Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
File:                     wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft (raw, json)
Hash identifier:          PyVXZrRrA3WKSwEXJdZk8OHTwDz9qfv4kDYNuxQOAXw=
Subject key identifier:   56:00:1B:F0:2F:D5:09:CB:88:8E:BC:BE:71:80:62:4C:4E:F5:4F:B7
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Certificate issuer:       /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial:       01A0BF8CA96A637BDC14D161C66DFCBE07CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
Manifest number:          09CC
Signing time:             Sun 20 Sep 2026 16:01:01 +0000
Manifest this update:     Sun 20 Sep 2026 16:01:01 +0000
Manifest next update:     Mon 21 Sep 2026 16:01:01 +0000
Files and hashes:         1: BB2LlqTkSDt6R-A2I5o2xTiWLGg.roa (hash: 3KwFp0oSjTOqtCDN/tEUzd0T9DjV6rBZs8n/Bn3wqig=)
                          2: M-Jfahql5ugvvElhhKuQeuGhKQw.roa (hash: wvtuws8x+AuQbQp9wg7laXNou0v+BgPwyoW058CYjjU=)
                          3: RmqG_F1xfWqy5Nqh3tjLTNSvky4.roa (hash: lcicyfsyL4VQBULs3NMmPjnbVYTaLaTLBS17H8EkLdE=)
                          4: wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl (hash: UgkG1dEX9UlBZpsdx52HmRtr2yHqNPonRzobIDs40xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:8c:a9:6a:63:7b:dc:14:d1:61:c6:6d:fc:be:07:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
        Validity
            Not Before: Sep 20 16:01:01 2026 GMT
            Not After : Sep 21 16:01:01 2026 GMT
        Subject: CN=56001bf02fd509cb888ebcbe7180624c4ef54fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:e2:31:ec:dd:c8:e3:eb:0d:d3:e3:3f:dd:
                    45:72:e3:e9:33:1d:1a:bd:65:e9:06:11:84:4f:ea:
                    3d:cb:28:0e:ac:44:7c:10:97:74:40:da:2b:bd:f5:
                    c6:1f:8d:b7:fb:ec:f4:44:42:6f:ca:7a:cb:08:1b:
                    fa:e6:dd:12:0e:a6:9d:77:77:85:5a:35:f3:5e:2a:
                    34:84:51:18:14:56:42:e9:5a:23:6e:dc:68:9e:20:
                    95:be:dc:10:8f:b2:a8:e2:41:93:ac:7b:7d:52:64:
                    13:8e:3f:c1:2a:86:6a:44:ee:55:e8:ee:6a:26:7e:
                    41:f8:e4:5f:2c:26:56:c8:ff:19:20:a1:37:45:41:
                    f5:41:ea:cb:96:58:2b:07:ef:c1:b4:bd:d2:f2:47:
                    13:8c:d6:40:ca:13:42:08:b0:30:0d:cc:5e:0a:c5:
                    48:67:7f:5e:36:70:84:69:10:cf:a3:67:6a:6b:ab:
                    ec:73:90:dd:e7:32:4e:cd:cf:b6:3b:1e:21:49:ee:
                    87:01:b4:0a:8d:ad:94:99:f8:75:74:8a:1d:97:57:
                    90:a9:8a:59:4a:bd:e4:8a:ce:91:50:cb:b0:80:84:
                    c5:89:eb:c1:9e:59:89:54:88:ea:ee:0c:4e:01:c0:
                    9c:8b:c3:9e:d3:5e:de:35:9a:f1:00:29:8c:33:70:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:1B:F0:2F:D5:09:CB:88:8E:BC:BE:71:80:62:4C:4E:F5:4F:B7
            X509v3 Authority Key Identifier:
                keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:13:e0:20:a8:c4:30:6f:fa:09:a7:06:01:bc:60:b0:e8:
         6a:68:b7:5c:3f:5e:43:8f:2f:4f:d1:c9:be:b6:29:25:d5:37:
         35:41:9b:19:7a:a4:fd:f3:cf:47:1a:c0:11:8b:3b:9c:b9:3f:
         b0:dd:b3:01:85:9e:b2:b9:3b:6e:e9:fa:c4:e1:3b:4f:8e:f0:
         3d:af:5a:9c:93:d6:02:b2:b0:e4:e4:27:96:36:b0:f7:ee:51:
         23:99:9f:9c:8d:30:4f:68:57:de:85:14:f5:56:ec:9f:f9:f7:
         92:e0:b8:7e:5c:d8:8c:1a:77:96:fd:0f:36:76:80:e7:ee:c8:
         fb:b0:ec:4f:38:d5:7b:b9:0a:4c:97:a9:1e:ef:06:ea:11:32:
         b1:7f:de:d3:ae:5c:55:05:ec:c5:06:1e:73:b3:23:84:2e:9f:
         af:43:b6:21:f7:57:21:8c:05:87:3f:ea:ca:7d:25:09:4c:2e:
         bb:e0:82:82:66:ed:0d:8b:47:78:93:a3:3c:71:57:3e:bf:aa:
         28:23:b3:11:b0:01:e8:26:02:58:42:94:31:b4:08:72:b4:e4:
         61:ed:a8:d1:96:bd:c2:4e:2f:85:fe:8b:85:dc:18:6a:b2:8e:
         46:f7:f6:d1:0d:c4:a3:be:da:ca:b2:50:67:68:68:8a:ae:cd:
         1e:17:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:32:01 2026 by rpki-client