Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          Vo4Kn/kOwlHLQDxGufwmlePdNQimuQBnGjAvZEOlhk0=
Subject key identifier:   73:87:20:7D:16:5C:29:88:58:13:CB:71:D3:2B:53:CF:96:83:91:28
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       01A0EA77B61C6E9D55D9150A38077804C696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          115A
Signing time:             Tue 29 Sep 2026 00:01:48 +0000
Manifest this update:     Tue 29 Sep 2026 00:01:48 +0000
Manifest next update:     Wed 30 Sep 2026 00:01:48 +0000
Files and hashes:         1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=)
                          2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: KbaYuvUr1/IVgX5Abm4inTwsP9tXdR1i6rxW5TiAuNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:77:b6:1c:6e:9d:55:d9:15:0a:38:07:78:04:c6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: Sep 29 00:01:48 2026 GMT
            Not After : Sep 30 00:01:48 2026 GMT
        Subject: CN=7387207d165c29885813cb71d32b53cf96839128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:5d:57:ea:7a:17:97:54:77:95:38:86:37:
                    66:fa:55:17:d4:9e:30:4f:8a:28:a7:57:13:c0:e0:
                    94:56:e5:f4:04:02:01:95:98:16:25:0e:e0:e7:15:
                    ef:36:c1:bf:8f:e7:49:6d:d1:e6:82:71:f8:b3:a4:
                    a8:9e:c8:d1:4e:7a:4f:f5:ab:80:84:f8:e2:1a:71:
                    a7:45:5e:52:7e:55:08:ea:9c:f5:ee:2d:ee:97:99:
                    56:51:fa:f0:4e:2f:77:46:f3:a7:5e:cb:64:95:87:
                    6c:39:29:05:45:c5:f7:7e:f1:89:ef:93:8e:04:7a:
                    d9:8a:db:a7:c4:25:07:ab:e9:8a:a9:4b:66:e3:b5:
                    bd:dc:94:99:e7:4f:1d:4b:80:7e:6e:c7:c1:77:03:
                    9a:1b:8d:88:04:a1:3e:8f:cd:98:a9:b9:cc:a7:2f:
                    6e:b7:75:21:0e:8e:d2:6e:74:7a:ec:7c:96:e9:9b:
                    64:17:6b:0e:54:ac:4b:05:bf:14:b5:78:69:78:a0:
                    1f:d7:8c:d7:1f:63:cf:ef:63:ad:4c:b5:7c:cd:11:
                    ee:ed:25:80:d6:ad:69:1d:0b:ab:ff:3c:b0:68:40:
                    2f:ef:61:23:65:ec:ae:ca:a4:8e:d0:97:f8:1b:ce:
                    38:3e:ee:6e:9a:2b:b4:da:ee:21:77:7d:ce:5f:4c:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:87:20:7D:16:5C:29:88:58:13:CB:71:D3:2B:53:CF:96:83:91:28
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f3:54:7d:26:84:6a:ac:04:cc:d5:6d:07:b1:1d:4c:fa:ef:
         f0:13:c0:ca:03:73:00:69:80:26:18:82:80:ed:70:08:3c:dc:
         43:39:43:82:7f:e1:b0:ac:45:d0:15:f7:ed:af:fe:21:16:79:
         c6:69:dd:53:40:bd:8c:6c:b6:ce:11:8f:87:91:64:08:40:da:
         14:d8:20:68:11:77:97:e8:be:96:3e:ec:53:98:a2:5d:4e:a2:
         8f:47:68:a9:7f:c1:45:f6:8a:b0:39:36:3d:db:56:4b:13:de:
         5d:4e:72:80:8f:fa:89:e7:e1:59:bc:c3:66:59:3c:a7:d0:8c:
         c8:89:45:b1:c1:49:2b:e6:20:83:13:c4:8c:3c:77:1e:7d:6d:
         b0:23:7b:17:f5:ff:b4:25:ad:78:95:2f:78:75:3f:20:97:fd:
         a4:4a:21:8e:13:60:93:f8:aa:bb:72:74:14:dd:27:6d:3b:13:
         5f:c7:ef:1d:0c:09:2f:9e:eb:b6:75:2d:4c:67:ed:4e:b6:09:
         49:47:8c:e2:8b:43:02:63:93:33:5e:9d:4b:3e:55:04:7f:dc:
         94:f8:3f:40:65:00:80:b0:9c:26:7c:22:b7:4f:17:07:32:69:
         eb:77:1b:71:4d:0a:71:39:05:42:3b:8d:bc:ca:ee:a7:e1:1b:
         ae:0c:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:12:42 2026 by rpki-client