Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
File:                     wJLY1VEbGezkVpYPI7-ohu4dVws.mft (raw, json)
Hash identifier:          XtvG2xZEuVgq8HeWpngzZ87364T3VBTJ//oTbOHgiU8=
Subject key identifier:   BA:95:A3:45:6A:A6:7D:29:68:A1:9A:28:13:9C:89:72:6A:3D:1C:01
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Certificate issuer:       /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial:       01A0DF869D851A4AFE3E367F046A972CBBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
Manifest number:          1A82
Signing time:             Sat 26 Sep 2026 21:02:16 +0000
Manifest this update:     Sat 26 Sep 2026 21:02:16 +0000
Manifest next update:     Sun 27 Sep 2026 21:02:16 +0000
Files and hashes:         1: IHwozVBM-INdwAb4BanODhPGLiI.roa (hash: 1/oeq5jje77YZDjelRYgYRU0FA3dhh29FV04+WbtmT0=)
                          2: RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa (hash: oZzyvKvR9r/Ihr+p+Nj3IAiIjLpAhI404TTQt+EMmaU=)
                          3: XPyrFETzbIf4UTMJJTPgIXwXkgo.roa (hash: rpIh/S9npo0EEK8J2sqDjrTLl9P72OOEfi3A9r/XVnw=)
                          4: wJLY1VEbGezkVpYPI7-ohu4dVws.crl (hash: oyIrHG3cCAjRYA3jpRm4mG/KQLguMJn7IiU2CXmc7Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:9d:85:1a:4a:fe:3e:36:7f:04:6a:97:2c:bb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
        Validity
            Not Before: Sep 26 21:02:16 2026 GMT
            Not After : Sep 27 21:02:16 2026 GMT
        Subject: CN=ba95a3456aa67d2968a19a28139c89726a3d1c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:75:f6:3c:9c:6b:18:e2:a7:ab:88:57:45:
                    9f:79:6a:99:c4:21:b4:40:a4:db:19:9f:dc:1c:11:
                    70:60:a8:10:a2:08:af:05:88:01:be:04:94:42:e0:
                    30:3d:ad:05:70:5e:41:2e:42:b5:ef:8f:5e:65:e9:
                    75:c0:6e:86:3e:35:9b:f3:ce:19:11:56:41:4d:aa:
                    75:4b:b9:c0:8e:43:30:cd:35:e0:6f:b9:3e:0b:15:
                    90:ee:48:83:33:ea:91:bc:36:b9:6e:ea:f6:ec:ab:
                    ab:e3:a5:7e:06:9a:76:99:1a:2c:25:7a:f0:93:22:
                    c7:3e:a8:2e:0e:ac:60:0c:f3:02:d9:c1:69:21:27:
                    f1:ef:6d:6a:61:f5:a4:32:74:d0:b5:85:bb:8d:c3:
                    f8:55:47:8e:2f:63:de:f8:07:7e:80:21:07:6e:4d:
                    3c:09:c2:f1:28:be:3b:34:eb:5a:8f:03:70:3b:6f:
                    bf:9d:75:d6:9d:f4:45:73:2a:f7:de:53:08:d3:41:
                    68:f2:6b:95:2c:73:86:61:03:73:43:7b:3a:2a:d8:
                    cc:59:7b:3b:ca:19:61:2a:62:f4:89:09:a6:d3:be:
                    5b:76:fe:ce:f3:3c:73:25:b7:80:d2:b6:2c:8f:df:
                    ed:43:bd:22:73:3c:f5:9b:50:45:ea:ac:fa:de:c0:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:A3:45:6A:A6:7D:29:68:A1:9A:28:13:9C:89:72:6A:3D:1C:01
            X509v3 Authority Key Identifier:
                keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:2a:43:57:c0:2c:01:5f:70:4f:d6:3a:d5:ff:dc:ce:04:9d:
         bb:95:10:d5:d6:b4:80:76:d3:cb:70:11:d2:c9:64:b7:2b:96:
         21:77:83:11:4c:26:5b:f2:67:f5:48:63:e4:e9:a6:be:77:26:
         83:e4:73:e5:db:71:9a:e0:ec:d7:2b:8a:83:df:84:b0:17:02:
         9f:fc:ee:13:11:b2:a6:cf:7b:0e:25:7b:1d:73:da:5a:10:f3:
         22:b8:2b:9f:58:a2:95:ef:46:c5:1d:b0:88:cf:e6:1c:87:aa:
         35:16:62:fb:06:8d:f7:04:11:6c:9a:88:3b:68:ee:6f:05:d1:
         40:ac:2d:f5:9d:b1:05:87:1d:83:96:b9:56:41:15:45:ea:bc:
         aa:fc:60:ae:7a:a4:c9:bd:09:e2:2f:a4:82:4d:92:fc:ec:7b:
         e8:a0:c0:be:ea:fb:60:59:dc:65:d3:33:dc:72:de:75:3c:60:
         ee:8f:24:01:8e:f4:67:28:90:18:af:86:e7:50:e2:29:ec:89:
         32:32:b7:31:ca:6a:78:0f:a5:d7:37:5d:ac:12:c6:ae:04:9e:
         12:c7:ec:2b:46:3e:02:3e:26:e9:f6:b2:1a:6e:79:a3:8e:d6:
         ac:6b:43:71:32:7c:db:c1:61:bc:bb:67:72:62:af:01:cc:40:
         74:67:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:19:53 2026 by rpki-client