Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier:          WRzg5gGPw0FMUUf6bRgdM3utXSyiNEQ4+iq/DtvY55E=
Subject key identifier:   31:25:33:12:10:F9:AC:34:4C:D9:AA:44:BD:A2:F6:FD:74:B8:C4:70
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       01A0BDD469AB8AF4EEF2B6B890238EA3096D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number:          05CF
Signing time:             Sun 20 Sep 2026 08:00:09 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:09 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:09 +0000
Files and hashes:         1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: BQuQaGyJFWSO9+fS7dIMeILepdOxnDowwosmngXoo4k=)
                          2: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
                          3: ps1esgrNwALs0rprEq1u_73GPvQ.asa (hash: FGyORXilz5BNYLMmlVd29mT3+yukVGqZlvtshiP/w0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:69:ab:8a:f4:ee:f2:b6:b8:90:23:8e:a3:09:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Sep 20 08:00:09 2026 GMT
            Not After : Sep 21 08:00:09 2026 GMT
        Subject: CN=3125331210f9ac344cd9aa44bda2f6fd74b8c470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:06:8e:05:26:f8:34:49:61:cd:e5:8f:25:
                    2a:ce:2e:af:d3:be:0b:df:51:d6:e3:03:99:53:03:
                    b7:34:db:16:a6:b9:bf:97:6c:1a:96:a1:48:3f:2f:
                    94:24:a2:a1:6e:ab:66:70:98:ad:60:d0:ab:4c:23:
                    91:cf:9f:5e:7e:69:3d:11:dc:7f:8c:8b:83:af:a0:
                    e5:ef:64:eb:e0:38:39:11:9d:d2:e7:98:06:0a:31:
                    72:1d:89:e1:e5:df:bd:a1:3e:97:86:dc:21:01:34:
                    7b:4f:72:fb:f2:5b:a5:0c:ae:23:bc:63:ac:e2:9a:
                    10:8c:21:e6:89:11:91:b6:cf:c5:77:b6:8b:35:d3:
                    04:66:01:09:93:33:d7:57:5f:c1:6a:66:a8:eb:d4:
                    f2:bf:5a:29:6d:b1:a3:07:78:a4:6e:b2:d8:b0:fc:
                    aa:ec:9b:b3:ff:2d:97:89:4d:35:b7:8e:e2:09:96:
                    88:2a:ae:43:12:51:74:64:8e:59:28:5d:e8:d1:75:
                    86:14:d8:fd:13:53:b9:fa:ef:4a:fd:bb:e0:a8:ad:
                    d3:61:17:e3:3f:f6:0e:be:8d:df:02:ec:c1:5c:b5:
                    32:9d:93:91:92:79:8f:ce:1f:65:e7:8e:af:96:52:
                    12:7a:56:76:45:09:41:46:66:f0:0f:ec:f4:c9:60:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:25:33:12:10:F9:AC:34:4C:D9:AA:44:BD:A2:F6:FD:74:B8:C4:70
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:0b:94:3d:0e:7f:33:ff:27:f4:c1:7c:dd:87:9e:fc:9c:
         6a:ba:a4:78:56:e7:18:61:39:a6:a8:d8:fc:30:d0:74:f7:10:
         ac:87:ce:40:7e:ad:bf:b9:71:4d:53:52:b0:2c:5e:7e:27:78:
         af:4a:6b:3e:4d:24:b8:c8:33:34:9c:67:16:cc:05:01:a2:fb:
         94:ae:70:54:44:0e:91:29:66:00:0b:b0:1d:c4:1e:24:40:83:
         b6:3d:6d:9e:92:2f:21:47:12:5a:de:a2:d6:e9:f0:41:43:1c:
         d1:2b:30:2b:c1:49:23:9f:6f:28:18:71:e2:63:a4:59:71:e9:
         f1:a3:ba:7c:fb:53:5e:d8:23:a9:ff:b4:46:03:7f:5e:3f:90:
         23:bd:bb:a1:94:19:3d:f0:e9:8b:94:8a:4a:d4:e5:4f:42:4b:
         79:ba:19:1f:dc:e0:f8:a2:8d:aa:df:75:c2:57:df:d8:23:fa:
         46:d0:60:89:b6:fb:a2:f1:74:87:56:b5:c5:cd:1f:d1:d2:ce:
         96:eb:d7:48:3b:bd:df:9b:0a:e6:2f:fc:05:a8:1a:75:db:fe:
         1a:5e:47:51:50:e3:cf:8e:2d:55:11:24:94:5c:a4:4f:a9:0c:
         94:7d:7e:74:6e:26:d8:48:b8:d0:f2:aa:57:81:7c:be:ea:b1:
         e8:c6:88:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91GmrivTu8ra4kCOOowltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjVhOGMwMDk1ODI1ZTEzZjQ2YmRiMzcwYjdmZGNhOWI5
ZjhhNTIwHhcNMjYwOTIwMDgwMDA5WhcNMjYwOTIxMDgwMDA5WjAzMTEwLwYDVQQD
EygzMTI1MzMxMjEwZjlhYzM0NGNkOWFhNDRiZGEyZjZmZDc0YjhjNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxsGjgUm+DRJYc3ljyUqzi6v074L
31HW4wOZUwO3NNsWprm/l2walqFIPy+UJKKhbqtmcJitYNCrTCORz59efmk9Edx/
jIuDr6Dl72Tr4Dg5EZ3S55gGCjFyHYnh5d+9oT6XhtwhATR7T3L78lulDK4jvGOs
4poQjCHmiRGRts/Fd7aLNdMEZgEJkzPXV1/Bamao69Tyv1opbbGjB3ikbrLYsPyq
7Juz/y2XiU01t47iCZaIKq5DElF0ZI5ZKF3o0XWGFNj9E1O5+u9K/bvgqK3TYRfj
P/YOvo3fAuzBXLUynZORknmPzh9l546vllISelZ2RQlBRmbwD+z0yWA3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDElMxIQ+aw0TNmqRL2i9v10uMRwMB8GA1UdIwQY
MBaAFPO1qMAJWCXhP0a9s3C3/cqbn4pSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEt
MjkyNmJiYzE2Nzk2LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEtMjkyNmJiYzE2Nzk2
LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOigLlD0O
fzP/J/TBfN2HnvycarqkeFbnGGE5pqjY/DDQdPcQrIfOQH6tv7lxTVNSsCxefid4
r0prPk0kuMgzNJxnFswFAaL7lK5wVEQOkSlmAAuwHcQeJECDtj1tnpIvIUcSWt6i
1unwQUMc0SswK8FJI59vKBhx4mOkWXHp8aO6fPtTXtgjqf+0RgN/Xj+QI727oZQZ
PfDpi5SKStTlT0JLeboZH9zg+KKNqt91wlff2CP6RtBgibb7ovF0h1a1xc0f0dLO
luvXSDu935sK5i/8Bagaddv+Gl5HUVDjz44tVREklFykT6kMlH1+dG4m2Ei40PKq
V4F8vuqx6MaIpQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:46 2026 by rpki-client