Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File:                     Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier:          R6TsVaVfk+DURCya26DGKvh1M03Xx+5/82jCUibGzH0=
Subject key identifier:   76:8C:1C:24:6D:C8:13:A1:65:B0:42:D8:12:2B:61:21:E4:2D:17:DE
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer:       /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial:       01A0D7CD5A665188CED73438224ADA598CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number:          0834
Signing time:             Fri 25 Sep 2026 09:02:34 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:34 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:34 +0000
Files and hashes:         1: J37URkCTs05jiz-Rj5fYxPu7CXc.roa (hash: jYLrc7tKRBPyUDOWTkYxDyN6WhDwfRNStduazvGrF2M=)
                          2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: 0UnVm55Fw9K7lComPQ/JIFNS/J8BEO+3HU/YPRx5dv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cd:5a:66:51:88:ce:d7:34:38:22:4a:da:59:8c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
        Validity
            Not Before: Sep 25 09:02:34 2026 GMT
            Not After : Sep 26 09:02:34 2026 GMT
        Subject: CN=768c1c246dc813a165b042d8122b6121e42d17de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:8e:81:07:2a:b3:d2:b8:57:cd:e1:a2:cd:
                    a8:7b:d5:ef:3a:34:8b:db:5d:a1:e7:31:49:19:30:
                    97:6f:9e:0a:b7:1f:b5:d7:dd:ab:94:88:51:14:0d:
                    97:61:9f:35:6e:68:58:d9:b0:57:4e:a4:de:b0:26:
                    b3:f5:26:96:68:6c:79:4c:c8:c8:ff:9a:12:d2:1e:
                    f9:c3:67:ee:06:3a:ad:d1:fa:39:3b:5f:b7:9e:41:
                    02:b6:15:19:1c:66:12:7d:bf:32:43:e2:e0:87:c0:
                    e5:44:a8:fd:84:7f:56:7f:c9:32:cd:e5:91:4c:81:
                    9e:d6:0a:75:e4:f3:d1:cd:a0:90:12:34:2d:58:50:
                    39:f6:b3:de:55:c8:59:ba:31:6e:6d:af:06:88:6d:
                    33:d8:02:27:23:a0:c7:67:6c:be:e4:0f:6b:71:19:
                    a7:24:9a:0b:ae:3b:fc:81:69:28:2a:27:fa:04:a2:
                    34:de:42:04:0f:ef:2a:4d:d3:cd:c4:88:6d:ac:9c:
                    79:ba:80:f6:15:34:ea:b4:2c:6b:6f:52:bc:97:63:
                    2c:df:88:7b:de:70:ba:a5:74:10:8f:6d:b7:c3:34:
                    0d:9e:e9:14:05:c2:7b:28:5d:99:d4:1a:fa:c2:cc:
                    de:ec:6d:e7:b7:c7:35:85:27:f7:29:e3:6e:36:5a:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:1C:24:6D:C8:13:A1:65:B0:42:D8:12:2B:61:21:E4:2D:17:DE
            X509v3 Authority Key Identifier:
                keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:8e:f9:5b:60:8e:63:28:fb:c0:75:ee:d5:7d:c0:c5:7b:
         9e:6b:3a:d0:5c:43:2d:33:26:3d:98:09:ce:0f:fe:7c:f2:1e:
         ee:c2:58:d9:cc:c1:c4:97:76:9b:35:fc:8e:b0:25:51:8e:ba:
         d8:72:9a:8d:ef:08:a3:51:fb:c6:10:7e:9f:1a:e1:0e:7a:31:
         b5:73:2b:0a:3a:d7:73:da:c9:fd:24:67:64:7a:c5:35:73:6a:
         28:4e:cb:6b:38:32:a5:33:c9:8d:73:5a:b5:0d:d0:7a:2a:1e:
         13:a6:74:aa:07:9e:92:8b:27:65:d8:7c:f7:07:02:c9:76:50:
         0c:43:2c:d0:64:3d:17:a7:85:1e:93:95:e1:53:03:59:5a:89:
         b8:dc:72:1d:a9:72:99:24:e2:e3:82:82:82:f2:63:79:4f:0e:
         2f:1a:3e:ec:73:1a:32:2b:8f:b9:c4:30:ab:ad:07:4b:83:59:
         f4:a4:ba:76:a0:d9:89:6d:d3:c0:86:43:5f:34:40:94:f6:77:
         f3:ca:53:d2:f4:fb:ef:04:4c:3b:1c:4c:b2:86:01:3f:9b:7c:
         74:29:a5:b2:e1:1f:e4:e3:b1:9e:57:86:4f:36:7f:8c:6b:6f:
         d5:ad:21:bf:96:48:fb:d4:31:3e:9b:d8:fc:48:4e:bc:ac:5c:
         d0:2f:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:22:25 2026 by rpki-client