Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File:                     wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier:          KuE+C0D8f/7nAY0GmcYSIVxRpQTqQv6K4BkR/++1zC0=
Subject key identifier:   7E:1C:84:0B:59:EE:6C:1D:E4:5C:10:28:F1:10:BE:F0:E5:2F:83:5E
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer:       /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial:       01A0C5C51462A8E657B105FD5AA611C1ECCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number:          074A
Signing time:             Mon 21 Sep 2026 21:00:22 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:22 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:22 +0000
Files and hashes:         1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
                          2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: EcHenevyVH5b5a7b1eMthEXLw5lGlSADNPhvGcL4SMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:14:62:a8:e6:57:b1:05:fd:5a:a6:11:c1:ec:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
        Validity
            Not Before: Sep 21 21:00:22 2026 GMT
            Not After : Sep 22 21:00:22 2026 GMT
        Subject: CN=7e1c840b59ee6c1de45c1028f110bef0e52f835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e2:de:f4:56:51:8a:b3:07:b8:b6:c5:94:2f:
                    2c:45:bb:e7:70:27:5d:e5:36:4f:ae:69:b8:72:3e:
                    80:58:6e:cd:b2:e4:30:63:03:af:68:3f:e6:f9:01:
                    bd:1a:4b:e5:42:50:b2:45:1a:17:73:fa:0b:21:06:
                    d3:17:59:18:be:38:1e:0a:2e:65:d2:ce:51:07:1d:
                    9c:fc:ba:7e:0a:52:84:24:12:b8:04:21:06:2c:5a:
                    e8:2d:18:61:27:53:0a:f1:a6:68:59:a2:f1:bd:db:
                    24:32:5c:e9:ef:e8:ef:10:79:5a:f9:11:1d:ae:cc:
                    ee:f8:a4:f5:94:89:ec:92:5c:5d:92:26:b3:7a:43:
                    7e:5c:f8:90:9d:99:44:c5:92:27:83:81:ea:3f:a1:
                    59:20:52:fa:fa:b3:a7:58:be:90:66:e7:d5:83:e3:
                    c8:75:9f:de:e1:73:4c:73:02:4c:40:73:f7:d0:41:
                    ac:ee:d2:ba:a3:e8:59:71:91:74:27:35:11:0c:81:
                    2c:75:92:86:b0:5f:f7:65:37:ae:d6:10:e8:1d:20:
                    aa:bd:17:77:fc:73:08:87:bc:79:3c:e4:28:3b:9e:
                    bc:16:b2:f6:d7:28:7e:de:e0:5f:30:97:82:56:c0:
                    76:6b:48:d7:d2:90:4f:c7:3f:61:28:25:a9:27:32:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1C:84:0B:59:EE:6C:1D:E4:5C:10:28:F1:10:BE:F0:E5:2F:83:5E
            X509v3 Authority Key Identifier:
                keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:aa:a8:e6:0a:26:6a:12:08:83:8f:0a:e8:53:ce:2c:1a:
         e0:3c:82:3f:39:02:8b:5d:72:75:c6:84:62:9d:33:3a:7e:54:
         78:06:fc:87:f3:aa:03:3f:18:6d:ea:25:70:96:db:a1:8d:11:
         fe:21:d3:e0:30:62:a7:b9:dc:3a:21:dd:f7:c6:0e:72:9e:58:
         c3:4d:b4:ca:89:38:09:8c:1c:a9:95:3b:43:6c:4a:06:2d:19:
         97:52:5f:17:31:aa:54:b5:d8:34:c8:d7:d3:27:ae:51:f3:6f:
         26:60:b6:0d:6c:ba:6c:76:60:50:15:2a:48:68:d6:07:90:9d:
         87:ad:62:19:4b:5a:41:79:67:f3:ce:32:3b:aa:3e:86:15:1b:
         e9:01:73:8e:4e:37:aa:2a:d9:f6:f7:29:48:c3:6a:46:c6:ad:
         6e:7c:2a:09:a1:2f:dd:11:e0:bd:3f:41:0f:84:71:74:14:95:
         77:9a:a3:16:51:d3:1a:1c:7b:f2:3c:d4:c5:7b:6a:e8:50:66:
         8c:74:8e:ba:64:3c:2f:bb:5e:3b:fc:94:e7:33:9d:29:1c:3b:
         39:52:10:2a:a8:06:da:f0:95:5a:31:91:de:ac:ee:67:98:e9:
         6b:d4:50:df:58:4e:7c:07:53:b3:e2:b7:e0:b1:1d:c8:96:b9:
         68:34:3d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxRRiqOZXsQX9WqYRwezNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2
ZGQ4MWYwHhcNMjYwOTIxMjEwMDIyWhcNMjYwOTIyMjEwMDIyWjAzMTEwLwYDVQQD
Eyg3ZTFjODQwYjU5ZWU2YzFkZTQ1YzEwMjhmMTEwYmVmMGU1MmY4MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uLe9FZRirMHuLbFlC8sRbvncCdd
5TZPrmm4cj6AWG7NsuQwYwOvaD/m+QG9GkvlQlCyRRoXc/oLIQbTF1kYvjgeCi5l
0s5RBx2c/Lp+ClKEJBK4BCEGLFroLRhhJ1MK8aZoWaLxvdskMlzp7+jvEHla+REd
rszu+KT1lInsklxdkiazekN+XPiQnZlExZIng4HqP6FZIFL6+rOnWL6QZufVg+PI
dZ/e4XNMcwJMQHP30EGs7tK6o+hZcZF0JzURDIEsdZKGsF/3ZTeu1hDoHSCqvRd3
/HMIh7x5POQoO568FrL21yh+3uBfMJeCVsB2a0jX0pBPxz9hKCWpJzKy9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4chAtZ7mwd5FwQKPEQvvDlL4NeMB8GA1UdIwQY
MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt
MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh
LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPGqqOYK
JmoSCIOPCuhTziwa4DyCPzkCi11ydcaEYp0zOn5UeAb8h/OqAz8YbeolcJbboY0R
/iHT4DBip7ncOiHd98YOcp5Yw020yok4CYwcqZU7Q2xKBi0Zl1JfFzGqVLXYNMjX
0yeuUfNvJmC2DWy6bHZgUBUqSGjWB5Cdh61iGUtaQXln884yO6o+hhUb6QFzjk43
qirZ9vcpSMNqRsatbnwqCaEv3RHgvT9BD4RxdBSVd5qjFlHTGhx78jzUxXtq6FBm
jHSOumQ8L7teO/yU5zOdKRw7OVIQKqgG2vCVWjGR3qzuZ5jpa9RQ31hOfAdTs+K3
4LEdyJa5aDQ9Xw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:28 2026 by rpki-client