Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          0AavvQpts2qKfGDfqD3W3j8DPsesUWM7NuuYjWSgvw8=
Subject key identifier:   41:67:9D:F6:85:1D:9C:C7:10:C6:59:FC:FE:0E:79:87:57:B4:44:82
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       01A0D9F20709BC7F2ECA4B9D0B73A494C4A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1A80
Signing time:             Fri 25 Sep 2026 19:01:52 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:52 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:52 +0000
Files and hashes:         1: 7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa (hash: Pq6qLtXzClwLxML1ozcVt+Ip73JNmGPve9pIBAJv6IA=)
                          2: Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa (hash: Fl5GSOOt62GrdSA1DfCyrlVCI+6NRse3s+pMK1jPEng=)
                          3: q5DJrkGpFtBRVSTiER6qubZrzwg.roa (hash: d2oZQywAG8/Q2HF8swgC8YVUSDiFpeqcb9GLnII1M0c=)
                          4: rMdXeptRpu0Pt2xvscICCvTvL1w.roa (hash: /3qPf2GIjkHB+ECKNRa9eV5BXy6n4Np+NAUC/iSaKqg=)
                          5: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: CFdnoXRFy0jr3RyikvxdhH4TNo7gKQjk8masl80O7oQ=)
                          6: z72WIHR7SLwLV2ZSRlXXT9gLMs4.roa (hash: whvRH345bUn/JKT0N6wVnZvM88uU9/EvdQEmQRqS4Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f2:07:09:bc:7f:2e:ca:4b:9d:0b:73:a4:94:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Sep 25 19:01:52 2026 GMT
            Not After : Sep 26 19:01:52 2026 GMT
        Subject: CN=41679df6851d9cc710c659fcfe0e798757b44482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:ca:5d:1d:da:c0:20:86:cb:af:de:d8:3e:
                    91:62:56:03:ed:8e:49:a9:9a:36:48:9a:db:55:88:
                    72:a1:e5:39:ae:a3:98:b6:a3:7e:48:59:a7:43:ad:
                    5d:3b:37:3a:78:22:0d:ac:1c:07:6a:f7:6f:92:db:
                    a1:f0:d6:bb:61:c0:3c:be:20:6a:82:db:8d:73:06:
                    e1:c2:a8:ac:10:03:8e:9e:7e:89:87:30:b3:4b:92:
                    54:29:a5:8b:e4:e8:e6:02:be:c6:98:fe:bd:dd:86:
                    f5:2e:0e:b9:45:74:9b:f3:22:81:26:7f:d8:2f:27:
                    16:69:85:29:c9:f8:bc:1b:80:b0:5b:b3:2a:dd:ab:
                    1f:e0:c8:7e:c1:fe:8f:c5:d8:3d:32:4a:97:16:49:
                    a2:e7:9d:e6:f1:fb:a7:47:5f:cb:ea:53:4a:84:93:
                    c5:23:53:11:14:c1:d1:23:7e:36:90:29:ec:71:74:
                    2c:52:9b:d0:c0:87:7f:60:ae:00:c0:3e:fc:30:57:
                    e3:15:40:55:f4:60:ea:6f:cd:ad:2c:d1:29:29:52:
                    46:86:dc:12:11:6e:73:6c:60:fe:b3:77:18:90:81:
                    bf:0a:6f:12:b5:1c:37:1a:28:27:6f:71:42:51:2b:
                    09:cd:1a:01:de:da:0f:eb:07:c7:f9:5d:20:16:22:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:67:9D:F6:85:1D:9C:C7:10:C6:59:FC:FE:0E:79:87:57:B4:44:82
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:f1:d5:77:41:83:43:49:bb:fc:0c:cb:80:cf:b9:36:04:
         2b:e4:aa:02:4c:8c:a9:eb:3f:95:f6:a2:89:d8:db:6e:49:b1:
         70:56:10:1f:45:be:97:27:d7:e0:e3:56:f1:28:a8:c7:eb:1c:
         aa:0b:13:0a:ae:6c:25:8e:cd:15:5c:c9:7d:a3:f5:58:ee:22:
         ee:6b:c8:b3:40:fe:c5:53:23:e1:4d:7e:e3:ea:73:13:ad:9c:
         ea:26:19:e8:5e:cf:04:30:35:cf:e1:d3:0c:9c:c1:97:a8:4d:
         94:6f:1b:0d:25:e5:b3:77:0c:a3:34:3c:a7:67:a7:d8:1b:19:
         9d:83:ce:0e:ac:a5:55:b9:16:1a:d1:31:14:cb:38:e2:38:f2:
         cd:be:6a:6d:d7:be:9a:57:dd:41:21:c8:5c:76:00:27:ff:a6:
         ca:2a:2d:d6:67:27:54:40:b9:a7:9c:2f:a0:a8:9c:f6:3c:c6:
         a5:f7:7c:eb:2d:71:cf:45:a6:2e:5a:66:d6:f7:1a:62:0d:b1:
         e5:12:5a:02:28:05:b6:c8:5d:4d:ed:89:92:bc:9b:01:a1:1a:
         f0:04:0d:75:37:c9:46:a9:17:84:a4:87:4e:1c:c6:f1:89:4c:
         f4:61:46:84:92:c1:ea:04:16:3e:8e:5a:f1:16:5d:62:65:dc:
         8b:09:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:56:45 2026 by rpki-client