Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          5WBUMbY+cTNj13EdJdrj1QiJr1I8zu95hUUr+Pq8rIU=
Subject key identifier:   0C:44:01:D2:55:97:C3:5F:D8:F2:F5:B1:9F:9E:3B:90:D9:74:D9:70
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       01A0D26E1476EECA2CC2F669D077F7AA0B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          18B8
Signing time:             Thu 24 Sep 2026 08:00:24 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:24 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:24 +0000
Files and hashes:         1: FrTYd2n1mPMmnQqlw_GA42S0gns.roa (hash: 4LYehQSenwwS3QpKE9QMEjIzFleWyGwk4ZhWD2c4154=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: ZL9K/jiiLJvaBSgBaJCWmy0QqN/iNxJ1LF0jZX3JQv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:14:76:ee:ca:2c:c2:f6:69:d0:77:f7:aa:0b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Sep 24 08:00:24 2026 GMT
            Not After : Sep 25 08:00:24 2026 GMT
        Subject: CN=0c4401d25597c35fd8f2f5b19f9e3b90d974d970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:ce:8b:ab:9e:98:d9:d0:66:4e:5b:a8:2d:
                    26:12:f6:7f:92:52:d6:89:1b:60:28:b5:82:d3:fc:
                    bc:47:d8:18:0f:2d:fa:7a:df:94:ed:71:a7:cc:0a:
                    f6:e8:46:13:14:06:6c:1e:74:13:c8:1b:56:44:b6:
                    6d:3c:66:d7:65:9d:2c:e7:26:d4:1c:63:41:09:6c:
                    59:4d:88:34:93:17:5f:ca:24:56:5a:2f:9a:73:ab:
                    31:40:bb:68:bc:be:e1:b3:6a:2d:30:a0:5d:4d:53:
                    9b:cc:28:10:c4:cc:ad:d7:01:b0:ef:0c:34:ce:71:
                    14:a8:df:86:f9:db:a6:50:96:5c:5a:a1:f6:e3:f5:
                    3b:1d:e8:86:2f:0c:31:d6:80:58:e7:bb:5b:7a:65:
                    3c:30:a2:ec:d0:39:58:b8:5a:29:29:18:78:cc:9b:
                    da:14:3e:0e:84:5d:d4:d2:62:7d:87:4a:df:e7:02:
                    d0:f2:0a:35:4d:f8:11:eb:95:eb:81:95:11:ac:35:
                    05:09:50:c0:4b:6d:9d:06:5b:c7:13:6d:26:5d:0c:
                    41:8b:4b:fb:d7:6f:a8:e4:ab:92:6e:04:25:cd:1a:
                    0e:59:55:22:2c:f2:c2:9d:f7:02:c7:ee:f8:39:e8:
                    d9:9f:77:e9:27:cb:aa:cb:0a:3c:56:85:80:1d:73:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:01:D2:55:97:C3:5F:D8:F2:F5:B1:9F:9E:3B:90:D9:74:D9:70
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:73:2c:28:cf:f7:ea:56:b6:39:b0:26:9f:fe:0a:60:52:db:
         c6:56:fb:f8:d3:86:8b:71:68:f5:82:b8:b5:96:91:5d:8e:ce:
         f8:e4:90:7d:72:d1:0b:d5:e4:42:79:17:36:72:80:6b:08:e8:
         ac:98:20:21:a1:11:f1:45:72:81:0f:67:3b:71:32:f4:3a:2f:
         e3:9b:22:e0:8f:5d:1f:4a:eb:9d:70:f0:44:23:db:fd:04:0b:
         a0:9d:8d:4e:40:89:ea:0c:bf:bc:86:1e:f4:62:dd:17:9d:e1:
         1f:b6:ef:5f:77:0b:0c:9d:75:34:45:0a:44:f3:86:04:a9:98:
         38:b4:40:39:6c:08:1d:41:ae:4c:97:35:0b:7c:46:0d:1e:d7:
         26:6c:49:2f:be:9b:05:d7:d7:f9:9c:b1:17:56:9d:f5:15:df:
         36:06:f6:04:e4:03:b4:40:08:66:d6:24:87:4e:f3:39:7b:33:
         93:11:27:39:35:2f:af:2e:60:6d:d6:3c:3f:cb:07:89:9c:bb:
         ea:e6:a6:bf:54:7b:57:14:53:0e:92:b3:13:3e:14:f7:5e:b9:
         43:ba:46:ec:68:96:5b:02:5e:f1:c9:d8:be:f7:fc:ca:3f:41:
         60:3b:ee:84:b7:e3:73:fa:66:0b:78:d9:7f:1a:bd:f1:87:12:
         52:da:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:56:18 2026 by rpki-client