Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/wFTSEP6c623bOKfum1eYQ9PCzMI.mft
File:                     wFTSEP6c623bOKfum1eYQ9PCzMI.mft (raw, json)
Hash identifier:          cFCvm1xMXXIYb/lCkeXEVGnYlXgnJf0+gkzfEoxe004=
Subject key identifier:   83:85:FF:3B:43:AF:ED:9A:75:A5:A8:AC:E8:C5:95:C5:14:62:23:0E
Authority key identifier: C0:54:D2:10:FE:9C:EB:6D:DB:38:A7:EE:9B:57:98:43:D3:C2:CC:C2
Certificate issuer:       /CN=c054d210fe9ceb6ddb38a7ee9b579843d3c2ccc2
Certificate serial:       01A10625A437DAACFB1F344D6FD60E831134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFTSEP6c623bOKfum1eYQ9PCzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/wFTSEP6c623bOKfum1eYQ9PCzMI.mft
Manifest number:          0101
Signing time:             Sun 04 Oct 2026 09:01:32 +0000
Manifest this update:     Sun 04 Oct 2026 09:01:32 +0000
Manifest next update:     Mon 05 Oct 2026 09:01:32 +0000
Files and hashes:         1: Ug1_AWMLA7CB22PFt7kEmDD3vcA.roa (hash: UnFiZ1LvWsKiazEr3uDfjOYrNkQH2OB9HTi7cwWO1qk=)
                          2: wFTSEP6c623bOKfum1eYQ9PCzMI.crl (hash: cZVKkS/95znLcc8uZEIkCPpC/5sGOC3BvDBWkUx1VH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/wFTSEP6c623bOKfum1eYQ9PCzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/wFTSEP6c623bOKfum1eYQ9PCzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFTSEP6c623bOKfum1eYQ9PCzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:25:a4:37:da:ac:fb:1f:34:4d:6f:d6:0e:83:11:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c054d210fe9ceb6ddb38a7ee9b579843d3c2ccc2
        Validity
            Not Before: Oct  4 09:01:32 2026 GMT
            Not After : Oct  5 09:01:32 2026 GMT
        Subject: CN=8385ff3b43afed9a75a5a8ace8c595c51462230e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:ff:4a:16:dd:8f:27:42:71:15:35:f0:16:
                    4a:dd:b6:b8:d0:48:81:af:40:bc:04:24:f2:cb:2e:
                    04:50:25:d7:e4:7c:ac:1e:5f:34:c9:a1:4f:24:10:
                    9c:7b:23:ab:01:8e:f8:81:4a:40:8f:f8:13:e4:d6:
                    79:6e:7c:53:67:d7:02:52:35:95:13:30:8f:cd:78:
                    de:c5:ae:bf:71:87:92:e5:b0:97:a8:74:04:1c:05:
                    99:c6:44:db:f4:e8:54:15:a3:07:da:f7:b4:da:14:
                    2f:25:9b:47:64:bc:fe:1e:e3:ec:c0:ce:bc:90:85:
                    3a:f2:a1:90:44:d6:54:26:7d:3f:04:81:62:70:40:
                    74:fc:7c:8a:0c:33:05:ea:dc:ae:7f:55:b8:38:44:
                    e1:34:d8:f4:41:de:ea:dd:13:02:9d:99:d7:20:2d:
                    79:a8:23:5b:8d:7a:b8:3d:10:55:8a:dc:49:71:3b:
                    56:03:76:16:8b:67:e1:64:6e:cb:3d:f8:ce:c2:ea:
                    24:cd:4b:a8:32:dd:a0:72:82:e6:23:ad:d6:62:0b:
                    b9:82:bf:95:29:db:65:b0:e8:93:b9:61:b5:f5:42:
                    39:78:83:af:ed:4a:88:b0:04:41:92:93:23:9d:67:
                    29:e3:0d:92:40:fe:d6:f3:17:28:65:4a:75:92:55:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:FF:3B:43:AF:ED:9A:75:A5:A8:AC:E8:C5:95:C5:14:62:23:0E
            X509v3 Authority Key Identifier:
                keyid:C0:54:D2:10:FE:9C:EB:6D:DB:38:A7:EE:9B:57:98:43:D3:C2:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFTSEP6c623bOKfum1eYQ9PCzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/wFTSEP6c623bOKfum1eYQ9PCzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/wFTSEP6c623bOKfum1eYQ9PCzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:df:37:db:84:05:98:db:43:d9:6f:0e:1b:66:16:63:03:
         41:df:cd:8a:f9:c7:b7:b2:82:b2:97:ef:a1:3a:5f:7e:ca:bb:
         76:e4:b2:3f:df:63:ca:21:7a:3f:6e:f8:9b:17:e4:cb:e4:c9:
         4b:8d:c9:5b:eb:97:de:86:ff:5c:fc:56:b1:62:9f:50:4b:a6:
         e4:46:90:62:e2:43:6f:d0:c8:d4:42:46:61:41:26:f2:9c:c1:
         da:3f:ab:17:0f:b4:8d:ae:6c:5c:ca:21:51:b3:4a:10:62:7d:
         7f:9b:36:59:4f:11:0a:df:72:18:0b:03:2e:b3:0e:2a:64:ab:
         dc:b4:61:4b:49:aa:2e:82:c1:45:f3:e9:2c:5b:1f:06:69:7e:
         27:9e:06:3b:95:45:9a:71:29:5c:51:38:d3:84:21:e5:0e:bb:
         ef:e2:8d:49:80:4d:d9:26:ac:b0:bf:9e:da:24:9e:02:91:16:
         3b:fc:bc:9e:d3:e4:a4:5c:07:86:6d:33:70:cb:c7:f4:44:f5:
         5e:6e:b0:b2:b1:2e:3a:09:eb:c0:35:25:f3:d9:3f:50:e7:2c:
         cc:a8:52:5f:d3:9b:95:bf:e9:4a:8f:14:41:50:43:5f:15:a7:
         d2:13:54:9c:9d:aa:1e:d6:14:fb:86:9c:38:44:e6:1f:09:e3:
         d2:33:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:00 2026 by rpki-client