Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          CNGuHAXp+zvN9Ntq2mohhrkaXxfgvfEPAI+U6av8fhY=
Subject key identifier:   1F:0F:6E:2C:A0:55:AE:18:ED:5C:F1:BB:B1:53:D0:5B:B9:D5:B5:9A
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       01A0C3A04541B0E26D9530587FB423C9D0E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          13B5
Signing time:             Mon 21 Sep 2026 11:00:55 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:55 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:55 +0000
Files and hashes:         1: CaF9jDRtHy3skgKS7QCnXm4PI7A.roa (hash: V9ZLClAO25ZfSnTZeTYg00I4twtSynvhNaSIPSAPlv0=)
                          2: bSfoqAesrmojtDNBxt2VZHxOHqI.roa (hash: Z7b9r8p1AdR9DmR8LmSnmnhIJm2T4hKdRLt3c111qtg=)
                          3: puvvxkuyGGm9hRKcVBF60FM3T20.roa (hash: 859vc/MnpuH2XD8iZDZO4+LCLxVjdb1X9+4Sxo2qG9k=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: TVIWbXAmln7NHGrhJesUBaTfWDUKnZzt9ZPriN0TiG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:a0:45:41:b0:e2:6d:95:30:58:7f:b4:23:c9:d0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Sep 21 11:00:55 2026 GMT
            Not After : Sep 22 11:00:55 2026 GMT
        Subject: CN=1f0f6e2ca055ae18ed5cf1bbb153d05bb9d5b59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:c4:98:53:50:08:04:3b:db:91:80:9e:eb:
                    ce:cd:40:35:13:39:02:87:26:4a:35:db:03:80:8a:
                    e5:e1:72:36:13:f9:df:68:2d:84:31:4c:e6:e2:4d:
                    65:6d:a9:02:c5:17:01:39:37:b8:93:23:4d:ea:69:
                    7e:17:ae:62:37:96:31:92:38:e3:2d:e4:13:f0:68:
                    ea:61:af:99:cb:9a:18:47:f6:87:ac:46:25:06:50:
                    51:4a:f8:15:10:9b:65:8a:11:a6:b6:06:43:db:2c:
                    fc:82:31:c9:6d:72:1f:bb:58:bd:83:d4:5d:b6:b0:
                    d4:e5:e6:f5:60:a0:41:ba:0d:1a:45:e0:35:ef:c9:
                    a9:22:22:e1:4c:5b:ff:69:07:a9:a6:52:07:6b:3b:
                    7c:46:8d:49:e5:66:a7:c5:43:42:5f:51:5e:a3:71:
                    dd:b5:66:bb:00:8d:20:71:33:b1:bc:10:87:08:e4:
                    5c:f9:a0:83:62:2e:12:98:f3:5f:88:38:65:b9:50:
                    83:20:80:fe:03:39:f6:af:af:eb:37:16:3e:5d:12:
                    1d:e8:a6:59:6a:9a:15:d7:25:33:85:7f:5a:bd:5c:
                    6a:20:eb:d2:f1:0b:89:a4:bb:ec:48:56:fa:6c:2c:
                    7b:7e:cf:c5:c5:2e:a2:d7:aa:c9:64:b3:68:6b:8c:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0F:6E:2C:A0:55:AE:18:ED:5C:F1:BB:B1:53:D0:5B:B9:D5:B5:9A
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:49:db:2e:c8:95:20:b1:15:a8:49:93:2c:98:87:fb:bd:
         4f:1c:3e:2e:b7:f9:29:a5:8f:0a:f4:8a:70:91:12:12:46:f2:
         d7:94:b7:16:51:61:37:f8:61:83:09:5f:6c:5d:94:52:34:35:
         fe:da:44:e5:e6:77:23:f7:13:e7:0c:0e:20:e6:bf:03:e6:9a:
         89:50:17:71:7b:47:50:5e:e2:95:11:3a:31:fc:86:3b:cc:42:
         02:75:f0:97:5c:73:26:e0:68:66:61:e7:16:c3:ab:cf:f3:dd:
         4d:cc:b8:8d:16:c2:b6:2b:40:cb:3f:e2:15:cc:d6:b9:69:d3:
         f7:98:18:ab:e6:d2:fb:18:12:ba:ae:2c:d9:14:0b:2d:76:73:
         ce:38:20:f5:9e:8c:aa:d0:7d:d3:7e:ed:5a:a1:27:14:09:7d:
         09:cf:cf:a9:f9:e7:26:a3:7f:b0:df:2e:74:53:ba:6d:86:9a:
         d5:cb:c2:b8:00:25:d4:da:1e:d6:f9:6b:d9:a2:07:2b:da:7f:
         43:cb:20:e6:e6:04:da:cd:3b:49:8c:42:ab:6e:3c:81:da:40:
         b0:5d:e1:cf:f3:c9:5e:c7:37:cc:b7:77:2d:77:e4:5c:ed:35:
         23:94:60:c1:96:a7:49:37:f2:e7:47:d5:98:5c:3d:13:99:6c:
         9e:d7:d2:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoEVBsOJtlTBYf7QjydDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh
NmI0ZDIwHhcNMjYwOTIxMTEwMDU1WhcNMjYwOTIyMTEwMDU1WjAzMTEwLwYDVQQD
EygxZjBmNmUyY2EwNTVhZTE4ZWQ1Y2YxYmJiMTUzZDA1YmI5ZDViNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF/EmFNQCAQ725GAnuvOzUA1EzkC
hyZKNdsDgIrl4XI2E/nfaC2EMUzm4k1lbakCxRcBOTe4kyNN6ml+F65iN5Yxkjjj
LeQT8GjqYa+Zy5oYR/aHrEYlBlBRSvgVEJtlihGmtgZD2yz8gjHJbXIfu1i9g9Rd
trDU5eb1YKBBug0aReA178mpIiLhTFv/aQepplIHazt8Ro1J5WanxUNCX1Feo3Hd
tWa7AI0gcTOxvBCHCORc+aCDYi4SmPNfiDhluVCDIID+Azn2r6/rNxY+XRId6KZZ
apoV1yUzhX9avVxqIOvS8QuJpLvsSFb6bCx7fs/FxS6i16rJZLNoa4yy1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8PbiygVa4Y7Vzxu7FT0Fu51bWaMB8GA1UdIwQY
MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt
ZDU5ODQ1ZmI5YjNkLzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk
LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAtJ2y7I
lSCxFahJkyyYh/u9Txw+Lrf5KaWPCvSKcJESEkby15S3FlFhN/hhgwlfbF2UUjQ1
/tpE5eZ3I/cT5wwOIOa/A+aaiVAXcXtHUF7ilRE6MfyGO8xCAnXwl1xzJuBoZmHn
FsOrz/PdTcy4jRbCtitAyz/iFczWuWnT95gYq+bS+xgSuq4s2RQLLXZzzjgg9Z6M
qtB9037tWqEnFAl9Cc/PqfnnJqN/sN8udFO6bYaa1cvCuAAl1Noe1vlr2aIHK9p/
Q8sg5uYE2s07SYxCq248gdpAsF3hz/PJXsc3zLd3LXfkXO01I5RgwZanSTfy50fV
mFw9E5lsntfSJw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:35:51 2026 by rpki-client