Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          Ily3ewA4/+GK+T31GmnTXCC4/xam1a3wPBx4iunFTwk=
Subject key identifier:   43:FA:2F:49:DA:21:10:8F:66:C7:F9:07:4A:C8:23:09:5E:97:14:B3
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       01A0C70EFB81BA9D66B808CFC18B9AE686EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          0C00
Signing time:             Tue 22 Sep 2026 03:00:42 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:42 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:42 +0000
Files and hashes:         1: B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (hash: mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: 6oAKgZ4YGS1I7+dya5W4phQVLjk09Ny463JodFUTJB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:fb:81:ba:9d:66:b8:08:cf:c1:8b:9a:e6:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Sep 22 03:00:42 2026 GMT
            Not After : Sep 23 03:00:42 2026 GMT
        Subject: CN=43fa2f49da21108f66c7f9074ac823095e9714b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:f3:16:e2:90:59:20:62:cb:43:b0:0f:34:
                    d9:9c:e8:b1:19:92:9c:9c:2e:fa:9c:0c:98:e2:cc:
                    94:43:1a:7b:d6:3a:92:cc:7e:34:ef:03:a9:83:22:
                    4d:9e:3d:74:48:1a:0c:87:4f:f5:aa:7c:28:11:b6:
                    10:d9:7b:04:36:9d:2a:52:b8:36:1e:cf:13:02:67:
                    cd:d2:a6:51:1e:f2:06:e1:44:72:cc:fc:e0:22:67:
                    4b:c8:7a:eb:f0:8f:5e:74:3d:3c:07:e3:3c:c0:8c:
                    28:7a:5b:d3:80:a9:82:eb:c2:78:b2:b2:80:c3:05:
                    e9:10:ce:05:9f:f6:11:cc:51:fc:ee:62:5c:49:2a:
                    dd:cc:10:c1:87:34:c8:e5:52:f4:97:12:c2:16:d3:
                    55:6b:ee:e0:13:52:9a:d7:25:58:9d:de:94:4e:3d:
                    e0:99:e9:8d:a0:40:0f:3c:ca:07:6f:21:59:43:c7:
                    6f:94:e6:ee:c7:7e:91:ec:64:b3:60:65:4b:29:86:
                    2c:c2:d4:6d:eb:3b:74:02:02:fd:2c:68:d6:95:9c:
                    83:3b:e4:dc:ba:61:22:10:8b:02:fa:fe:ce:74:da:
                    e3:70:ad:69:16:5d:97:75:42:50:e4:5b:35:72:f3:
                    43:34:e7:d5:aa:fb:59:3a:9c:e6:c7:cc:bc:05:8b:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FA:2F:49:DA:21:10:8F:66:C7:F9:07:4A:C8:23:09:5E:97:14:B3
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:87:07:a8:b7:e9:16:0d:8e:b0:b5:56:09:b6:66:27:d9:28:
         6a:e9:b0:ed:58:83:11:53:f2:4a:d2:ed:82:87:ef:16:c6:f3:
         f6:83:2f:9a:2c:15:3c:be:4d:76:05:f4:59:ec:ee:af:12:2d:
         e9:1f:64:21:e4:8e:74:87:db:cd:e8:6c:8c:e3:43:aa:74:23:
         91:e9:8f:7c:d4:e0:39:35:6c:59:95:60:3a:01:1c:aa:e9:7c:
         f8:85:ec:7f:d2:ba:39:d2:9c:44:11:a7:8c:a3:2a:99:6a:21:
         42:c6:fc:87:1f:27:af:84:9e:02:05:c0:7e:67:06:e3:26:c8:
         36:c6:c9:e1:a7:7d:1b:80:6c:aa:6d:ba:6b:72:24:29:09:a6:
         b9:d6:62:a6:6d:d8:e2:d6:d7:2c:7e:71:19:20:83:12:34:9e:
         43:c9:36:d1:d9:e3:9c:92:31:db:1b:8c:ce:7f:c6:21:00:bb:
         2b:e0:67:60:d1:a4:80:73:e3:ff:46:3f:7d:a1:0b:fc:00:84:
         01:9f:9e:cd:e1:65:b4:5e:4f:f0:c0:f1:7c:6d:73:b9:9c:56:
         34:06:a4:c9:b9:08:06:03:18:f8:22:ee:58:e5:e8:6b:35:f9:
         b0:d0:06:4c:59:da:e3:1c:bf:3f:8e:52:92:d1:b9:ea:95:60:
         38:dd:6d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDvuBup1muAjPwYua5obuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw
ODE3YTAwHhcNMjYwOTIyMDMwMDQyWhcNMjYwOTIzMDMwMDQyWjAzMTEwLwYDVQQD
Eyg0M2ZhMmY0OWRhMjExMDhmNjZjN2Y5MDc0YWM4MjMwOTVlOTcxNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYLzFuKQWSBiy0OwDzTZnOixGZKc
nC76nAyY4syUQxp71jqSzH407wOpgyJNnj10SBoMh0/1qnwoEbYQ2XsENp0qUrg2
Hs8TAmfN0qZRHvIG4URyzPzgImdLyHrr8I9edD08B+M8wIwoelvTgKmC68J4srKA
wwXpEM4Fn/YRzFH87mJcSSrdzBDBhzTI5VL0lxLCFtNVa+7gE1Ka1yVYnd6UTj3g
memNoEAPPMoHbyFZQ8dvlObux36R7GSzYGVLKYYswtRt6zt0AgL9LGjWlZyDO+Tc
umEiEIsC+v7OdNrjcK1pFl2XdUJQ5Fs1cvNDNOfVqvtZOpzmx8y8BYs2CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP6L0naIRCPZsf5B0rIIwlelxSzMB8GA1UdIwQY
MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt
YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh
LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIcHqLfp
Fg2OsLVWCbZmJ9koaumw7ViDEVPyStLtgofvFsbz9oMvmiwVPL5NdgX0WezurxIt
6R9kIeSOdIfbzehsjONDqnQjkemPfNTgOTVsWZVgOgEcqul8+IXsf9K6OdKcRBGn
jKMqmWohQsb8hx8nr4SeAgXAfmcG4ybINsbJ4ad9G4Bsqm26a3IkKQmmudZipm3Y
4tbXLH5xGSCDEjSeQ8k20dnjnJIx2xuMzn/GIQC7K+BnYNGkgHPj/0Y/faEL/ACE
AZ+ezeFltF5P8MDxfG1zuZxWNAakybkIBgMY+CLuWOXoazX5sNAGTFna4xy/P45S
ktG56pVgON1tgg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:32:29 2026 by rpki-client