Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          Rt/O62wTGof+sCykps2e+rk6zJey4LCYyVfiBPkvCYA=
Subject key identifier:   C5:F3:64:43:66:16:00:C9:23:AC:31:D1:F5:76:D8:71:62:DD:99:1B
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       01A0E69AB4EAF7DD2E68D1E089561A2F54A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          1A79
Signing time:             Mon 28 Sep 2026 06:01:33 +0000
Manifest this update:     Mon 28 Sep 2026 06:01:33 +0000
Manifest next update:     Tue 29 Sep 2026 06:01:33 +0000
Files and hashes:         1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
                          2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: y2Xn+mmPPTx5j4l5ogd/2xX+u4szYC2HEOQuC2zSWpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 06:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:9a:b4:ea:f7:dd:2e:68:d1:e0:89:56:1a:2f:54:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Sep 28 06:01:33 2026 GMT
            Not After : Sep 29 06:01:33 2026 GMT
        Subject: CN=c5f36443661600c923ac31d1f576d87162dd991b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:bd:d3:80:d6:20:d3:0a:cc:b5:4e:4b:fa:
                    fb:53:f7:26:7c:2a:ca:ea:f5:42:f3:4d:1e:91:81:
                    31:7e:a1:c9:84:08:af:0d:c8:7f:58:e1:46:65:98:
                    2f:86:b2:a1:b1:8a:c3:1d:e4:5e:0d:09:a6:11:be:
                    ec:99:cc:b6:92:b1:10:23:53:a8:e1:dd:a1:aa:a2:
                    c1:ad:83:b0:08:79:7e:05:31:cc:20:bb:a3:3b:22:
                    7f:4b:b7:06:11:3f:07:54:f1:46:dd:3e:b9:cf:e6:
                    ba:91:0c:d5:c1:a2:7c:58:ed:68:8d:d5:43:f6:24:
                    b3:ed:e9:fc:00:67:4e:92:b0:19:7d:42:15:11:9f:
                    d2:7f:95:83:d3:ec:df:2e:fc:d0:da:22:90:49:02:
                    91:9e:3c:a2:79:ae:59:e5:49:56:0d:13:a5:a5:cd:
                    96:42:db:b7:6d:7d:e8:1b:b9:8b:4f:08:f3:7f:32:
                    5b:69:a1:f0:ea:b1:e5:96:f5:31:05:ef:5f:6b:f1:
                    61:ee:5c:8f:df:52:81:28:a4:9d:3b:6f:8d:a1:e0:
                    3d:4c:ff:d8:4b:3d:59:04:70:25:9f:07:a3:2d:bf:
                    ef:e2:1c:46:50:d3:04:eb:f4:7d:b4:aa:3a:50:77:
                    74:76:16:ba:2e:89:d4:18:7a:80:f1:7d:a6:77:b5:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:64:43:66:16:00:C9:23:AC:31:D1:F5:76:D8:71:62:DD:99:1B
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:3c:1e:3c:0c:a7:f0:e3:13:14:f4:5b:1b:b4:0d:29:41:b5:
         63:61:d0:fd:f4:46:0b:84:b5:63:80:9a:7d:e2:82:e6:6f:b3:
         e6:49:d1:9a:cc:25:fe:32:be:87:7b:0a:26:10:6e:12:c7:ce:
         65:10:5f:fc:8a:9d:f1:dc:63:19:bd:a4:11:95:6a:f4:44:2b:
         86:f4:ac:de:5b:45:58:26:0e:7e:c1:c5:1b:c0:c3:8b:9e:b9:
         f3:2f:d7:70:9a:c9:a2:87:6b:dd:00:6f:bc:d6:ed:84:88:48:
         51:ed:2d:e3:c7:21:da:2a:d3:c5:53:7e:4c:fe:25:bd:a1:b6:
         2e:c5:5a:9a:bd:d7:99:6f:0e:f3:c6:5d:2e:89:fa:b0:98:14:
         6f:c8:19:c8:14:b6:fc:57:c4:5e:05:00:89:2f:05:07:88:21:
         c2:84:4c:35:42:58:98:6f:10:ef:95:61:41:0a:00:13:1d:9e:
         df:e0:88:ed:84:c6:4b:04:85:9c:95:4e:a7:f8:79:14:76:f1:
         93:60:62:e5:07:51:7a:dd:f5:b7:f0:d3:03:b2:9f:47:cd:24:
         fa:fc:ce:4a:bd:43:7f:65:ba:c7:31:7a:ed:db:f2:15:c9:b9:
         b1:4f:cc:f0:63:d3:d0:9a:41:8d:de:a1:d4:2c:e9:e4:8c:5e:
         79:f6:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:23:19 2026 by rpki-client