Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
File:                     wvrMVfBdPoBsyn52MQzPPdjwKG4.mft (raw, json)
Hash identifier:          1NRRL1PlNsdP2nvEqh6SdQyBHiVwje00TE4t/GdalH4=
Subject key identifier:   24:CB:C6:68:38:E3:9D:27:FC:FE:D8:B1:AF:AD:50:44:B0:E6:DB:DD
Authority key identifier: C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E
Certificate issuer:       /CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
Certificate serial:       01A0BF1E9188B34F6531B1031D84027473E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
Manifest number:          DA
Signing time:             Sun 20 Sep 2026 14:00:46 +0000
Manifest this update:     Sun 20 Sep 2026 14:00:46 +0000
Manifest next update:     Mon 21 Sep 2026 14:00:46 +0000
Files and hashes:         1: LdaE_Bi2qwSvJb8iyoaRHE7CrYA.roa (hash: gVcye9NQcI54DcMJHyKCUcGC0ONkraDbgztVtuA+gyQ=)
                          2: wvrMVfBdPoBsyn52MQzPPdjwKG4.crl (hash: ZJ/yQD5bqtrCWvU1oYxHF5NG+oGX7ZkCmASOEmnGLXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:91:88:b3:4f:65:31:b1:03:1d:84:02:74:73:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
        Validity
            Not Before: Sep 20 14:00:46 2026 GMT
            Not After : Sep 21 14:00:46 2026 GMT
        Subject: CN=24cbc66838e39d27fcfed8b1afad5044b0e6dbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f0:7b:9c:87:48:60:5c:27:67:08:50:4a:d5:
                    4a:38:88:dc:57:56:f0:db:dd:c1:88:fb:dc:81:09:
                    b4:e0:b6:78:fe:02:e1:dc:29:95:a6:34:b0:37:a8:
                    a5:39:9a:c6:50:f5:39:3e:c1:3a:13:81:6a:a0:7e:
                    c5:3c:ad:ea:28:32:ca:f3:70:15:f8:87:dd:af:0f:
                    52:c0:09:83:fa:ae:88:f9:99:61:ee:77:14:ea:13:
                    37:20:7a:24:4b:c8:b1:7c:e4:da:ff:ce:c8:cb:14:
                    11:be:0b:b2:1f:40:ab:19:b6:63:a0:b9:68:a8:cc:
                    22:f5:87:d2:3d:45:a6:8a:58:54:f9:36:ba:af:69:
                    fd:40:2f:07:a4:38:9d:1c:d9:a7:dd:54:da:81:45:
                    aa:ef:c9:7a:0c:f9:a4:70:8e:6a:87:51:c9:40:01:
                    61:6a:1b:a1:0f:b5:3f:55:44:92:60:79:a1:3b:88:
                    2b:79:ff:07:9a:ba:5a:b0:70:b4:a2:03:08:68:ae:
                    59:23:be:c4:2c:c1:03:1e:dc:b7:f2:88:99:42:94:
                    b4:59:da:d5:b4:62:a9:be:f3:75:31:00:86:4b:7a:
                    8b:ed:2c:24:f2:15:0f:9f:c9:02:83:cb:fa:4e:f2:
                    25:e5:fb:24:fc:3f:f7:ea:16:c6:1b:b0:89:f4:ce:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:C6:68:38:E3:9D:27:FC:FE:D8:B1:AF:AD:50:44:B0:E6:DB:DD
            X509v3 Authority Key Identifier:
