Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          lGddG88GMTfeZw1JKcFCvXRPf/cpvIl3f/ypb3S+HoU=
Subject key identifier:   16:B6:A6:65:56:8A:DD:BB:AB:6E:6E:BE:D4:6F:BB:D9:4E:DA:36:18
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       01A1219CB7CAE2AF63E886960039E8E6CF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          128E
Signing time:             Fri 09 Oct 2026 17:01:20 +0000
Manifest this update:     Fri 09 Oct 2026 17:01:20 +0000
Manifest next update:     Sat 10 Oct 2026 17:01:20 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: 868SV09rSa1B/lOZWX0jWJGskF6+MHHswX2ybVEfb6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:9c:b7:ca:e2:af:63:e8:86:96:00:39:e8:e6:cf:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Oct  9 17:01:20 2026 GMT
            Not After : Oct 10 17:01:20 2026 GMT
        Subject: CN=16b6a665568addbbab6e6ebed46fbbd94eda3618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:29:14:bb:32:78:90:3d:0c:b5:51:05:f5:
                    10:e0:82:a0:f3:62:75:4b:1f:f2:a9:28:3b:54:fb:
                    d4:6a:ba:1f:59:e8:2e:f6:1b:87:cd:bc:d7:ab:94:
                    ce:b4:9c:94:aa:44:25:44:ef:85:e9:a1:65:08:d9:
                    68:82:30:e3:54:82:68:b0:be:f7:39:cf:d7:82:1c:
                    2f:b2:80:92:61:5e:6a:31:99:90:f6:38:34:85:84:
                    a0:09:f7:da:7e:4d:18:c0:0e:11:6e:cb:ca:0d:3b:
                    eb:f7:a0:2a:0e:7c:8c:a5:5b:9f:b5:2a:78:e6:72:
                    9c:0a:4b:be:27:42:fa:91:10:26:b6:3c:16:2a:0c:
                    c7:15:80:5b:a7:a1:d7:8e:f6:b8:14:e8:78:58:21:
                    8e:0a:73:10:90:78:26:98:48:08:8e:75:3a:37:5f:
                    6b:ab:08:69:47:7e:f6:92:a7:36:0e:7c:b9:79:2e:
                    d2:57:be:52:a8:c5:11:46:b8:2f:cf:03:70:9b:55:
                    9b:79:37:1f:bd:60:52:cb:68:dc:c9:ef:2b:42:a6:
                    6e:78:de:8b:b3:c7:d2:c8:16:3b:3a:b8:f2:b1:f7:
                    8a:59:b5:36:58:c1:96:b9:23:69:65:08:89:ad:66:
                    9f:6e:34:95:4b:e8:71:f0:75:67:d5:6f:b8:ae:32:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B6:A6:65:56:8A:DD:BB:AB:6E:6E:BE:D4:6F:BB:D9:4E:DA:36:18
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:13:9e:43:9d:3d:38:71:ab:30:13:96:96:d6:11:52:93:
         34:d9:83:a7:aa:9e:95:ed:5e:9a:e7:6b:80:c3:c2:39:27:3c:
         9e:00:cb:05:4b:63:f3:56:6c:34:30:5d:9a:73:f0:45:44:43:
         02:89:8e:e5:aa:9e:31:9d:70:0e:f4:ea:cc:b7:b0:66:e8:a8:
         ec:10:bc:a6:ee:87:6b:9c:89:b1:fc:28:f3:ec:c4:d7:88:9e:
         c5:b8:d3:8e:88:15:44:29:8e:76:88:9b:fe:4d:3c:00:70:8e:
         d8:11:d8:59:e6:13:37:a6:a4:3a:f6:24:ba:1e:b0:f6:d6:cf:
         1b:ad:03:03:6a:b3:e4:6f:08:1f:e7:65:41:29:4e:ea:6a:d6:
         87:11:5d:f2:91:f3:16:71:eb:32:c6:2e:c6:71:48:37:7e:ee:
         f1:8c:52:db:aa:6a:b1:ab:30:f8:e3:74:60:ba:6b:ea:f9:72:
         4e:3d:c1:9f:da:5f:33:0e:28:6e:2c:c0:46:f0:f8:42:fc:c5:
         53:50:05:92:33:a0:f7:87:9c:95:95:3b:ee:78:f9:d9:58:a1:
         19:9b:27:6c:38:f6:68:9e:20:86:f8:72:0b:3c:d6:e3:30:f6:
         c9:97:58:1c:04:da:db:a9:5c:59:44:b2:8b:88:96:7b:14:d8:
         9c:79:44:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhnLfK4q9j6IaWADno5s8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj
NGFkODQwHhcNMjYxMDA5MTcwMTIwWhcNMjYxMDEwMTcwMTIwWjAzMTEwLwYDVQQD
EygxNmI2YTY2NTU2OGFkZGJiYWI2ZTZlYmVkNDZmYmJkOTRlZGEzNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgkpFLsyeJA9DLVRBfUQ4IKg82J1
Sx/yqSg7VPvUarofWegu9huHzbzXq5TOtJyUqkQlRO+F6aFlCNlogjDjVIJosL73
Oc/XghwvsoCSYV5qMZmQ9jg0hYSgCffafk0YwA4RbsvKDTvr96AqDnyMpVuftSp4
5nKcCku+J0L6kRAmtjwWKgzHFYBbp6HXjva4FOh4WCGOCnMQkHgmmEgIjnU6N19r
qwhpR372kqc2Dny5eS7SV75SqMURRrgvzwNwm1WbeTcfvWBSy2jcye8rQqZueN6L
s8fSyBY7OrjysfeKWbU2WMGWuSNpZQiJrWafbjSVS+hx8HVn1W+4rjJvjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa2pmVWit27q25uvtRvu9lO2jYYMB8GA1UdIwQY
MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt
ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1
LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfUTnkOd
PThxqzATlpbWEVKTNNmDp6qele1emudrgMPCOSc8ngDLBUtj81ZsNDBdmnPwRURD
AomO5aqeMZ1wDvTqzLewZuio7BC8pu6Ha5yJsfwo8+zE14iexbjTjogVRCmOdoib
/k08AHCO2BHYWeYTN6akOvYkuh6w9tbPG60DA2qz5G8IH+dlQSlO6mrWhxFd8pHz
FnHrMsYuxnFIN37u8YxS26pqsasw+ON0YLpr6vlyTj3Bn9pfMw4obizARvD4QvzF
U1AFkjOg94eclZU77nj52VihGZsnbDj2aJ4ghvhyCzzW4zD2yZdYHATa26lcWUSy
i4iWexTYnHlEzA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:26:53 2026 by rpki-client