Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          AMQsBddXRHa+SQqdgJv7QA/4dUZG82RsluVoTpKsdb8=
Subject key identifier:   19:51:77:34:0C:E8:14:39:6C:0D:DF:90:49:18:90:A9:E3:AA:A8:30
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       01A0C2C4864CF9B9DACDD1BEB0C1C21BE79B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          086E
Signing time:             Mon 21 Sep 2026 07:00:54 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:54 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:54 +0000
Files and hashes:         1: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          2: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          3: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          4: uTr13Te3pwYYdTFAT-0rxl4K2a4.roa (hash: oQV4cNUdbV2vNfYqR3e7xR1qkeePDkN6t+oSOnNTZ8M=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: Drnjl7lGpWfddTZ1MbhqHApLVVIGLFSOqV4N9vzQrPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:86:4c:f9:b9:da:cd:d1:be:b0:c1:c2:1b:e7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Sep 21 07:00:54 2026 GMT
            Not After : Sep 22 07:00:54 2026 GMT
        Subject: CN=195177340ce814396c0ddf90491890a9e3aaa830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:d2:5c:95:a2:e4:98:df:33:c1:2a:fd:a5:
                    f3:47:06:f0:8c:e9:f9:17:ac:98:38:b0:26:f0:66:
                    89:28:bd:11:b7:77:05:06:1c:51:ec:f7:22:11:e6:
                    0c:c6:10:9a:11:88:05:e9:96:03:fd:02:5e:fd:1e:
                    52:cb:5a:7b:26:f3:7d:d6:fa:a0:13:90:61:9d:b8:
                    57:03:e5:71:1e:04:51:3f:f9:8c:1f:ab:78:9e:a3:
                    33:de:94:cf:86:ee:e9:e1:9d:52:74:9e:f0:dd:7d:
                    94:e6:c1:a5:03:fd:34:a9:95:36:be:1c:30:c3:f5:
                    33:79:dc:f0:6d:cc:d7:2b:c9:f7:95:aa:af:9f:ae:
                    cd:50:30:2a:3d:d2:92:a3:a3:5b:04:f5:81:0e:ce:
                    3e:18:b5:8d:ad:37:62:a6:6a:05:b9:1d:e1:47:30:
                    a7:0b:02:62:f5:4d:94:c6:44:2b:c4:18:42:bd:df:
                    48:f2:85:6c:fc:5b:56:db:a8:b8:17:ca:99:c1:56:
                    17:8d:37:dd:10:e2:e6:af:9e:a1:c7:8f:ed:33:34:
                    cc:cb:73:ba:5d:15:76:5e:f3:86:a0:9b:c0:0b:6a:
                    90:34:37:7d:37:a3:fe:69:25:5e:a4:ca:6f:97:dd:
                    4d:39:00:9d:19:0d:d8:2c:88:b3:53:54:12:31:55:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:77:34:0C:E8:14:39:6C:0D:DF:90:49:18:90:A9:E3:AA:A8:30
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:7b:29:ba:aa:f8:b8:b8:80:e2:44:3f:aa:08:e2:21:b7:
         14:f2:01:5f:c3:ea:c7:af:18:37:c5:d5:ee:ee:06:1a:7e:32:
         94:f6:01:fb:7f:4b:1b:6a:20:cd:a9:3d:7e:c4:84:15:e9:51:
         6c:ae:97:f2:a9:40:c5:c5:f1:0a:e5:24:84:e9:ca:80:21:20:
         87:a8:4a:d1:7f:b0:3c:90:65:8a:cb:8a:80:91:a7:82:c4:ec:
         78:c7:36:42:81:f3:64:f6:17:82:54:68:4f:48:13:c1:e8:36:
         1d:2d:96:2f:49:41:7f:2e:a3:b6:8a:56:3a:1d:70:c6:16:17:
         f5:c2:60:6f:b7:be:65:f4:b9:60:d5:44:41:37:4c:95:9b:33:
         9f:ba:d5:95:da:00:b6:c8:e0:ca:3a:0e:3b:9f:fd:59:03:5f:
         76:62:cc:35:0c:3e:0d:81:dd:60:b6:fd:12:95:d9:01:71:f5:
         ca:83:f4:c0:66:50:b6:db:aa:d1:2f:6f:87:59:e4:1a:16:3c:
         a2:a7:9c:88:db:76:d2:66:e7:65:a7:3b:2e:f4:86:b8:6c:20:
         f7:93:e0:1a:e1:c5:a4:98:87:22:53:06:13:43:48:51:2b:b2:
         c5:54:7f:3e:53:d6:ea:bf:10:e5:2d:f6:e9:92:a7:36:a9:b8:
         e3:fd:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:45:27 2026 by rpki-client