Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
File:                     wxnuerHO5AZ2b7iNAMdLgds6GV4.mft (raw, json)
Hash identifier:          NDdSa+ZLERIPpX9b5VBu80OUvmVaTOb3zErFm3kyinM=
Subject key identifier:   26:CF:B7:2B:42:CD:BC:AE:0B:05:FE:E2:01:8A:F8:1D:94:93:46:68
Authority key identifier: C3:19:EE:7A:B1:CE:E4:06:76:6F:B8:8D:00:C7:4B:81:DB:3A:19:5E
Certificate issuer:       /CN=c319ee7ab1cee406766fb88d00c74b81db3a195e
Certificate serial:       01A12B446C2E2EFB18828927D3C54B54F887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
Manifest number:          40
Signing time:             Sun 11 Oct 2026 14:01:06 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:06 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:06 +0000
Files and hashes:         1: rzdIO2OXr8tsFJeaYCu7d4gHu20.asa (hash: XYBVQtAgzd2CRZDKGPsc0cHFoK5RdDZS1cD9OQQcREA=)
                          2: wxnuerHO5AZ2b7iNAMdLgds6GV4.crl (hash: XxVr/CI63zoHzhmnowQeWKu+c5nYSkK40Bk+BmVTpQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:6c:2e:2e:fb:18:82:89:27:d3:c5:4b:54:f8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319ee7ab1cee406766fb88d00c74b81db3a195e
        Validity
            Not Before: Oct 11 14:01:06 2026 GMT
            Not After : Oct 12 14:01:06 2026 GMT
        Subject: CN=26cfb72b42cdbcae0b05fee2018af81d94934668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:f3:cc:40:ad:0c:5b:07:88:2d:8a:53:5c:
                    28:07:3a:cd:cb:17:02:fb:1a:10:0b:33:3c:ef:a9:
                    7c:8d:05:f7:24:1f:4d:89:45:97:e1:91:2c:47:97:
                    8e:5a:90:27:7f:86:4d:a7:27:b2:b0:7f:ed:26:80:
                    0a:f4:58:e8:71:96:4c:01:0b:13:cc:f9:7f:48:19:
                    3b:ba:2b:22:e0:e0:95:b5:ae:4b:75:65:9c:92:55:
                    ef:4b:b9:de:7d:ac:33:d9:21:f3:46:5d:10:ee:7c:
                    63:b9:b1:7a:78:5c:dd:9d:e2:2a:36:2b:0a:e4:0e:
                    90:6d:48:b4:26:d5:c1:0f:44:0f:04:5c:40:a3:2d:
                    02:9b:f0:d8:20:14:c9:4e:89:93:52:8b:40:ab:ad:
                    5f:28:0b:c3:0f:56:93:30:dc:82:ab:35:13:41:7b:
                    4e:ff:d7:0f:2d:e5:b1:79:e4:7f:19:95:79:36:35:
                    bf:c0:86:f2:27:45:b5:eb:d8:66:1c:ed:07:c7:20:
                    5e:75:46:d3:74:42:b7:50:c6:43:ec:49:41:1d:47:
                    fe:11:71:2a:60:32:03:ae:64:25:2e:3a:56:e1:ff:
                    3a:e0:58:0b:20:ef:9f:27:eb:e3:dc:6f:cd:6d:b0:
                    ca:6b:e7:f8:7e:65:9e:26:2a:24:a7:e9:5e:ae:c5:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:B7:2B:42:CD:BC:AE:0B:05:FE:E2:01:8A:F8:1D:94:93:46:68
            X509v3 Authority Key Identifier:
