Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
File:                     wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft (raw, json)
Hash identifier:          6l5jKNTFJlkOE/ZAnwjsjGextygb2+JSw7DB9Em50Zg=
Subject key identifier:   8D:DD:F7:D2:63:0B:7E:50:27:77:5B:02:A7:F3:1A:BE:D9:A8:42:72
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Certificate issuer:       /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial:       01A0C8FD1307E537CB744DE153BCE485C504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
Manifest number:          E3
Signing time:             Tue 22 Sep 2026 12:00:23 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:23 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:23 +0000
Files and hashes:         1: ODokaw8dH2bgEwC2vqkh34fmVgw.roa (hash: 7hy5NUlv+wfKrVj0j9OxBqj+/qNbcoueYUE/6UJ2K68=)
                          2: jbnDsm2JC5tcca4VioOzVQ3zGyU.roa (hash: 9z6efLUX6yahopqmvbLejyPBj0XfCgbVUOBGFVVkxZc=)
                          3: lDWjdn0toSpCQmQoJ7J-uVywu98.roa (hash: gFIDArWPxvDtAO1+/Y6KCSNMzjM3GWAojhd3ft6/MKk=)
                          4: nPlg5Apcfbk2XDk2K88egtmTy-k.roa (hash: Yc40tcEIs4qWmAxFY5qMLEF4tlNRSDMHzrxrJEJYNjM=)
                          5: wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl (hash: 8pqSPx9rH31roMZIPfK/om8kyV+ePyh0+klQHnd9eG8=)
                          6: wETOr7pjVmV7xbWNKBuP0t6nRl8.roa (hash: pRRkwperUh3CBR5kxYN2htpz3gsx9h9C5+Rvr60LtA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:13:07:e5:37:cb:74:4d:e1:53:bc:e4:85:c5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
        Validity
            Not Before: Sep 22 12:00:23 2026 GMT
            Not After : Sep 23 12:00:23 2026 GMT
        Subject: CN=8dddf7d2630b7e5027775b02a7f31abed9a84272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:a4:87:a9:31:87:77:13:5f:fd:a8:a0:2a:
                    cb:22:d9:ba:bb:48:cb:02:52:01:3b:17:ac:77:f1:
                    41:44:46:d4:d1:68:db:9d:94:54:73:8d:53:33:76:
                    9a:21:cf:45:a2:b8:1e:b6:db:99:30:e2:91:a1:60:
                    ee:35:be:e8:7d:aa:c0:bb:75:97:9a:78:16:c5:d9:
                    e5:04:81:96:a9:dc:32:91:34:d5:58:5c:ce:fa:ca:
                    a7:a2:3e:f6:fd:f7:63:5c:dd:94:a9:38:67:16:3a:
                    6f:c8:24:da:30:68:df:5f:b7:c4:c2:ba:75:4c:b2:
                    e4:02:cc:89:02:ec:b3:bc:31:47:89:e6:7c:5c:79:
                    c4:8e:97:a1:1e:77:81:80:5e:e6:14:16:2b:10:ef:
                    c1:82:1b:f9:0d:47:e8:b1:96:55:06:88:53:ff:f9:
                    23:fd:90:56:69:af:3b:f4:a4:50:9c:0a:bc:eb:2e:
                    e1:41:cd:0f:d2:5c:81:fc:90:5b:5d:6c:d7:41:f4:
                    54:3c:2a:bd:2c:b5:a5:da:e6:c9:b3:f6:1e:55:a5:
                    91:8d:71:8b:66:d7:b2:6e:ad:e4:c0:a0:bc:f3:14:
                    ee:eb:bd:6e:cd:31:a4:9d:b9:f4:da:43:2a:12:c4:
                    57:25:1c:66:d3:e1:81:91:e9:34:a9:16:cd:53:f4:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:F7:D2:63:0B:7E:50:27:77:5B:02:A7:F3:1A:BE:D9:A8:42:72
            X509v3 Authority Key Identifier:
                keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:69:e9:0b:60:4b:ea:ed:58:6b:9f:27:04:17:3d:60:29:
         d0:65:e9:7b:e1:5a:2e:9c:78:ee:18:49:36:70:d1:1a:53:82:
         b0:b5:a4:1b:4f:29:bd:08:ac:70:3e:91:23:37:d6:b3:7d:f4:
         9a:c3:28:d7:b5:33:58:24:fe:78:d3:48:c2:82:75:70:46:cc:
         f2:5a:b4:52:e4:04:e4:0b:a1:96:a7:4f:81:a0:e0:58:33:fa:
         ea:1f:33:2a:83:dd:80:91:ed:5b:de:5a:3a:c1:10:15:48:5b:
         22:51:b1:d8:c5:a4:99:c7:3e:1c:0d:32:60:7a:b9:9e:79:c9:
         89:b7:d4:a2:0f:5b:6f:96:4e:2a:cf:28:fc:da:5f:7a:ed:a3:
         87:5c:3c:df:b4:8a:b9:62:3b:51:7b:4f:30:40:83:9f:aa:9d:
         5c:97:5c:6f:e2:c3:5d:a2:8f:65:39:5a:56:5f:f3:8f:08:9f:
         fa:a0:dd:35:c1:c1:be:58:88:9a:03:2a:65:cf:26:15:32:8c:
         da:c5:1c:b7:b2:5c:8b:0b:15:c3:c5:af:d3:56:bb:b8:f7:47:
         36:a7:dc:ce:ee:62:d8:6e:4d:de:d7:a6:e0:be:7d:18:ee:02:
         ae:45:a0:ef:57:06:98:6d:2a:92:44:56:21:83:51:2a:8f:e4:
         a2:33:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:20:01 2026 by rpki-client