Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          g1PEmMvET6VdEfeHZgGouwW8G+u6f/jThV4B9kiEiXI=
Subject key identifier:   39:29:9F:AC:D1:61:38:2A:E5:3A:25:A8:61:B9:C8:F8:02:D5:30:AF
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       01A12165C99C16F450D2F71E77C9571A2727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          1A9C
Signing time:             Fri 09 Oct 2026 16:01:21 +0000
Manifest this update:     Fri 09 Oct 2026 16:01:21 +0000
Manifest next update:     Sat 10 Oct 2026 16:01:21 +0000
Files and hashes:         1: JiU1EdEKZye0cxeHn7IP-JcaXgY.roa (hash: zxLJaiefCKz54L2xeBeMXIAOh05SFYWOpXptg0IbHvw=)
                          2: Op3C_DnavVNe5k2EbCgyLm3qT1Q.roa (hash: I1NgmN+EF7WGvinMVFhL0bUgaYpjS0PDMn8hXRrpPiY=)
                          3: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: mNhinuhMy/Op7b7lNtivaOvzum94Q/mVfBiCrC89Pfc=)
                          4: jBNc2MW8DhC9H1qn8-QUDhR0rD0.roa (hash: ZPkJWGkBrHokbfgKinCVErvUSmXlIXedqOUHsLmoVy4=)
                          5: kh30KvylNHx5L2vYGK36_zRkWbs.roa (hash: ruT9Z0PTwEt0f+MnWu+6fvsLihP67BQHf56kXhj/oMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:65:c9:9c:16:f4:50:d2:f7:1e:77:c9:57:1a:27:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Oct  9 16:01:21 2026 GMT
            Not After : Oct 10 16:01:21 2026 GMT
        Subject: CN=39299facd161382ae53a25a861b9c8f802d530af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:dc:ea:95:98:36:23:c5:e5:4b:46:96:38:
                    06:f7:56:18:ac:70:36:0d:aa:f9:31:59:37:36:a6:
                    3c:a3:bf:f2:24:2c:32:71:16:20:14:97:91:d9:15:
                    c6:9b:25:c4:c3:63:84:c7:60:44:1b:7c:86:4a:70:
                    28:aa:08:67:95:ee:43:b4:4f:c6:d2:43:1e:ee:d0:
                    08:18:49:2f:25:21:6b:6a:1e:bc:56:23:6a:e0:db:
                    c2:a6:70:ef:4f:d5:1e:fe:18:6c:0b:c4:3d:22:47:
                    4c:ee:61:a3:fd:c6:f8:fc:85:6b:0c:72:db:97:0c:
                    89:ec:1d:8a:cf:e4:b0:03:79:e0:fa:70:36:0e:f8:
                    30:ca:a2:5d:cc:ae:f1:93:51:ad:a0:15:7e:87:a2:
                    1a:18:87:b5:75:68:4a:f3:33:d9:b0:19:24:9f:4c:
                    54:12:c3:c8:ac:a6:3d:6b:99:fd:05:f3:01:d7:fb:
                    e4:4e:73:e1:75:32:a5:9c:0b:6f:e4:05:48:6f:ea:
                    ab:69:4c:31:62:2b:92:71:3c:e6:7d:b2:5f:ef:28:
                    d4:f6:2b:b7:c6:e6:45:d8:80:96:c9:66:d1:5d:7a:
                    02:cf:17:bd:5f:0d:07:94:ce:e6:4f:97:80:44:34:
                    c1:b6:48:bf:4f:17:34:55:89:a1:88:40:3b:58:c4:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:29:9F:AC:D1:61:38:2A:E5:3A:25:A8:61:B9:C8:F8:02:D5:30:AF
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:72:ab:3e:58:e6:8b:47:30:1f:9c:74:cc:66:13:cf:8c:72:
         bd:bb:db:a6:9c:86:e9:00:14:58:25:fc:dc:6f:f9:99:3b:33:
         84:5c:38:88:70:89:23:6b:68:5c:e1:9e:40:82:4f:8c:e8:4f:
         02:d6:cd:a0:68:5c:b3:d0:6d:1c:de:e9:ff:20:14:83:0f:d1:
         44:87:c5:ae:0f:80:9b:3c:75:49:ac:83:9a:6a:cc:16:8e:d5:
         77:24:9b:a6:51:5a:c3:56:69:48:ff:b7:09:d5:02:65:bd:05:
         31:42:56:bd:60:5f:3c:a7:43:0a:a9:d3:d1:d4:83:b1:a1:4e:
         3c:14:ec:7f:05:b0:fa:32:e9:ad:68:2e:8e:9a:4c:ce:d4:8b:
         f2:d5:46:49:5d:12:cf:c9:92:5a:21:61:a9:4b:a7:83:b0:57:
         12:ee:9a:92:df:bf:1c:6e:c5:7f:e3:79:db:b1:5e:7c:06:c4:
         85:fb:47:ac:91:6d:39:01:dd:7a:23:ad:54:16:c4:dd:1d:0d:
         ef:bb:07:ac:e2:ef:49:d0:b1:df:04:11:f3:7a:89:00:db:08:
         21:c2:ba:78:5b:0d:bb:8f:d2:d7:6d:ea:7c:cd:5d:15:79:bf:
         32:3e:f5:8b:91:1e:a8:74:f0:68:bf:2c:cf:d1:07:a2:76:73:
         11:c3:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:57:10 2026 by rpki-client