Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
File:                     Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json)
Hash identifier:          WOXhVq9jqZU3asd+1eqd8jaUtTlhwbF/0VVYxKtBknY=
Subject key identifier:   A5:AB:29:4E:AA:89:5F:6E:CF:ED:BB:1B:C6:49:2D:4D:74:45:9F:A3
Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
Certificate issuer:       /CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Certificate serial:       01A1137318BD141347B9EA3281784FAEBC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
Manifest number:          02A6
Signing time:             Tue 06 Oct 2026 23:01:12 +0000
Manifest this update:     Tue 06 Oct 2026 23:01:12 +0000
Manifest next update:     Wed 07 Oct 2026 23:01:12 +0000
Files and hashes:         1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: +M9hoDetXGncWDBNhcNMMuycYVhxFLRVXKJ0V0VAdi8=)
                          2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:73:18:bd:14:13:47:b9:ea:32:81:78:4f:ae:bc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928
        Validity
            Not Before: Oct  6 23:01:12 2026 GMT
            Not After : Oct  7 23:01:12 2026 GMT
        Subject: CN=a5ab294eaa895f6ecfedbb1bc6492d4d74459fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:d0:7a:61:b4:6d:30:d2:f3:89:34:fa:0e:
                    ed:31:ee:ef:bc:ad:19:e0:9d:ea:36:84:dc:85:b0:
                    8c:7c:8f:ab:fd:8b:25:eb:ae:95:03:6e:b2:34:2d:
                    68:41:29:fb:b8:ee:88:74:ee:1a:ae:ed:a3:53:85:
                    99:6c:9a:82:30:10:d8:80:ce:cb:2e:77:32:27:61:
                    09:c0:eb:60:e4:e3:4b:dd:2f:6a:45:ac:ce:ac:0e:
                    c9:2a:0f:0d:13:10:b6:98:f9:cc:53:15:77:52:67:
                    b0:df:10:c2:d5:e3:f3:1d:84:bc:23:ac:b9:aa:78:
                    91:5a:5d:da:3e:dd:0e:a3:f3:f8:b7:60:1d:09:ed:
                    c6:16:20:89:fd:55:e4:0c:f0:9f:84:0b:4c:f9:73:
                    c6:d8:f1:f9:74:5d:4e:eb:cf:10:e3:8f:dd:61:f8:
                    17:72:1c:0d:f2:53:a5:0e:5c:f1:e8:4e:47:2d:27:
                    f8:99:e9:39:53:92:bf:aa:26:73:72:72:70:f9:09:
                    1e:9b:bb:89:98:4e:03:46:56:2c:59:d2:bb:99:43:
                    84:a6:2d:af:02:af:bb:a1:c5:80:b5:29:75:ee:f7:
                    68:80:01:10:73:62:bb:98:1c:19:f8:92:c9:fd:de:
                    66:98:4a:f3:4d:33:f7:11:3e:20:7f:1e:b7:bf:3c:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AB:29:4E:AA:89:5F:6E:CF:ED:BB:1B:C6:49:2D:4D:74:45:9F:A3
            X509v3 Authority Key Identifier:
                keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:5d:9a:da:1a:87:97:d4:2f:f0:37:d4:b3:b6:66:03:3c:
         08:93:6d:78:0e:79:22:ed:3b:df:ce:23:25:32:17:ab:17:ed:
         46:62:ef:9e:6e:fe:aa:4c:2f:0a:ca:52:48:f4:c3:d2:5e:0d:
         ad:ae:9e:69:40:b8:bc:a4:f8:c5:42:7c:39:db:27:ec:f4:5d:
         67:67:29:7a:73:05:7e:7d:a5:7a:3b:d2:05:c0:33:50:5e:81:
         d4:96:1e:a1:2e:b9:88:67:88:41:ff:2c:86:84:2f:c9:26:f9:
         70:ed:db:d9:f5:b7:ac:92:c2:c3:8a:e9:f1:b4:66:9a:d8:14:
         0c:f6:f8:01:ac:45:e4:78:8f:3b:c2:45:b0:5c:6e:91:89:e0:
         be:83:5a:ac:b4:27:5f:67:6f:4c:0e:7a:9c:00:ad:bd:0f:e0:
         c4:2b:b6:ed:bb:df:19:27:95:9f:e5:70:f2:40:fb:58:ca:69:
         e9:5d:c5:b1:7d:6d:93:ce:5a:df:86:75:f1:d9:08:2c:5d:87:
         2a:4e:65:0b:4e:c0:3f:30:c2:1a:2a:1d:c7:10:d7:36:b3:29:
         fb:54:b3:03:43:d4:15:86:bd:45:d4:91:ca:18:d9:b9:d2:8e:
         65:e9:e1:d0:2d:6e:18:97:0b:10:a1:4a:06:81:6c:63:f5:e1:
         59:df:cb:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETcxi9FBNHueoygXhPrrx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmRlOGQ5ZWE2NDMxODA4YzIwNDAxZDI4NzVjNDc3ZTRk
YzU5MjgwHhcNMjYxMDA2MjMwMTEyWhcNMjYxMDA3MjMwMTEyWjAzMTEwLwYDVQQD
EyhhNWFiMjk0ZWFhODk1ZjZlY2ZlZGJiMWJjNjQ5MmQ0ZDc0NDU5ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TvQemG0bTDS84k0+g7tMe7vvK0Z
4J3qNoTchbCMfI+r/Ysl666VA26yNC1oQSn7uO6IdO4aru2jU4WZbJqCMBDYgM7L
LncyJ2EJwOtg5ONL3S9qRazOrA7JKg8NExC2mPnMUxV3Umew3xDC1ePzHYS8I6y5
qniRWl3aPt0Oo/P4t2AdCe3GFiCJ/VXkDPCfhAtM+XPG2PH5dF1O688Q44/dYfgX
chwN8lOlDlzx6E5HLSf4mek5U5K/qiZzcnJw+Qkem7uJmE4DRlYsWdK7mUOEpi2v
Aq+7ocWAtSl17vdogAEQc2K7mBwZ+JLJ/d5mmErzTTP3ET4gfx63vzykVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWrKU6qiV9uz+27G8ZJLU10RZ+jMB8GA1UdIwQY
MBaAFFr96NnqZDGAjCBAHSh1xHfk3FkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3YzbzJlcGtNWUNNSUVBZEtIWEVkLVRjV1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80MzRmODEtYjk4YS00ZmMyLWJjN2Ut
NDg0Y2M1MjhlZTA0LzEvV3YzbzJlcGtNWUNNSUVBZEtIWEVkLVRjV1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80MzRmODEtYjk4YS00ZmMyLWJjN2UtNDg0Y2M1MjhlZTA0
LzEvV3YzbzJlcGtNWUNNSUVBZEtIWEVkLVRjV1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqpdmtoa
h5fUL/A31LO2ZgM8CJNteA55Iu07384jJTIXqxftRmLvnm7+qkwvCspSSPTD0l4N
ra6eaUC4vKT4xUJ8Odsn7PRdZ2cpenMFfn2lejvSBcAzUF6B1JYeoS65iGeIQf8s
hoQvySb5cO3b2fW3rJLCw4rp8bRmmtgUDPb4AaxF5HiPO8JFsFxukYngvoNarLQn
X2dvTA56nACtvQ/gxCu27bvfGSeVn+Vw8kD7WMpp6V3FsX1tk85a34Z18dkILF2H
Kk5lC07APzDCGiodxxDXNrMp+1SzA0PUFYa9RdSRyhjZudKOZenh0C1uGJcLEKFK
BoFsY/XhWd/Lqg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 01:05:31 2026 by rpki-client