Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          pfuEDMgjJyJzkJCHclBAowyPJC1nLqA2gTKmNVuMsPU=
Subject key identifier:   B0:CA:71:29:AC:8C:27:C1:4A:33:1D:74:70:5A:CC:09:75:0A:1E:76
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       01A0EC65593744B56F6FFC81E179236B0748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          1A7B
Signing time:             Tue 29 Sep 2026 09:00:59 +0000
Manifest this update:     Tue 29 Sep 2026 09:00:59 +0000
Manifest next update:     Wed 30 Sep 2026 09:00:59 +0000
Files and hashes:         1: E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa (hash: y8rSEBRdZoC/DsraWGFCwBOgPT4J+IhEzX382mx+Nv0=)
                          2: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: tl20EB5HxjVUzVqUOPcABBcIEGxOMF0K27oTQOE/xa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:65:59:37:44:b5:6f:6f:fc:81:e1:79:23:6b:07:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Sep 29 09:00:59 2026 GMT
            Not After : Sep 30 09:00:59 2026 GMT
        Subject: CN=b0ca7129ac8c27c14a331d74705acc09750a1e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:0d:f1:48:37:80:8e:a7:00:95:d3:88:f4:
                    97:bd:36:92:fc:44:6d:1a:72:43:a6:bb:fd:c5:95:
                    21:15:d7:7b:47:14:f3:1b:66:8c:2d:8e:e6:e9:9b:
                    4b:63:13:91:4a:fc:6f:8a:84:73:44:0c:70:64:71:
                    be:a3:72:59:c9:5f:48:1a:26:1b:ee:bd:1b:ba:a1:
                    09:64:90:de:bc:8e:e3:50:d9:a9:d5:21:11:03:b8:
                    98:ff:a0:4e:de:d5:4b:8e:1f:84:d3:72:c7:25:93:
                    ac:96:e9:b6:25:cb:59:d0:9f:10:6e:05:67:be:d4:
                    99:7d:9f:76:5a:ba:0f:e4:b8:06:d2:10:c0:d3:dc:
                    00:92:7c:f4:75:9c:cc:d4:c3:52:64:bb:77:8f:d4:
                    49:86:ce:bc:3a:e5:d6:6f:25:e2:6f:69:79:de:cd:
                    4d:2f:40:3a:f1:5b:f4:1f:fc:c4:06:c1:e9:d1:4f:
                    c5:f3:34:2c:50:1a:9a:e2:da:23:29:a9:d1:ea:e7:
                    b9:83:8b:a7:bd:9f:02:24:f8:6e:da:85:fb:b1:63:
                    76:4e:78:b9:51:78:9c:9f:7d:79:95:4a:39:78:ac:
                    7d:76:59:1c:31:e5:81:92:9d:fa:ba:df:f1:0d:28:
                    7e:df:99:27:e3:f7:f6:6c:52:f7:f6:ff:a0:d2:c4:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:71:29:AC:8C:27:C1:4A:33:1D:74:70:5A:CC:09:75:0A:1E:76
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3e:80:12:13:2c:69:a6:a6:89:bc:56:a0:c4:5e:20:20:f4:
         d3:29:2f:b1:ca:04:61:dc:74:bf:92:e5:47:3c:e1:c4:fe:57:
         27:0b:d2:78:55:35:61:b7:ce:45:d0:94:a0:69:f2:57:c4:0b:
         59:c1:d6:ca:3e:7a:ef:f0:0c:dd:ef:aa:05:29:ed:2e:c1:85:
         21:8a:28:e8:19:2f:ca:07:44:80:a1:9d:86:00:28:e8:ff:ef:
         81:33:79:47:d2:22:55:c8:b2:35:11:c9:a9:37:cf:4e:1d:48:
         98:da:c8:c8:84:7a:1f:69:24:75:62:56:84:9c:dc:4c:95:50:
         ce:04:a7:00:d9:06:d8:ac:4a:54:73:9b:22:22:1b:e6:12:24:
         d7:7d:24:db:e1:11:c8:df:01:b5:9a:86:eb:0d:eb:06:39:2d:
         41:34:71:77:e1:10:0a:94:82:4d:84:07:26:46:f2:f0:6c:2a:
         9c:43:fe:56:3b:d6:48:d6:b0:ca:09:a4:43:79:8b:98:f6:fe:
         0d:34:cf:af:0c:78:d1:d4:11:3d:0e:0e:84:5a:bb:34:b4:19:
         31:4a:30:2c:7f:a1:19:01:4d:ff:97:1e:b5:1f:99:68:3f:02:
         88:3d:13:c7:cf:4c:0b:6b:87:f1:c9:cf:37:13:17:d0:04:f6:
         4c:64:6e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:25:20 2026 by rpki-client