Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File:                     WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier:          0cbHctZRM+1r/y2nLs73/GOz69aH1l/d9iiOZlG+Kjk=
Subject key identifier:   18:F7:4E:06:F4:E2:56:AD:6C:58:97:6F:E5:EC:DD:8E:41:DA:86:3F
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer:       /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial:       01A0DF4EE0A21E2C93B0C419F7FD3A210839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number:          12E2
Signing time:             Sat 26 Sep 2026 20:01:23 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:23 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:23 +0000
Files and hashes:         1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
                          2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: rMHgYLtPsnjBv803b8dO0xd2wIyDTQdOVxD9HzX+vxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:e0:a2:1e:2c:93:b0:c4:19:f7:fd:3a:21:08:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
        Validity
            Not Before: Sep 26 20:01:23 2026 GMT
            Not After : Sep 27 20:01:23 2026 GMT
        Subject: CN=18f74e06f4e256ad6c58976fe5ecdd8e41da863f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:28:2f:16:7d:68:e2:6a:b9:24:55:15:85:
                    42:fc:cd:9a:98:7c:f6:b8:36:ff:72:88:e5:a2:e4:
                    14:e3:cc:d9:90:81:1e:c7:13:25:8b:ac:ff:61:ae:
                    cb:32:28:d1:95:4f:fe:91:58:22:aa:2f:a4:58:02:
                    1e:c6:40:e5:4e:ea:58:88:03:95:0d:38:86:11:6e:
                    b1:00:ec:28:5c:3f:20:ab:79:34:1b:55:c7:1d:b6:
                    2c:c3:ec:8e:61:b2:12:6e:4c:a0:12:9b:09:f8:61:
                    36:c6:42:c8:32:66:be:65:fc:de:b7:6a:44:08:c5:
                    39:a0:6e:ee:04:1c:74:70:b0:d6:37:3a:eb:cc:3a:
                    f2:56:e0:09:c9:33:d7:75:18:8a:3c:9a:e5:e8:47:
                    56:35:3d:09:0f:d8:80:ad:91:7b:60:e0:b3:cc:97:
                    54:6d:a6:b8:df:75:02:47:46:b7:79:7a:2d:be:7c:
                    68:a3:d2:0f:c3:20:e5:75:4a:70:70:8b:b3:9b:74:
                    52:95:03:bc:52:06:59:e0:af:f7:1c:22:24:51:89:
                    35:8f:ab:3b:5a:2c:2b:a4:c4:f1:2b:3a:d6:fd:cc:
                    08:f6:b3:7a:39:de:98:78:14:b0:eb:3a:98:07:a8:
                    57:f5:e4:b5:2d:f8:74:5e:2b:ee:4a:04:6d:e6:08:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F7:4E:06:F4:E2:56:AD:6C:58:97:6F:E5:EC:DD:8E:41:DA:86:3F
            X509v3 Authority Key Identifier:
                keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4b:97:e9:70:39:ce:6b:bc:6f:32:14:72:40:6f:bd:f0:8e:
         9b:85:14:6d:a2:24:b0:73:a9:fe:3c:2c:1b:27:a7:80:a0:39:
         36:ad:81:da:3d:f8:5f:02:d1:7b:c6:ff:74:f3:c6:cc:f1:b9:
         33:09:92:83:d8:3a:1a:67:12:e5:b3:ae:9f:6d:62:2d:26:f4:
         7c:94:93:ec:4f:1a:37:80:0a:75:63:8c:a7:a4:b7:67:96:88:
         8d:3a:c8:10:09:b1:a2:0b:8a:be:17:3e:b1:51:4b:f2:34:c8:
         62:70:df:54:c2:07:f4:6a:1f:b2:af:fd:f3:5f:76:af:4b:51:
         79:b9:4b:d0:35:34:5f:47:df:98:72:a2:c4:02:f2:5f:d2:5b:
         a9:dc:12:5d:51:ee:cc:b5:31:d9:20:1c:54:ec:b9:a4:b5:46:
         6d:8b:1c:fe:68:51:0c:9f:37:6f:3a:1a:46:1b:de:89:07:d6:
         1e:cb:c2:77:90:aa:e7:85:e4:df:84:40:82:ba:82:9d:1c:eb:
         01:2f:9e:c4:53:64:90:28:f0:96:63:a6:7b:20:dd:14:4e:49:
         f1:33:c3:b4:ea:b9:93:5e:79:93:4d:9c:72:a7:5e:96:07:42:
         7b:08:f4:c9:a3:09:0f:c4:a3:67:e1:ee:d0:f0:19:9c:18:1a:
         40:38:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:53:02 2026 by rpki-client