Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          kj13P+0R9vRU1956WoU1mXJrMLGfNHtrrjspC1C2Q8k=
Subject key identifier:   C6:2A:4F:53:E6:70:B6:61:0D:07:C1:95:F3:BC:61:32:CA:1E:74:A2
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       01A0C77D289E3FC8BF1194B7505EDB7CBD81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          0F2A
Signing time:             Tue 22 Sep 2026 05:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 05:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 05:01:03 +0000
Files and hashes:         1: 6mjN2cFeWfG3wVcYw8P1dVWShro.roa (hash: oi7Y1F+Y4ggk+eXgRwxuyy3TiFb/d2QmgXSyELcF0f8=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: euaaJB0BsnVRpWiNqM+GC4giUJWIcSmyDn+8Ar+BD7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:28:9e:3f:c8:bf:11:94:b7:50:5e:db:7c:bd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Sep 22 05:01:03 2026 GMT
            Not After : Sep 23 05:01:03 2026 GMT
        Subject: CN=c62a4f53e670b6610d07c195f3bc6132ca1e74a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:b4:b6:4d:4f:2a:f7:09:f5:75:d9:6f:53:
                    6a:4a:ed:1e:6a:d3:19:0b:84:ef:d6:f3:9b:0d:eb:
                    be:5d:ab:95:18:27:49:44:0f:ec:0e:b1:4d:2a:88:
                    fa:04:88:23:61:83:5a:01:8d:a1:54:57:a6:5a:eb:
                    90:d8:35:9c:ee:4e:a9:7d:42:3a:e9:07:09:08:d2:
                    a1:d0:fb:14:e9:4b:2f:10:e1:f0:01:dd:8e:6a:32:
                    eb:79:2a:e3:5a:8b:e5:bd:76:08:93:d1:36:06:93:
                    4f:0d:c8:a8:e3:96:9d:89:28:4f:fe:bb:0e:17:82:
                    a9:20:0e:d4:b0:66:04:b4:dd:d6:29:87:d5:a3:bc:
                    f9:fd:dc:d5:26:f3:30:c2:f4:75:02:be:9c:d4:e0:
                    f5:72:ee:f4:07:8c:eb:01:62:18:ef:6c:b1:b1:33:
                    e0:a3:0a:e4:41:78:31:7c:8b:be:a6:cf:15:10:ae:
                    7c:eb:b5:22:46:ed:d4:3f:36:c9:67:5b:e0:2d:97:
                    50:f6:f8:a4:60:54:50:1d:8e:94:ee:8f:96:8d:4a:
                    57:40:5a:e2:9c:95:6d:9e:21:b1:76:bc:d4:2b:e0:
                    f0:71:7d:5d:ff:b9:20:98:4f:33:4d:0c:b6:1a:2b:
                    cb:11:95:76:66:a7:23:6e:ac:48:14:fb:ac:5a:2c:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:4F:53:E6:70:B6:61:0D:07:C1:95:F3:BC:61:32:CA:1E:74:A2
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:58:14:67:d4:29:33:36:37:18:36:14:24:27:8f:6b:e3:5c:
         d7:cf:2f:da:f6:98:44:0a:f8:fb:5f:40:a8:9a:3e:75:50:02:
         97:fb:3b:0b:c4:53:e1:d5:22:2e:27:6f:2f:b6:63:04:aa:10:
         67:87:c4:07:ef:7f:fe:8b:6d:d3:4d:77:4a:fe:16:28:ad:cf:
         53:ef:fb:b1:5f:c5:32:d9:fc:8f:44:85:03:66:47:51:18:ba:
         e6:d0:db:cc:c1:3d:c3:52:00:56:67:2e:d1:26:8b:bd:d7:b6:
         f6:92:f2:05:bb:bd:87:61:45:33:3a:15:55:10:65:76:70:37:
         93:d1:51:d0:c3:d7:aa:a8:28:13:fd:28:05:73:84:41:a3:cd:
         c2:36:5b:8a:59:06:6a:d6:d6:7f:5b:cf:68:83:ce:98:06:b4:
         b3:e8:39:5c:79:5b:2b:e6:cc:28:ec:91:7a:ef:75:f4:d1:c0:
         eb:6f:2c:cd:d3:fb:78:8b:6a:eb:86:32:9e:5b:72:27:ea:d6:
         c4:28:ef:a1:92:3d:9d:66:83:f3:0f:2e:80:e5:72:73:eb:3d:
         d5:e3:d5:89:57:3d:4f:f3:56:17:e6:7b:77:4a:e6:90:fe:56:
         90:a6:c3:87:3c:2d:e1:58:49:d4:d1:e0:10:5f:90:36:5c:a1:
         e6:c3:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:43:45 2026 by rpki-client