Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.mft
File:                     wC_lRa_N2x4WkLL_hOinmPWp-y4.mft (raw, json)
Hash identifier:          RkFx+9d51Hv+bQ1uiGXs0Ba/zZpHN56CIS8bb/2ul9w=
Subject key identifier:   B3:4B:80:43:43:0A:1F:0C:1A:C8:E3:05:90:D3:7B:BA:68:23:7C:46
Authority key identifier: C0:2F:E5:45:AF:CD:DB:1E:16:90:B2:FF:84:E8:A7:98:F5:A9:FB:2E
Certificate issuer:       /CN=c02fe545afcddb1e1690b2ff84e8a798f5a9fb2e
Certificate serial:       01A14014B06D97952F453B4995DB76D37D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC_lRa_N2x4WkLL_hOinmPWp-y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.mft
Manifest number:          011F
Signing time:             Thu 15 Oct 2026 15:01:00 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:00 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:00 +0000
Files and hashes:         1: ICHDtFpI4vWV4cVTKGm5wN7r-QM.roa (hash: fMljpn2lrUVr1wsjQKKChjoAlG7wIJBwuX2U7qX0fOA=)
                          2: wC_lRa_N2x4WkLL_hOinmPWp-y4.crl (hash: AHf+G520osFL7k7Gt5WsD/GVew1RNnI4LvuIFO5iRa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC_lRa_N2x4WkLL_hOinmPWp-y4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:14:b0:6d:97:95:2f:45:3b:49:95:db:76:d3:7d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02fe545afcddb1e1690b2ff84e8a798f5a9fb2e
        Validity
            Not Before: Oct 15 15:01:00 2026 GMT
            Not After : Oct 16 15:01:00 2026 GMT
        Subject: CN=b34b8043430a1f0c1ac8e30590d37bba68237c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:93:fa:7a:7c:61:61:12:56:9a:6f:63:27:
                    7d:25:71:5e:2c:95:f1:2d:b6:18:a0:be:be:8f:8d:
                    7e:a0:41:d3:44:f1:5c:e0:e2:bd:bc:32:a2:c7:33:
                    41:81:63:e3:fd:40:9a:25:ae:4a:70:c7:33:e1:12:
                    5f:70:86:75:6b:65:c4:cf:7d:2a:2e:c3:82:41:f8:
                    1f:57:d0:2e:28:ed:71:08:5f:07:99:cb:36:c5:8e:
                    77:22:6c:8d:c0:b4:e4:ff:cd:80:79:27:75:ff:4e:
                    28:ab:1e:36:1f:9f:e8:7d:85:08:51:b6:78:97:9c:
                    94:ff:a5:e3:70:ff:1b:4d:5b:a7:9c:a3:1c:b5:71:
                    37:62:06:1d:a2:de:39:b4:dd:3d:7d:95:6d:ba:22:
                    ec:1e:67:47:7a:03:6a:5f:ce:0d:97:82:c7:28:3d:
                    85:be:53:92:1b:6e:93:de:ea:b6:3c:3b:ef:bd:5b:
                    ef:fb:17:6d:6e:aa:11:99:5f:cc:f6:d5:c6:f9:38:
                    05:f0:fb:bf:05:d8:56:66:10:a6:f2:5b:28:e6:12:
                    39:c6:05:95:52:5b:38:51:c6:77:1b:e2:43:5a:28:
                    10:85:df:a4:cb:ab:d7:99:33:16:b2:a6:1e:50:43:
                    f2:49:a5:67:0d:29:d9:5c:99:11:24:d9:3d:16:ae:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4B:80:43:43:0A:1F:0C:1A:C8:E3:05:90:D3:7B:BA:68:23:7C:46
            X509v3 Authority Key Identifier:
                keyid:C0:2F:E5:45:AF:CD:DB:1E:16:90:B2:FF:84:E8:A7:98:F5:A9:FB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC_lRa_N2x4WkLL_hOinmPWp-y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:0c:c0:42:86:a2:b2:85:df:db:b3:98:8f:1f:f7:16:cd:
         3c:c9:0a:cc:41:aa:52:56:61:46:b9:d5:ec:fa:00:1c:41:b3:
         de:c4:26:fc:8b:d0:fa:05:c1:a8:44:c2:da:a8:a1:d8:90:5d:
         b9:c7:b1:ed:be:f3:bd:b8:1e:d5:36:dc:8e:c9:77:90:41:aa:
         3a:2a:b0:62:01:2b:0f:2a:96:9d:6e:78:0b:ac:a3:b2:e3:f3:
         4c:4c:4f:5b:53:b2:d6:08:7f:67:30:5f:cd:4b:45:3e:47:17:
         2c:aa:dc:fa:38:da:e0:90:3e:4d:ec:85:06:17:71:3e:0f:ae:
         59:89:94:09:4d:49:8e:ca:9f:28:ad:86:cc:47:b4:31:5e:ef:
         fe:a9:af:f8:32:1b:eb:54:5c:78:1a:5d:e4:3a:b8:2c:1d:dd:
         70:b6:45:de:e9:cf:7f:b0:97:d7:9a:74:2a:a3:41:8f:ee:88:
         52:34:9c:6e:cd:06:6b:a9:00:09:9b:df:d1:b8:77:00:45:89:
         5a:60:db:9e:45:83:6c:50:35:21:18:13:86:01:31:ad:21:d2:
         d2:36:59:7c:c2:bc:34:b3:95:73:5c:53:9f:ba:24:72:bd:bc:
         c0:1c:57:2a:75:e1:99:3e:f6:52:d5:3b:03:6e:72:5e:a9:c1:
         b3:f7:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:08:20 2026 by rpki-client