Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          PqrgEa7rW3BiV6A+z7t44zC6f6ltBe9k2MOmM4ZUfxk=
Subject key identifier:   A2:24:E9:6F:6E:81:AA:1E:DC:C5:8B:83:33:FF:B7:2B:19:C7:3D:17
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       01A1287A9CFD3DA566EC1E305393BAC34631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0BE1
Signing time:             Sun 11 Oct 2026 01:01:26 +0000
Manifest this update:     Sun 11 Oct 2026 01:01:26 +0000
Manifest next update:     Mon 12 Oct 2026 01:01:26 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: S0Z-QG3S6OWhct2R_ZOJmi2BN2s.roa (hash: DcFFFIgBF5pA0VbXRYkO/MxP7tMxGBn3QzgWRQGPawY=)
                          6: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: c3UmlvPoK8ibH8ij1VX6J609WO8Bxo99GtOqyfESq4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:7a:9c:fd:3d:a5:66:ec:1e:30:53:93:ba:c3:46:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Oct 11 01:01:26 2026 GMT
            Not After : Oct 12 01:01:26 2026 GMT
        Subject: CN=a224e96f6e81aa1edcc58b8333ffb72b19c73d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:9f:12:16:76:2c:6b:bd:08:30:54:69:16:
                    44:58:57:f6:13:66:ac:e2:b3:f8:88:9c:f1:e1:a9:
                    f9:ea:49:10:04:60:81:92:7d:1f:90:a3:0d:e1:2c:
                    af:d7:04:ef:87:9d:8d:65:01:94:50:4a:a1:ae:02:
                    5e:c4:e3:85:0f:e2:cd:5b:bc:0e:ba:7b:f8:89:5a:
                    b0:5d:df:d3:0f:7a:47:75:81:59:39:0f:80:11:76:
                    c9:9a:43:64:e6:ee:96:bf:ad:8a:3f:4b:2d:1f:c5:
                    8f:08:ea:aa:86:20:10:c7:cc:c0:86:61:6c:f2:40:
                    5f:de:e1:a9:02:97:bf:35:c3:6b:33:6e:64:a6:bc:
                    36:ba:c1:bd:f7:af:ef:ca:2f:97:2b:c5:4a:96:25:
                    a0:b1:84:34:90:7f:63:7f:c8:7d:7c:e0:fa:76:da:
                    e5:a9:54:ef:7a:46:90:11:f2:45:86:d0:91:86:7c:
                    20:a1:ea:9f:57:06:c7:c9:af:c5:4d:bd:25:03:f3:
                    6d:b6:75:0b:82:5c:bf:61:be:47:eb:b4:cd:9a:12:
                    d1:37:57:29:94:92:ed:86:60:f8:74:2b:2d:8d:4d:
                    48:a9:9b:5e:3b:25:49:b5:01:b8:e0:cb:59:34:f1:
                    83:1a:94:9a:18:0f:53:57:bf:4b:22:e3:61:44:a7:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:E9:6F:6E:81:AA:1E:DC:C5:8B:83:33:FF:B7:2B:19:C7:3D:17
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:ca:a3:f8:c4:08:02:7e:cd:79:f9:21:d7:77:e4:d5:6a:
         4e:09:ac:f1:6e:4a:33:60:11:e3:74:5b:10:49:a3:cb:a0:30:
         7e:e2:65:30:9c:53:6a:13:67:41:36:c8:00:cb:74:5f:01:69:
         3a:8f:03:49:44:3e:36:3d:e4:45:98:ee:52:c0:87:29:f7:22:
         67:95:47:c5:91:28:7e:a3:74:c0:0b:c1:01:e4:e7:5e:9a:d3:
         73:57:1a:27:20:81:c7:fe:58:1b:ed:2f:ff:d8:fe:57:b3:bd:
         dc:c0:03:70:83:60:e3:04:49:b9:1a:7d:8b:d8:c9:c9:e5:d9:
         69:f1:65:b3:31:06:57:a4:08:1b:75:f6:d3:2e:f3:bf:c4:d1:
         99:7a:54:17:06:90:b8:9d:ff:17:a4:d6:64:7e:d5:e6:92:59:
         a1:f0:e7:ce:e6:0e:33:bb:6e:c2:8e:91:f8:72:65:80:2c:fb:
         4a:1b:ce:ed:10:54:f8:c0:e7:cf:08:11:fb:02:42:e6:83:30:
         37:a4:a4:63:6e:c3:95:fb:3a:c5:d0:ad:38:60:0d:c3:85:f4:
         f9:43:85:e2:39:c2:c4:71:fd:d9:ac:4d:d0:95:3e:0d:ad:2a:
         41:b3:3e:cd:9e:f9:1f:bb:2d:a9:3c:5e:1e:76:7f:3f:13:93:
         0e:73:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:21:25 2026 by rpki-client