Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          v+5ixHXMfgRdps8REPDuIKJtVWlJDVRqotpz8zCfTBQ=
Subject key identifier:   2E:11:0E:32:83:AA:D5:FA:1E:49:E5:92:0B:75:71:5E:5F:B2:36:6C
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       01A0C47CA8CB5B01331FE9C316C29F1A22BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          0728
Signing time:             Mon 21 Sep 2026 15:01:38 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:38 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:38 +0000
Files and hashes:         1: B-ORof5U5KffpAVQvuFpkPz0N4c.roa (hash: 7Bdce+7dVfpsrP9CGNTqOXrt+QvlnjsVsauoFzbSuFo=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: Z6x/Eo2Xh3TADQh0BWwDJyVC0gU3aVbrFKYjs8jMTIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:a8:cb:5b:01:33:1f:e9:c3:16:c2:9f:1a:22:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Sep 21 15:01:38 2026 GMT
            Not After : Sep 22 15:01:38 2026 GMT
        Subject: CN=2e110e3283aad5fa1e49e5920b75715e5fb2366c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:17:e4:0f:75:7d:86:4a:2e:4f:7f:4b:0c:95:
                    3d:1d:26:fe:c8:58:7e:0b:50:ce:2e:1e:8e:66:ec:
                    fd:b5:b7:f5:6e:71:ed:70:64:e5:a8:61:8e:54:01:
                    0a:1b:47:d9:5f:64:25:35:5f:03:03:ea:35:25:4e:
                    5c:55:a6:a1:6a:7b:9b:52:df:ee:95:f1:95:93:9f:
                    cd:1e:69:91:54:b5:b6:16:89:84:91:82:77:54:9e:
                    56:ea:a6:40:08:0d:74:19:76:b5:5a:a8:19:2f:5b:
                    fb:e3:7b:90:a6:64:5c:ab:fe:c8:59:88:8c:1d:5d:
                    b7:d1:64:65:0e:95:00:7c:74:56:84:c4:dc:14:81:
                    9d:af:88:77:ee:04:e8:f0:d7:fb:33:53:c2:ce:e1:
                    b4:bd:df:ec:0e:30:e9:12:fa:50:54:42:b1:6c:0d:
                    1f:28:5f:e6:82:4a:f9:9b:03:71:b2:46:ce:fc:90:
                    f1:73:77:8d:a1:e6:19:d2:47:e6:a5:65:3b:e9:e7:
                    cd:ab:ee:cf:25:9c:cd:88:2b:14:4a:05:f6:86:c5:
                    17:89:b2:19:c1:38:f4:5c:9d:34:de:87:20:b8:b4:
                    6c:e5:69:a2:1e:f1:bd:fa:6d:b6:c2:45:c7:c2:94:
                    c0:fc:d6:f5:d3:64:cb:a1:cb:ad:74:a5:23:ea:02:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:11:0E:32:83:AA:D5:FA:1E:49:E5:92:0B:75:71:5E:5F:B2:36:6C
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:80:4e:e2:4b:0f:45:0f:9e:47:38:3f:29:51:16:5a:e5:
         99:41:4c:4a:ce:3e:30:56:27:2f:e0:9a:25:2b:42:40:69:6a:
         86:4c:93:94:19:fd:e7:85:00:65:c2:3c:1f:c6:70:b8:44:9f:
         f6:ff:81:12:b2:d4:28:94:49:4c:02:01:65:4a:46:a0:f6:10:
         7e:54:d1:1d:4c:a5:47:b6:4a:8c:a4:01:15:f0:39:ff:d1:f0:
         68:9f:ee:87:74:d3:c1:d1:5c:ca:fc:52:9e:25:0f:b2:d4:b6:
         35:21:5b:bc:87:2d:b2:d1:15:65:4b:77:56:04:1f:65:e0:49:
         1b:6e:b4:4d:20:72:fe:1a:0a:ae:0f:34:72:7a:31:e8:49:03:
         44:14:ad:af:15:a6:3f:cb:12:10:8a:5c:b2:de:76:af:a3:0b:
         22:5d:b1:4a:c2:8a:34:b2:7f:60:fe:a8:9b:94:1f:f8:ed:36:
         ad:91:56:ae:69:5b:e7:0a:2e:7c:c8:7d:46:6d:5d:6f:11:54:
         21:ef:da:3a:2a:d4:92:11:58:e2:ae:6a:3a:08:03:be:79:72:
         f0:7c:1b:a5:f7:18:2a:77:11:2d:70:80:65:45:fd:f8:5a:c1:
         71:90:95:c8:4a:31:ce:8a:6c:f1:fb:54:ce:ef:56:3c:1f:c1:
         29:dd:2a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfKjLWwEzH+nDFsKfGiK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTU3NGNiOWUwZTM1YmY5NzU0ZWY5MTc1MDE0YmM3NDYw
MDhmMGUwHhcNMjYwOTIxMTUwMTM4WhcNMjYwOTIyMTUwMTM4WjAzMTEwLwYDVQQD
EygyZTExMGUzMjgzYWFkNWZhMWU0OWU1OTIwYjc1NzE1ZTVmYjIzNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RfkD3V9hkouT39LDJU9HSb+yFh+
C1DOLh6OZuz9tbf1bnHtcGTlqGGOVAEKG0fZX2QlNV8DA+o1JU5cVaahanubUt/u
lfGVk5/NHmmRVLW2FomEkYJ3VJ5W6qZACA10GXa1WqgZL1v743uQpmRcq/7IWYiM
HV230WRlDpUAfHRWhMTcFIGdr4h37gTo8Nf7M1PCzuG0vd/sDjDpEvpQVEKxbA0f
KF/mgkr5mwNxskbO/JDxc3eNoeYZ0kfmpWU76efNq+7PJZzNiCsUSgX2hsUXibIZ
wTj0XJ003ocguLRs5WmiHvG9+m22wkXHwpTA/Nb102TLocutdKUj6gL4HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4RDjKDqtX6Hknlkgt1cV5fsjZsMB8GA1UdIwQY
MBaAFMAVdMueDjW/l1TvkXUBS8dGAI8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMt
OGZlZTdlYzdjM2NkLzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMtOGZlZTdlYzdjM2Nk
LzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5WATuJL
D0UPnkc4PylRFlrlmUFMSs4+MFYnL+CaJStCQGlqhkyTlBn954UAZcI8H8ZwuESf
9v+BErLUKJRJTAIBZUpGoPYQflTRHUylR7ZKjKQBFfA5/9HwaJ/uh3TTwdFcyvxS
niUPstS2NSFbvIctstEVZUt3VgQfZeBJG260TSBy/hoKrg80cnox6EkDRBStrxWm
P8sSEIpcst52r6MLIl2xSsKKNLJ/YP6om5Qf+O02rZFWrmlb5woufMh9Rm1dbxFU
Ie/aOirUkhFY4q5qOggDvnly8HwbpfcYKncRLXCAZUX9+FrBcZCVyEoxzops8ftU
zu9WPB/BKd0q1Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:17:30 2026 by rpki-client