Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier:          cUoWeg5MxlVCBH44qu6h5wjXoekaQEO0AVqMhgsLkRo=
Subject key identifier:   35:58:92:71:FE:B7:16:10:BD:66:10:69:57:7F:4D:F0:3A:3B:6D:64
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       01A0DA2880C43EA5EEBB16595C020D5F4D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number:          12B7
Signing time:             Fri 25 Sep 2026 20:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:22 +0000
Files and hashes:         1: Blotrpr7MpBhfTIOMAd4QzI4MTU.roa (hash: 7tg4tSbcWIkD3S9S1Cn28G+hcZYO6KUz7cO5Ike+MUg=)
                          2: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: q9wn/DJRd1k13qwL5otFEYHaD1Q920hCMiv9BDuqUwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:80:c4:3e:a5:ee:bb:16:59:5c:02:0d:5f:4d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Sep 25 20:01:22 2026 GMT
            Not After : Sep 26 20:01:22 2026 GMT
        Subject: CN=35589271feb71610bd661069577f4df03a3b6d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c0:c3:a1:70:e1:b4:09:42:25:02:39:b6:dd:
                    23:82:2e:ef:7c:11:c3:2b:db:0d:10:65:75:4a:dd:
                    ab:56:d5:30:6b:38:9b:22:c5:cf:33:12:f3:b1:7a:
                    c8:eb:cd:fd:ca:7a:14:68:62:a1:d7:e4:0c:d7:7d:
                    e1:f7:9a:44:2d:4c:7b:9f:7c:08:97:c2:32:4e:54:
                    26:47:05:64:1b:5b:de:31:93:c5:5b:60:74:c4:b8:
                    60:18:a6:2f:96:92:e3:fb:f0:0c:8c:1d:d9:f1:2a:
                    19:24:16:6c:f4:55:0f:e5:0c:45:0f:a6:15:cb:6b:
                    5e:33:97:98:8b:eb:c9:40:ab:39:6e:24:13:5e:97:
                    35:c7:97:69:d6:9e:45:9b:ed:3a:c7:b7:d8:21:e6:
                    f3:67:52:b6:39:7c:f2:9a:9c:2b:e3:dd:72:7b:1b:
                    23:0e:a9:f0:f3:ec:2b:2f:31:48:b1:11:39:ba:ad:
                    d9:6c:43:07:f5:47:1e:46:a7:c3:a8:a6:72:a7:28:
                    47:66:68:ac:fb:76:34:18:a7:b1:c2:2b:2f:6e:8c:
                    d3:51:ec:89:86:b8:43:33:58:e9:48:2f:39:d2:e9:
                    65:d8:54:24:71:97:4a:60:d6:5e:9d:8b:15:cb:a2:
                    58:bc:65:36:37:f0:37:2c:76:13:42:74:0e:cc:ae:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:92:71:FE:B7:16:10:BD:66:10:69:57:7F:4D:F0:3A:3B:6D:64
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:64:49:69:27:7a:4d:6c:18:6c:61:db:30:95:d7:cc:c4:be:
         1f:95:f8:e6:b3:ae:30:5d:26:f9:e5:67:b6:74:56:77:03:7f:
         10:29:82:26:30:03:d5:2d:90:74:de:3e:49:6b:ee:96:7c:ec:
         87:14:e3:ee:8b:0a:5e:50:db:aa:6d:03:96:2c:55:b9:57:3a:
         3d:b8:6e:fe:f1:8d:e3:4d:89:1e:47:b3:1b:d3:a8:f6:e7:67:
         e3:9a:03:8a:3e:3d:29:fd:b3:0d:c3:5e:a5:ae:0c:c8:c4:9b:
         11:23:ff:8c:97:bd:39:f9:00:25:fa:58:5f:38:47:3c:25:ae:
         86:34:5a:65:8f:4c:11:10:a1:4d:94:98:3e:b9:b9:72:73:0e:
         90:ce:23:82:8e:9e:ec:cb:53:41:f9:25:57:5f:40:42:c6:d9:
         fa:6a:b9:ff:52:d8:3f:f5:33:63:6e:c7:00:8d:f9:44:80:9c:
         b9:88:51:99:23:3e:ee:c3:34:22:b4:96:4e:d4:cd:23:60:7c:
         8d:73:08:aa:69:6c:a1:1f:25:69:75:d9:8c:bb:dd:94:c4:22:
         17:7d:33:5e:e8:71:29:80:ce:52:83:2f:cf:3c:94:36:84:58:
         d6:23:cf:79:c9:0f:bd:29:39:a2:4b:14:c1:f6:96:70:88:95:
         9b:29:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:43 2026 by rpki-client