Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File:                     wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier:          TaEn4IRE0oWPUmL0tV/GC6MPmgHiU9CuAyb44TuMb4c=
Subject key identifier:   2F:82:91:BD:E8:DD:73:AD:01:B6:E1:6A:4C:5C:2D:94:8D:A6:83:C3
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer:       /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial:       01A0BFFA2DE029C0727222B3823AD41E768A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number:          1689
Signing time:             Sun 20 Sep 2026 18:00:39 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:39 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:39 +0000
Files and hashes:         1: T4jsL7kwRbLlNaXve_3W_32hFoM.roa (hash: FJOo/HtzqljN7o0xBJy+iby2rmXafKenU6CHkQkrrDo=)
                          2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: U5kkXiRDQvO4UXPOmpKcJ78VkkgES+xsfg3MpTp7rI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:fa:2d:e0:29:c0:72:72:22:b3:82:3a:d4:1e:76:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
        Validity
            Not Before: Sep 20 18:00:39 2026 GMT
            Not After : Sep 21 18:00:39 2026 GMT
        Subject: CN=2f8291bde8dd73ad01b6e16a4c5c2d948da683c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:72:d8:54:dc:de:ae:7d:38:6c:8d:a2:64:
                    03:b1:0d:ee:18:6e:ea:b0:95:e5:40:cc:b7:08:d7:
                    79:db:a0:62:b1:cc:50:a7:54:90:5a:14:92:b4:8c:
                    c7:c9:3c:c1:49:aa:ea:b5:eb:a9:3d:0b:ed:56:ef:
                    e7:66:fa:37:f4:32:a9:b2:52:da:a2:0f:6e:fb:1e:
                    76:a0:0e:f6:e3:d6:59:0d:fc:2c:06:3a:ba:04:f3:
                    ae:4b:3a:6e:e4:00:98:ac:91:4c:b4:62:ed:ea:27:
                    34:09:e7:60:52:72:56:1f:ee:8c:ab:d6:fa:de:79:
                    ea:69:b6:0f:3b:d4:cf:74:98:cc:d8:fd:b3:c3:1d:
                    cc:b7:8e:b9:c6:a6:79:05:e5:0d:d4:81:68:1f:ef:
                    e5:3c:e1:f5:2b:58:b7:e9:46:5b:68:4c:a5:05:07:
                    82:3c:d0:16:62:d7:45:c4:cd:d7:9e:49:2d:2c:62:
                    91:42:78:be:fe:6e:a2:ba:17:6e:f6:0f:9f:e4:bb:
                    4b:bb:35:57:65:09:b4:79:14:fd:6a:f5:70:30:9b:
                    f1:9f:d0:e0:4c:75:49:8b:48:0c:7c:17:42:d3:e7:
                    72:d2:60:a7:87:3a:2b:ea:f4:e0:ec:d7:c5:24:cd:
                    8f:ac:36:a7:b8:72:9e:eb:d7:c1:dc:ee:91:dc:7a:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:82:91:BD:E8:DD:73:AD:01:B6:E1:6A:4C:5C:2D:94:8D:A6:83:C3
            X509v3 Authority Key Identifier:
                keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:43:db:25:07:e6:91:ad:1e:9b:99:9e:fe:b1:17:af:f5:
         bd:25:cc:17:31:57:85:46:60:89:59:f7:9d:60:4b:7f:e1:19:
         00:be:a8:8c:d6:66:60:1f:8c:a6:54:65:6f:77:2a:28:a8:8d:
         99:b1:dc:51:b0:4f:65:c2:68:1f:d4:3d:6a:ab:0d:ac:ee:21:
         92:f1:79:70:19:d6:de:5c:1f:cc:59:3e:bb:c4:05:49:fd:dc:
         87:f3:94:99:28:d9:52:e4:07:1c:27:73:5d:9d:55:05:15:9d:
         7f:45:89:c7:be:ed:d2:ae:cd:05:c7:d0:ef:29:c7:14:fc:bb:
         b7:5c:43:c1:88:db:9e:7c:b7:26:3f:f5:a3:b0:09:10:68:df:
         f8:04:4a:72:6a:cc:9a:cf:de:cc:e4:a9:f9:48:b0:8c:5c:7b:
         69:05:6a:46:88:36:32:60:33:61:d2:67:04:3c:94:ec:0d:cb:
         16:f2:08:cd:f9:76:9e:dc:38:55:91:f5:f8:b7:e2:e3:d0:ce:
         68:80:1c:e9:2b:88:a5:23:c9:b0:ff:f6:3e:78:06:ed:b9:97:
         56:57:cb:20:b0:7e:5b:8f:57:ec:2d:a6:4a:fd:eb:69:a7:7d:
         10:41:b0:4a:75:ee:48:b8:07:eb:31:b7:28:66:f2:79:6e:c7:
         a8:50:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:57:38 2026 by rpki-client