Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          RCTP/OwzQaUEs7KBtU5YIk6eoVl2BmZJS/CqkoSDzz8=
Subject key identifier:   7D:E2:8B:53:04:44:98:6C:55:89:BF:C1:60:B8:15:D0:D7:A0:5E:9F
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       01A13A4912BE637D23C6CA72940E7489FE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          11FE
Signing time:             Wed 14 Oct 2026 12:00:29 +0000
Manifest this update:     Wed 14 Oct 2026 12:00:29 +0000
Manifest next update:     Thu 15 Oct 2026 12:00:29 +0000
Files and hashes:         1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: kLJTP7KfI85HVA73eQpNyJGV9z8DFXwVqRNULWQNk0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:49:12:be:63:7d:23:c6:ca:72:94:0e:74:89:fe:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Oct 14 12:00:29 2026 GMT
            Not After : Oct 15 12:00:29 2026 GMT
        Subject: CN=7de28b530444986c5589bfc160b815d0d7a05e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:90:2d:ae:d3:81:7c:e0:4e:9c:ce:a9:b7:
                    ac:f6:8d:f3:e7:2c:07:57:68:aa:08:51:d1:8b:6d:
                    34:1f:17:8d:a4:38:bf:81:e9:0d:22:3e:f4:4a:45:
                    55:32:06:39:8d:7a:39:50:57:e7:ef:a2:d4:88:58:
                    b1:74:59:b1:45:7d:cc:70:68:b0:ce:8c:a4:be:b1:
                    a2:09:2e:0e:9c:0c:a7:a0:c6:23:00:c0:be:55:99:
                    61:32:84:d4:d2:d9:ec:8f:f0:9d:94:8b:99:25:ce:
                    94:e9:e5:24:a0:63:f7:d5:91:70:8a:e9:52:80:ca:
                    f5:a3:88:dd:70:c9:7f:79:b8:10:27:c8:44:52:40:
                    0f:46:12:54:13:09:22:4d:21:91:fc:01:98:b3:2c:
                    41:7b:1d:dd:06:39:96:af:88:ac:7a:23:34:95:c2:
                    f9:7c:21:91:10:62:d4:b2:4a:3d:a4:8b:fc:0e:06:
                    ab:0a:e5:1f:43:5a:0a:bf:55:26:29:28:42:72:55:
                    ce:ce:97:e0:7f:93:5b:72:38:a6:ec:6b:e0:88:92:
                    90:20:6b:dc:d7:0c:58:94:4d:f6:97:33:57:b4:37:
                    69:2d:f4:87:04:7f:9f:36:f6:cf:e1:55:ed:33:7a:
                    5b:28:45:b9:c0:ec:53:01:a2:31:ae:63:21:41:4f:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E2:8B:53:04:44:98:6C:55:89:BF:C1:60:B8:15:D0:D7:A0:5E:9F
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:91:7b:85:29:24:62:35:c8:80:0d:74:11:cd:52:7a:b4:98:
         36:56:9a:c6:29:80:d2:1c:1a:11:1a:97:45:2e:45:cf:76:b6:
         bf:48:c0:35:cc:51:62:be:58:1e:be:8f:d9:22:29:1d:15:56:
         0a:df:b9:59:a7:6d:6b:df:91:e8:c0:ed:5c:c9:6c:0f:86:f7:
         57:11:5a:d4:51:dd:9d:5c:7a:5e:7a:ae:33:9f:32:01:4b:0e:
         9c:f9:c9:d1:52:b7:57:15:69:50:40:5a:43:ad:0e:0e:1b:a0:
         c1:1a:57:01:9a:41:75:b5:5e:b3:31:1b:50:1e:bf:40:73:cf:
         0c:b4:87:6a:c7:a3:f9:9c:ba:c6:66:4f:70:92:45:75:7d:40:
         cb:76:6a:aa:a0:26:9a:0c:9a:d7:86:0a:a7:4b:61:ab:cc:e9:
         9c:c2:71:03:58:4b:74:14:99:a4:f6:f7:30:30:36:3e:f4:8e:
         4b:39:e7:32:e2:ed:80:cb:fa:7f:46:b3:0e:31:5c:ce:44:31:
         77:32:da:0f:4f:55:bb:0b:27:36:0f:49:1e:b1:6e:4a:0e:05:
         0f:4a:0a:2b:b2:79:40:b3:19:5d:dd:e0:47:c1:2f:b8:53:73:
         ca:10:72:21:28:23:0e:b5:54:4b:13:c9:97:7b:08:a6:67:7f:
         c1:03:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:04:14 2026 by rpki-client