Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File:                     wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier:          jakj6JBLShKmIY89USxfy7vLKFj6VHRr4MY6GcPXOvQ=
Subject key identifier:   FB:28:88:0B:0C:07:A1:03:7F:AD:D8:AA:39:C3:8B:3D:ED:54:70:65
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer:       /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial:       01A13B927F0C2E9A63D13ECAEFE3ABD89BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number:          0DBF
Signing time:             Wed 14 Oct 2026 18:00:18 +0000
Manifest this update:     Wed 14 Oct 2026 18:00:18 +0000
Manifest next update:     Thu 15 Oct 2026 18:00:18 +0000
Files and hashes:         1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=)
                          2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: IuXBn0ruV/VdsUNpXU8vWwNVvhl+PoWe6pqlb8/bDBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:92:7f:0c:2e:9a:63:d1:3e:ca:ef:e3:ab:d8:9b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
        Validity
            Not Before: Oct 14 18:00:18 2026 GMT
            Not After : Oct 15 18:00:18 2026 GMT
        Subject: CN=fb28880b0c07a1037fadd8aa39c38b3ded547065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:b4:95:e8:c6:0e:b2:86:c7:02:0e:f8:bf:
                    f8:ca:81:03:87:72:98:99:e6:6d:d7:8c:78:aa:c1:
                    16:cc:96:aa:6b:72:e7:84:aa:ad:de:84:d8:84:f4:
                    01:29:1e:64:9e:68:78:0b:13:82:41:a9:b0:5b:7f:
                    05:35:5e:7b:67:b8:3e:d5:56:84:d8:64:47:6d:25:
                    0e:62:d5:bc:24:bb:df:70:04:14:3b:4a:a8:33:b0:
                    3f:8f:99:5b:a9:7f:f2:4b:04:05:83:94:8b:3e:20:
                    be:b8:44:73:f9:40:18:a5:73:9a:ee:32:a9:da:7c:
                    1c:f3:3e:20:ca:c4:8b:7a:cd:ae:53:6a:41:2e:40:
                    2c:0a:9e:90:d7:dc:0b:27:24:33:8a:b1:2f:4d:86:
                    76:da:4b:f5:33:0b:54:4a:8c:e6:f2:61:c5:57:80:
                    88:66:bb:cf:be:4d:ef:91:85:af:40:1e:95:24:12:
                    fc:9d:35:41:21:97:de:72:1a:dd:7a:9a:d9:7e:26:
                    e6:d7:80:ae:7f:1c:40:fc:f3:5c:5f:8d:41:ac:24:
                    4e:7d:ff:bf:64:d7:a8:65:cc:88:4e:55:50:46:dd:
                    75:a1:60:d8:d4:91:72:51:6c:4a:67:a0:0e:19:45:
                    46:ce:48:8b:67:11:bd:2d:ec:7d:71:27:ff:d2:f8:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:28:88:0B:0C:07:A1:03:7F:AD:D8:AA:39:C3:8B:3D:ED:54:70:65
            X509v3 Authority Key Identifier:
                keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:3f:ea:9a:73:f5:e0:86:b6:3d:0e:ea:e9:56:80:95:e5:
         2b:c9:a4:6a:24:3a:7a:fc:9e:50:18:83:7b:82:61:3c:29:3d:
         e9:b5:9d:90:9e:34:9a:c5:57:a3:dc:01:90:c0:9f:0d:b8:1c:
         f2:54:db:88:2c:92:e8:16:22:7d:44:fd:4e:70:03:34:9c:72:
         c4:08:40:eb:b0:40:af:bd:e7:4a:7e:24:b7:eb:ca:03:ae:e9:
         f2:31:f4:11:8f:e6:07:39:a3:d2:7a:e8:d0:96:15:8b:e8:59:
         83:45:74:b5:7e:31:b1:94:49:6b:e9:09:b0:57:23:2f:5c:94:
         7f:56:a6:44:78:9f:53:c6:f7:c7:cf:59:56:75:9e:79:4f:52:
         5e:4f:27:86:c8:ab:64:c9:e9:8b:79:35:5b:22:36:3e:fd:10:
         5e:40:ca:ae:37:78:53:54:4a:ec:a3:45:06:0e:07:8e:16:b1:
         fc:2f:2f:4e:0c:f6:eb:be:22:d4:65:f5:ac:6e:00:56:ab:25:
         5f:51:97:bc:41:00:db:bd:5e:ee:ab:f7:a8:47:0d:3c:b0:ef:
         49:89:e9:1b:67:75:e7:eb:cd:a7:36:4c:62:a8:33:fb:bf:98:
         fb:29:4b:70:33:e8:52:75:51:1c:67:d7:cb:71:57:8e:35:8a:
         9a:8e:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:06:13 2026 by rpki-client