                keyid:C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:aa:c5:af:93:69:52:8e:11:40:4b:77:22:c6:e2:5e:65:
         6a:3e:1f:b8:91:f9:a8:58:a1:93:ca:3f:7b:88:c1:c6:b0:42:
         27:d6:08:e2:0a:55:6e:e9:0e:85:97:a2:a3:fd:14:74:b8:22:
         c9:c2:aa:07:4d:0e:06:9e:ca:39:d7:b9:61:af:e2:4d:11:d1:
         dc:aa:76:70:e4:50:d3:7c:50:82:aa:2f:45:ea:86:d3:9b:f2:
         44:23:f7:bb:62:8e:ec:94:80:53:a0:f7:f8:13:36:41:c8:96:
         e6:b8:1c:34:7b:81:ab:5e:cc:a4:90:a7:77:d2:22:b0:a4:95:
         21:5f:01:af:e2:e1:d3:92:88:2f:19:48:24:77:57:44:27:55:
         b2:87:90:4c:e2:a6:f9:84:39:2f:ad:fe:55:45:ba:ea:e6:7f:
         59:33:59:5e:36:ee:fb:69:72:a6:99:bb:a1:ed:4c:30:ce:4e:
         90:63:69:68:24:e2:1a:f8:c3:8a:1d:b7:1e:5d:41:ce:02:16:
         33:6f:c9:35:2c:d2:13:ad:86:c0:83:57:3c:08:09:6d:7c:64:
         a6:e5:dd:2d:5b:a8:61:b4:ef:5f:6c:5c:d4:d7:e3:7b:85:c6:
         06:36:09:45:e8:16:de:a9:dc:34:e5:f1:7e:c8:72:ed:9b:11:
         5e:69:33:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/HpGIs09lMbEDHYQCdHPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZmFjYzU1ZjA1ZDNlODA2Y2NhN2U3NjMxMGNjZjNkZDhm
MDI4NmUwHhcNMjYwOTIwMTQwMDQ2WhcNMjYwOTIxMTQwMDQ2WjAzMTEwLwYDVQQD
EygyNGNiYzY2ODM4ZTM5ZDI3ZmNmZWQ4YjFhZmFkNTA0NGIwZTZkYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivB7nIdIYFwnZwhQStVKOIjcV1bw
293BiPvcgQm04LZ4/gLh3CmVpjSwN6ilOZrGUPU5PsE6E4FqoH7FPK3qKDLK83AV
+Ifdrw9SwAmD+q6I+Zlh7ncU6hM3IHokS8ixfOTa/87IyxQRvguyH0CrGbZjoLlo
qMwi9YfSPUWmilhU+Ta6r2n9QC8HpDidHNmn3VTagUWq78l6DPmkcI5qh1HJQAFh
ahuhD7U/VUSSYHmhO4gref8HmrpasHC0ogMIaK5ZI77ELMEDHty38oiZQpS0WdrV
tGKpvvN1MQCGS3qL7Swk8hUPn8kCg8v6TvIl5fsk/D/36hbGG7CJ9M7FsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTLxmg4450n/P7Ysa+tUESw5tvdMB8GA1UdIwQY
MBaAFML6zFXwXT6AbMp+djEMzz3Y8ChuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3ZyTVZmQmRQb0JzeW41Mk1RelBQZGp3S0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZjQxYzctZDI3Yi00NDczLWE3ZGMt
MGU1MWUxZjVkZTIzLzEvd3ZyTVZmQmRQb0JzeW41Mk1RelBQZGp3S0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZjQxYzctZDI3Yi00NDczLWE3ZGMtMGU1MWUxZjVkZTIz
LzEvd3ZyTVZmQmRQb0JzeW41Mk1RelBQZGp3S0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotGqxa+T
aVKOEUBLdyLG4l5laj4fuJH5qFihk8o/e4jBxrBCJ9YI4gpVbukOhZeio/0UdLgi
ycKqB00OBp7KOde5Ya/iTRHR3Kp2cORQ03xQgqovReqG05vyRCP3u2KO7JSAU6D3
+BM2QciW5rgcNHuBq17MpJCnd9IisKSVIV8Br+Lh05KILxlIJHdXRCdVsoeQTOKm
+YQ5L63+VUW66uZ/WTNZXjbu+2lyppm7oe1MMM5OkGNpaCTiGvjDih23Hl1BzgIW
M2/JNSzSE62GwINXPAgJbXxkpuXdLVuoYbTvX2xc1Nfje4XGBjYJRegW3qncNOXx
fshy7ZsRXmkz/w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 00:06:23 2026 by rpki-client