                keyid:C3:19:EE:7A:B1:CE:E4:06:76:6F:B8:8D:00:C7:4B:81:DB:3A:19:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:3b:42:b4:fe:48:ca:bd:d7:6b:e7:5f:17:e5:bc:65:b9:
         a0:ee:9a:6b:3a:cb:4b:95:59:10:8c:ba:1c:de:29:41:e4:ad:
         1e:05:b3:41:84:c8:f6:2c:ce:40:36:88:8b:74:83:d7:4d:e1:
         9d:9f:e5:7f:33:7c:f4:83:b3:34:1a:7b:62:9f:0e:16:02:af:
         21:3c:e0:0d:ec:80:8f:e8:06:76:c9:cd:6a:53:df:4e:eb:94:
         b5:c8:28:3c:a2:7e:fd:5a:e3:db:21:01:5e:17:fb:a1:4a:5d:
         48:7c:c8:56:c4:8f:dc:e9:f8:b1:46:7d:9d:d4:14:e4:6d:66:
         47:6d:1b:0f:c0:97:fa:cb:44:18:01:90:bd:82:c4:c2:a0:81:
         94:29:ad:9e:9f:6e:92:5e:1a:0c:25:6d:c1:ab:cf:a1:e8:ab:
         fb:1a:14:ed:56:52:a0:86:b8:1f:79:a1:be:ec:ba:59:71:ad:
         85:43:a7:56:96:8e:5b:00:5b:56:b3:15:c9:29:af:a9:a9:05:
         e5:7e:60:00:c0:55:92:46:47:23:fb:6f:e3:d0:c0:8d:84:e1:
         2f:42:e6:3b:f4:ee:19:a0:dd:ee:b3:af:c0:2e:55:01:12:b7:
         c5:c7:80:1b:c9:18:29:4e:88:00:fc:0c:f6:8e:c9:82:9e:c8:
         33:5e:19:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRGwuLvsYgokn08VLVPiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMTllZTdhYjFjZWU0MDY3NjZmYjg4ZDAwYzc0YjgxZGIz
YTE5NWUwHhcNMjYxMDExMTQwMTA2WhcNMjYxMDEyMTQwMTA2WjAzMTEwLwYDVQQD
EygyNmNmYjcyYjQyY2RiY2FlMGIwNWZlZTIwMThhZjgxZDk0OTM0NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5rzzECtDFsHiC2KU1woBzrNyxcC
+xoQCzM876l8jQX3JB9NiUWX4ZEsR5eOWpAnf4ZNpyeysH/tJoAK9FjocZZMAQsT
zPl/SBk7uisi4OCVta5LdWWcklXvS7nefawz2SHzRl0Q7nxjubF6eFzdneIqNisK
5A6QbUi0JtXBD0QPBFxAoy0Cm/DYIBTJTomTUotAq61fKAvDD1aTMNyCqzUTQXtO
/9cPLeWxeeR/GZV5NjW/wIbyJ0W169hmHO0HxyBedUbTdEK3UMZD7ElBHUf+EXEq
YDIDrmQlLjpW4f864FgLIO+fJ+vj3G/NbbDKa+f4fmWeJiokp+lersWn4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbPtytCzbyuCwX+4gGK+B2Uk0ZoMB8GA1UdIwQY
MBaAFMMZ7nqxzuQGdm+4jQDHS4HbOhleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3hudWVySE81QVoyYjdpTkFNZExnZHM2R1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82NDYxNTgtOTU3OC00MzA0LTlmYjYt
ZjdjMjQ1YTZjMjFhLzEvd3hudWVySE81QVoyYjdpTkFNZExnZHM2R1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82NDYxNTgtOTU3OC00MzA0LTlmYjYtZjdjMjQ1YTZjMjFh
LzEvd3hudWVySE81QVoyYjdpTkFNZExnZHM2R1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBM7QrT+
SMq912vnXxflvGW5oO6aazrLS5VZEIy6HN4pQeStHgWzQYTI9izOQDaIi3SD103h
nZ/lfzN89IOzNBp7Yp8OFgKvITzgDeyAj+gGdsnNalPfTuuUtcgoPKJ+/Vrj2yEB
Xhf7oUpdSHzIVsSP3On4sUZ9ndQU5G1mR20bD8CX+stEGAGQvYLEwqCBlCmtnp9u
kl4aDCVtwavPoeir+xoU7VZSoIa4H3mhvuy6WXGthUOnVpaOWwBbVrMVySmvqakF
5X5gAMBVkkZHI/tv49DAjYThL0LmO/TuGaDd7rOvwC5VARK3xceAG8kYKU6IAPwM
9o7Jgp7IM14Zrw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:09:13 2026 by rpki-client