Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          a+hLDRUBSbzShnj5jxtu5lm6pe023GAH429e5uKmuqM=
Subject key identifier:   48:1D:3F:2C:7D:2F:F9:68:16:41:4B:42:56:AE:A6:6F:F8:3B:7F:79
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       01A0D15B7641A0513A02F2850EEFEE7A89E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          06E2
Signing time:             Thu 24 Sep 2026 03:00:27 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:27 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:27 +0000
Files and hashes:         1: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (hash: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: Z8uxupc9E0k5fzodr0QPW0IrifLa0ASUWdHs/JKFKZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:76:41:a0:51:3a:02:f2:85:0e:ef:ee:7a:89:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Sep 24 03:00:27 2026 GMT
            Not After : Sep 25 03:00:27 2026 GMT
        Subject: CN=481d3f2c7d2ff96816414b4256aea66ff83b7f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:5f:96:74:b5:61:1f:f2:26:8e:eb:77:a6:
                    80:3f:c7:ca:68:a0:b8:fe:ad:59:1b:25:fc:b1:f7:
                    a4:2c:e4:ff:d5:68:71:2d:20:41:2b:7e:31:28:f7:
                    6c:b7:a8:ba:c6:e5:8b:73:c1:a4:98:20:ef:8b:d1:
                    df:12:ef:68:12:7d:00:76:2e:7f:8c:76:18:6a:ee:
                    a4:50:a4:5d:75:4b:82:1c:90:40:ca:98:28:01:11:
                    47:35:c2:05:d0:8b:b2:ea:3a:a1:c1:38:c4:87:6b:
                    b6:7c:ab:8d:53:02:15:03:86:02:02:9a:11:1a:bd:
                    3e:f4:f0:a8:1f:36:8d:d1:8b:ad:cc:13:af:0c:bc:
                    53:45:ed:5a:08:ce:a3:3b:bb:24:ea:ba:50:97:2f:
                    b2:f7:76:54:de:43:03:ce:17:24:fb:d3:13:aa:2b:
                    5c:04:06:33:27:44:42:dd:0b:48:96:3c:bd:9f:d1:
                    75:b3:6e:9a:aa:c8:78:03:0f:a4:30:88:f3:fa:b6:
                    73:26:51:7d:82:d3:20:16:d0:cf:c7:02:2e:b5:cd:
                    d4:74:7d:76:d5:3d:c8:3f:59:61:6a:9e:e9:8c:b0:
                    0d:81:7f:96:c9:1d:a9:58:b2:71:a6:74:59:60:a9:
                    ba:a4:e8:3a:30:f5:5d:3c:63:58:95:07:18:59:0d:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1D:3F:2C:7D:2F:F9:68:16:41:4B:42:56:AE:A6:6F:F8:3B:7F:79
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:c5:0d:ef:dd:11:35:20:b5:6d:74:59:e6:21:67:10:6f:
         d9:f3:9b:66:95:82:e4:ca:f1:aa:30:af:be:9d:4e:7b:9d:39:
         16:62:e3:c6:fc:9a:b8:f2:31:50:01:0a:b3:6b:78:92:54:09:
         26:27:bd:bc:82:23:87:41:c3:fa:8c:0c:14:31:96:1d:f1:53:
         f0:be:e0:00:39:e2:82:fe:ba:0e:98:26:f8:73:95:ae:78:1a:
         f1:dc:f9:82:92:ba:e2:b1:af:95:b2:fc:51:ba:7a:19:0f:61:
         2c:a9:97:c5:f9:f4:7a:17:d8:03:30:33:d5:c6:a5:79:1e:19:
         c2:01:4d:74:a2:8c:09:34:46:20:6c:16:be:cb:56:fc:f1:f5:
         95:a8:5e:70:d9:57:5a:d2:e5:84:d8:e4:cd:9e:c7:d4:fb:1b:
         4b:b7:e4:2a:ab:16:4d:f4:f0:22:ba:94:8a:da:7d:d3:49:b5:
         cc:e1:ec:4a:0f:ae:6d:37:ad:d2:0f:7c:6b:45:7e:18:5f:2b:
         3e:83:20:c2:85:a1:c2:fe:07:a8:bd:af:0b:89:81:01:68:a6:
         a4:f2:fb:7a:9c:1b:cf:c4:d6:a4:99:b7:68:1f:b6:24:5b:5b:
         46:8a:88:71:fb:bf:88:42:f9:3d:d6:5e:c5:a8:68:9a:67:9e:
         65:19:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:04:12 2026 by rpki-client