5:06:eb:10:51:
         4d:17:ab:d5:76:a3:39:35:ed:be:1f:f9:29:c1:1a:db:ad:6a:
         60:ca:fc:d2:71:41:c7:65:96:eb:57:2f:90:dc:c4:25:2b:33:
         01:11:c0:05:26:af:b2:d2:a3:1f:49:92:44:b4:4a:8f:a5:c9:
         a3:c9:84:d4:ea:39:91:d0:02:3f:50:8b:26:55:f8:af:1d:d7:
         c4:15:f8:ca:74:18:a7:91:a1:92:65:0e:30:34:2f:17:1d:fc:
         44:ef:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:11:29 2026 by rpki-client