Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File:                     wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier:          JP/qdVrPNZAB8A1UnX93/LzJobUSv4jifWwwaEvXWZc=
Subject key identifier:   7D:A1:2C:17:D1:B3:21:28:D3:30:F8:3D:21:9F:AF:81:82:E1:A0:99
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer:       /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial:       01A1C4794CD3D2E3C979233B3673EE5E50B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number:          1AEA
Signing time:             Tue 10 Nov 2026 08:00:46 +0000
Manifest this update:     Tue 10 Nov 2026 08:00:46 +0000
Manifest next update:     Wed 11 Nov 2026 08:00:46 +0000
Files and hashes:         1: CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa (hash: ZsAGggLHZ5c9tfsaL3W8Tzgr18wNOwRPUVw/KIp0Zec=)
                          2: UTrB-eqS9W6US57i4mIaxwF_LT4.roa (hash: /qJvylYZag2Wv3AD9lsMVc7eYv0lH1eOQvu0T60dUUc=)
                          3: neQNKLpCfakNl9D-xr1vgggjRHw.roa (hash: fXE9P5Vbl/ZNMcrpupVcZ1b+IXnjJzLD2Jyf3B1lxGU=)
                          4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: J0Afh7wnVxR6Ca8JRtJZa8nCi/eMuXPe1d6HV6tMuV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:79:4c:d3:d2:e3:c9:79:23:3b:36:73:ee:5e:50:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
        Validity
            Not Before: Nov 10 08:00:46 2026 GMT
            Not After : Nov 11 08:00:46 2026 GMT
        Subject: CN=7da12c17d1b32128d330f83d219faf8182e1a099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:3a:c0:64:02:1c:60:56:43:f8:4a:a8:49:
                    87:f6:fd:46:c9:ca:56:69:28:cd:20:22:fe:9c:31:
                    74:55:36:76:07:49:0d:cd:3d:35:b1:cf:92:28:34:
                    bc:0a:b8:8d:9a:30:70:21:9c:87:07:4d:84:0d:88:
                    8c:21:55:e5:1e:96:87:54:4e:e7:fd:dc:e2:35:a2:
                    67:46:3a:f9:5f:8a:6d:0a:c7:55:48:03:8c:17:71:
                    85:63:28:0a:68:c3:85:e0:34:a7:39:ca:0e:eb:af:
                    32:49:1e:97:cf:9c:7a:dd:76:d6:e3:4d:d5:eb:9d:
                    18:98:20:ef:54:30:e2:66:a8:87:df:bc:47:2a:93:
                    9f:44:ec:db:85:9f:6f:66:70:e7:92:62:f9:cc:1c:
                    63:a7:c5:90:2b:13:1a:a0:4a:44:6a:01:b1:77:3e:
                    eb:57:aa:7a:b6:f0:41:e4:35:36:6e:7d:84:9e:5f:
                    68:ce:bf:3f:bd:c8:a7:0e:d1:7f:d2:5d:41:37:93:
                    7d:ff:e6:dc:da:f2:bd:93:bb:0f:d7:b3:b6:07:58:
                    dc:64:5f:45:62:91:ba:d1:ed:08:23:b1:e4:81:4a:
                    5e:d4:b5:dd:4f:06:37:54:9b:05:bc:5d:50:7a:da:
                    37:2a:e7:0a:9b:b3:03:76:7d:65:0e:e0:3e:ec:cc:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A1:2C:17:D1:B3:21:28:D3:30:F8:3D:21:9F:AF:81:82:E1:A0:99
            X509v3 Authority Key Identifier:
                keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:4d:62:da:dd:57:5a:e7:3c:bd:7d:8c:a6:f5:3e:d3:b8:
         66:c6:28:15:33:ba:de:e2:0d:84:6f:73:b0:30:9e:8f:4e:d6:
         d1:fc:28:8d:c6:a7:50:16:fe:18:49:5d:9d:4d:15:29:80:5f:
         9f:ce:4e:6f:5b:15:41:ff:ac:0e:7e:80:d4:2b:8d:4c:c7:ae:
         5f:1e:0f:f3:b5:d6:9f:af:c3:f6:d9:e4:36:02:ec:0b:6d:d9:
         85:1a:61:fa:b3:c1:39:c8:cb:d0:92:6d:53:e6:e0:2c:d5:1a:
         3b:53:50:1f:54:aa:7d:6c:83:b9:33:b6:22:80:79:cc:9a:6c:
         6f:6b:6a:a6:15:aa:8d:2b:9a:2e:9a:63:5e:8c:d3:97:49:97:
         55:a3:db:4f:4d:3c:c2:6a:dc:9b:14:c9:91:39:21:d4:36:54:
         0f:99:8e:f9:55:c0:95:16:4c:e2:ff:37:fb:ef:4f:c5:a6:74:
         9c:b2:3b:20:bf:86:87:5c:4c:35:77:cc:e9:6a:1c:8d:f2:f4:
         a2:f6:52:6c:52:d8:41:5c:af:a4:a7:35:7d:98:6a:42:a0:c8:
         4f:5a:9e:d2:7a:9c:ce:44:50:8b:b9:c3:9f:90:a4:86:2a:26:
         2b:03:58:96:7a:e7:69:ad:5f:e1:01:0b:20:cc:d1:05:a9:f3:
         44:b1:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:08:35 2026 by rpki-client