Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          zicJOp42qhX7oB+EY/NwkqzoGTRaTn0CE7lLvUBJew4=
Subject key identifier:   B6:52:F3:F0:73:3A:19:05:66:C4:3A:30:91:DB:91:C3:EE:0F:3A:BA
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       01A0CBFE7410E236D5DFB816580DB3832E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          0C66
Signing time:             Wed 23 Sep 2026 02:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:45 +0000
Files and hashes:         1: A-DED3zrKOna1FUGWpyHJNkhEZ0.roa (hash: afJwMBYmR0D76Co10f5BGjdSHXBv59oxmtmfyQsHpHM=)
                          2: PI_Yf2pOZ_Dd8ZyFOzabezRtBnQ.roa (hash: TMsqfJL/2//7NtMJYDBGQdLpDpaQu8Y3xvAd+fP2XDM=)
                          3: ZfuIJyg5k_rC_JXuCFjK5lHQ6NY.roa (hash: pI03BBxCldhBPz/GTk6F4ZuWtSBUeKLjh/Pr3vyIh58=)
                          4: p9f_X7KlQCEgnmpPoE_OE8QQuVU.roa (hash: KMrfBaDuiVlgIJxjTRZbFSjXN71OjEcEy1EPYLJGuh4=)
                          5: pBSEGBT8tXaU0NeoPRwW40s9iBc.roa (hash: Qu7iPlmy4hOGYYOFKdh3y29vuJGBwj/CI4K+uxEBhOE=)
                          6: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: r6pnFQF02Og1KVAOe2LSBkBgKpW7UszrI325SF8Lkl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:74:10:e2:36:d5:df:b8:16:58:0d:b3:83:2e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Sep 23 02:00:45 2026 GMT
            Not After : Sep 24 02:00:45 2026 GMT
        Subject: CN=b652f3f0733a190566c43a3091db91c3ee0f3aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:39:f2:99:fb:fd:df:42:6a:47:55:bf:30:
                    5c:30:4e:67:48:b7:e5:95:fb:f1:f8:ea:de:fa:ad:
                    45:4e:1d:d8:c3:7d:e2:97:77:cd:9c:a7:61:d7:f7:
                    28:43:d1:d8:a5:c8:b8:5b:c3:4c:50:6d:61:65:c2:
                    a3:82:ca:da:2e:6f:e6:15:25:3a:b3:72:b4:e7:69:
                    0c:eb:ae:a6:ae:05:eb:1f:09:00:8d:88:28:24:a0:
                    15:39:5b:3b:ec:7f:3b:22:6b:c5:9b:3d:44:f5:35:
                    8d:c5:ba:f5:c2:d3:d9:bc:b5:c9:75:8b:78:38:2e:
                    34:94:5b:a2:d8:a7:29:28:f0:4a:75:06:73:17:13:
                    69:fd:7d:c8:0c:0f:46:65:e1:81:75:2a:af:58:7c:
                    9a:28:4c:63:cf:2e:33:8b:77:e1:f3:9b:38:d2:52:
                    93:fb:96:1f:cc:ee:ee:5e:6f:75:18:fe:2d:95:2c:
                    f8:f8:98:79:e0:82:ce:ee:c7:a2:cc:45:4d:7a:46:
                    ac:6e:ac:86:43:2b:99:d7:19:1a:ca:33:ae:f6:64:
                    c9:ce:ce:47:9d:b6:b5:7d:6d:76:7d:7a:d8:ae:09:
                    9d:40:30:2c:67:fb:ef:84:88:10:5c:14:a3:38:a4:
                    c3:28:53:ab:4a:01:f2:b0:ec:bf:fc:30:c0:df:d2:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:F3:F0:73:3A:19:05:66:C4:3A:30:91:DB:91:C3:EE:0F:3A:BA
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:04:cd:5e:63:bf:b2:d3:f0:33:fa:f3:98:77:01:2d:fe:ae:
         a5:29:70:6f:7e:6c:97:96:d3:0a:d5:7c:b4:92:1d:af:d8:72:
         c5:b5:2f:fa:8c:6a:de:82:96:4f:b8:81:ea:ac:5d:57:99:74:
         4c:8a:f1:8e:8b:cf:d6:ec:54:da:a9:43:4b:c8:c5:81:0c:b8:
         5c:30:c1:83:79:43:8a:69:0f:55:de:3b:b0:a6:bd:c2:d2:aa:
         ac:4c:fd:3f:86:97:57:a2:2f:7e:d5:a5:fa:c5:c9:11:58:8a:
         d3:b6:b5:82:31:c0:80:34:40:68:54:4c:79:fd:b3:68:65:47:
         73:b8:67:c9:90:e0:a5:44:4f:9e:99:d3:32:ff:0b:fd:66:86:
         6d:4a:ef:7a:7a:a4:96:a2:29:d9:c8:40:e5:c9:de:54:44:88:
         c0:87:af:e9:34:cd:a0:59:e5:80:be:42:7e:31:05:e2:5d:c6:
         07:f3:ad:5d:2e:17:f6:42:ad:ab:66:5f:08:65:6a:f5:ea:af:
         94:bf:5d:64:5c:b9:4c:35:6b:18:b0:96:8a:40:fb:7d:86:2e:
         a9:bd:b6:f7:41:97:8f:e6:cb:79:73:bc:3b:54:2c:6d:fa:08:
         db:53:36:e1:69:ae:8c:51:ae:12:b9:25:b9:4c:0d:ff:74:b2:
         85:5c:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:20:09 2026 by rpki-client