Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          fUmU2XkkHOEiqwO0iRosKMD0kc4n8wUUWcGtiYwMHHg=
Subject key identifier:   7F:7A:13:4D:DC:74:00:CC:EF:00:01:D9:72:A9:FE:14:17:AE:A8:24
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       01A0C3D70EA8F0791EAE144BD0333D3A256E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          0AD1
Signing time:             Mon 21 Sep 2026 12:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:46 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: LFe8mVFptdyBVp3EYcu65nbTNZ2IGJHYLuuiNwuz3GQ=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:0e:a8:f0:79:1e:ae:14:4b:d0:33:3d:3a:25:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Sep 21 12:00:46 2026 GMT
            Not After : Sep 22 12:00:46 2026 GMT
        Subject: CN=7f7a134ddc7400ccef0001d972a9fe1417aea824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:c2:1f:b8:7e:6e:dc:0e:79:98:20:fe:39:
                    04:ce:6c:d7:43:f0:f6:05:ca:61:30:3e:e0:17:97:
                    d8:d6:b8:5d:07:e6:3f:c4:8c:46:67:a9:24:a3:c1:
                    1f:53:51:89:74:c7:3c:f5:9f:cb:4f:d5:b0:b1:ea:
                    3c:d0:16:e7:0c:47:0b:47:d3:2a:2e:45:02:52:ba:
                    af:3c:40:8e:1a:4f:21:ee:48:7f:8b:c1:cb:fc:af:
                    3f:eb:b1:e1:0e:18:7c:d2:dc:fe:12:72:f1:2a:06:
                    ac:a2:41:3b:64:cf:cd:c0:23:ff:27:45:57:58:04:
                    a2:66:11:9c:f2:32:a9:75:71:64:fa:6c:a9:0d:3d:
                    d9:aa:d7:ab:62:16:f4:6f:82:d8:14:58:ae:14:b7:
                    71:9d:14:ac:89:22:62:b1:fb:e5:b5:ae:ee:e9:6f:
                    99:82:c0:a5:bd:26:09:30:d4:75:63:f3:d1:6b:dc:
                    79:9c:77:f5:16:2b:14:92:59:f1:ed:3c:10:38:74:
                    66:6d:d7:8f:8c:5b:16:06:51:e2:65:92:30:0e:fe:
                    2f:d5:a5:7d:76:11:a4:0c:c6:bc:3e:61:f6:60:a3:
                    e6:f2:7d:af:52:5b:2b:f4:6e:54:9e:e8:0d:68:a4:
                    ba:28:ec:2f:c5:55:27:97:d1:cc:97:05:7d:0f:73:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:13:4D:DC:74:00:CC:EF:00:01:D9:72:A9:FE:14:17:AE:A8:24
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:a6:36:8f:2a:2c:1e:5f:b9:53:7b:24:44:de:84:90:cb:
         2e:ae:e0:b0:77:41:fc:8e:92:6c:0a:4f:f5:12:fd:f1:99:8d:
         70:74:ea:01:ad:d7:ea:6e:ad:a4:99:eb:65:dd:62:cf:0e:47:
         0c:6d:43:a4:ee:33:13:e6:64:40:c2:24:aa:b6:fc:a0:b3:cb:
         01:ad:47:5e:de:1c:d0:48:a2:d2:91:22:93:68:87:5b:6a:bc:
         f8:c5:02:7a:78:79:6d:2a:00:cf:ce:64:70:26:28:59:df:4f:
         a0:1a:fb:d1:82:88:6f:09:40:31:10:5b:f6:07:4a:29:46:c4:
         b1:f4:4c:57:c3:7a:c5:9e:cc:b3:0a:61:aa:77:eb:85:17:aa:
         63:a6:3a:6b:cf:62:da:71:1f:c0:86:4b:e3:81:11:96:d5:c1:
         b9:9e:fb:d3:76:70:f6:74:03:11:01:14:26:44:72:a4:cd:1f:
         6c:93:12:ad:f9:b2:85:9e:2b:7f:bb:68:a6:e0:44:9f:f6:6b:
         ba:be:94:82:c4:10:30:ae:b7:09:d6:7f:a5:0b:0c:26:cf:16:
         4c:64:e5:6f:10:73:5c:f7:5c:82:ab:c0:c5:f5:80:a4:4a:d9:
         57:56:65:24:eb:10:db:27:d2:89:71:31:e3:92:45:ee:15:9d:
         66:85:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:50:30 2026 by rpki-client