Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          9H5HfXPFaM7+pE3I9I3QRrACQIqyfDiNNev9e6HJBPM=
Subject key identifier:   DD:CD:5C:FF:DE:E9:05:7B:D3:F6:41:74:2B:CF:FC:D7:34:59:93:7C
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       01A0C5205ABF9A6851A9A89B77E51BAE9B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 18:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:26 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: 1hlVNV832AMX2SP1tkcIUbCRjFHgd9scEQYI1awGeec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:5a:bf:9a:68:51:a9:a8:9b:77:e5:1b:ae:9b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Sep 21 18:00:26 2026 GMT
            Not After : Sep 22 18:00:26 2026 GMT
        Subject: CN=ddcd5cffdee9057bd3f641742bcffcd73459937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:3e:07:25:3b:3f:b3:5d:a7:5a:46:4a:63:
                    1e:8b:b3:17:6d:38:1e:04:e2:23:fe:86:18:cb:24:
                    20:48:dd:1a:5e:13:17:2e:68:b5:62:a3:65:c6:02:
                    cd:2a:18:25:18:92:18:5f:19:c6:94:25:ca:63:7e:
                    02:bc:fc:01:cf:45:74:a4:af:1e:9b:03:88:be:e9:
                    42:5b:5a:9a:18:e1:ff:7f:91:63:8f:b0:9e:cb:4d:
                    3c:00:7c:3c:5d:c8:8a:15:0e:87:62:1e:53:b8:26:
                    fb:32:c0:61:c1:21:f0:b7:36:1b:cb:1a:86:f2:04:
                    cd:89:1f:97:c0:f1:37:40:cd:12:93:ec:55:83:d4:
                    ec:85:8e:d1:2d:32:76:6f:59:89:15:57:a7:14:7e:
                    fa:00:e2:41:af:b2:ca:7c:31:ee:ea:0f:b8:a1:3d:
                    ff:5d:a6:5f:e9:28:c9:9e:1d:7a:e3:14:70:bb:53:
                    a0:a2:1b:10:7e:70:07:08:a7:38:e4:cc:93:89:c7:
                    33:08:53:9a:b8:fa:c9:a5:34:90:00:99:4d:10:3e:
                    40:45:88:7b:80:36:16:2d:ee:28:45:00:cc:26:12:
                    3e:4e:05:34:99:1c:0a:72:71:49:8a:62:c9:7b:58:
                    f3:da:c4:46:c5:5e:d0:68:2c:22:7b:bf:84:be:28:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CD:5C:FF:DE:E9:05:7B:D3:F6:41:74:2B:CF:FC:D7:34:59:93:7C
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:66:52:70:97:ce:8a:c2:f4:46:15:27:80:61:b5:7d:80:59:
         90:0c:e6:e5:1f:34:50:df:4d:4f:84:4b:6e:36:ec:7b:eb:2a:
         fd:15:12:dd:5a:aa:23:db:76:97:6d:db:5e:1c:83:53:d4:66:
         cf:fb:4b:bb:4f:2b:d2:11:be:1c:51:46:e4:b6:ca:bf:39:e0:
         1f:4f:2d:d2:cc:6a:55:90:5c:c8:ce:a1:5c:96:9e:16:e6:3c:
         0d:c9:87:5c:d9:07:11:e7:9a:77:49:3a:de:b5:73:fe:db:df:
         83:4d:8f:7b:b5:c1:27:aa:3d:a1:20:df:9b:17:cc:d0:46:b0:
         28:80:14:20:6c:45:1f:6c:b2:cc:ca:e0:f6:02:e3:03:f9:f6:
         c1:28:2f:f7:2b:ab:c3:fc:17:e9:4b:7d:d4:48:7c:47:78:d0:
         e7:97:e0:e0:77:36:1e:e0:65:27:4f:e5:7d:37:15:a5:3b:13:
         6c:e0:d7:7c:68:f6:c2:a4:11:d8:7f:ff:a3:6f:81:8e:fb:db:
         6d:c1:4b:b5:08:d3:65:f4:bd:50:77:9a:53:77:f1:75:fe:0f:
         f8:bd:56:14:59:97:7b:1c:8f:74:5b:db:14:75:c5:ef:32:5f:
         48:f9:51:a8:f7:62:68:7a:91:56:22:57:23:93:e3:f4:31:42:
         c6:6a:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:07:48 2026 by rpki-client