Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          QIbNazFmohGWrK7ZqE9iXHxvQ3Eba84p38uO20uFv/M=
Subject key identifier:   A7:BA:CB:9F:0B:C6:F3:C9:AB:1C:53:53:C6:FD:16:F3:38:D9:83:5B
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       01A0CA0FC046CCF31547DD6544DB0800A02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          0C4A
Signing time:             Tue 22 Sep 2026 17:00:24 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:24 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:24 +0000
Files and hashes:         1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=)
                          2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=)
                          3: PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa (hash: upIljczPhg0qz3Pzpmtl5kRlJn9GZ5N1pBXA6jY4G1g=)
                          4: Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa (hash: f+vgH/8lCAyoaopM+ARWem0PqsHCRHeZDcYhmCyBUow=)
                          5: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: BrCcF+Qrjkdnw2EdNNEt6op3q0bAORFHg+xKDpq8Ci8=)
                          6: beCqMYhwCg21aSUTwrhNMW4LcEY.asa (hash: 1lmykIh7IPZhs4mpEd/DgaG6yCKrGTPv5ZzBaPKUw4c=)
                          7: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:c0:46:cc:f3:15:47:dd:65:44:db:08:00:a0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Sep 22 17:00:24 2026 GMT
            Not After : Sep 23 17:00:24 2026 GMT
        Subject: CN=a7bacb9f0bc6f3c9ab1c5353c6fd16f338d9835b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:c4:45:8a:03:73:9b:f4:37:f7:04:b5:13:
                    65:89:f6:d9:24:16:2f:9a:cb:36:9a:b8:da:79:dc:
                    a0:e4:99:fa:2e:db:b3:8d:c4:da:73:6c:1e:f1:b0:
                    e9:d7:95:6c:40:62:69:9b:31:67:ab:33:0a:04:49:
                    ab:19:7b:05:29:67:b4:a6:5d:89:80:25:6c:61:d9:
                    cd:bb:c9:5f:50:6d:2d:d5:b5:ee:0d:17:50:fc:d7:
                    f5:4a:ce:87:a6:b7:85:00:a0:9f:d0:39:4c:4d:11:
                    c6:54:90:61:58:7f:37:5d:fe:2c:45:10:f8:70:a2:
                    fb:a4:59:46:4d:5e:9c:43:d4:02:46:13:29:2d:81:
                    1e:98:46:7a:78:c3:eb:40:13:78:77:58:03:4e:73:
                    6e:a9:ac:9a:e4:4f:c0:a5:b3:16:06:11:ef:97:68:
                    c6:76:f2:09:ed:26:7f:ca:dd:2c:8c:47:ac:83:b8:
                    ec:74:8f:71:b9:3f:ed:6c:90:2c:fa:3f:5d:67:c9:
                    14:1b:1a:7a:eb:3d:3c:2c:48:ec:8a:16:d1:3b:6f:
                    6e:07:cd:18:af:31:cf:f2:a0:6d:88:e3:03:2c:c6:
                    ba:cf:93:0e:ea:ed:a6:55:79:36:71:6f:d5:6c:a2:
                    10:ac:0b:63:00:a8:d2:e7:b7:8a:75:15:2b:25:1d:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:CB:9F:0B:C6:F3:C9:AB:1C:53:53:C6:FD:16:F3:38:D9:83:5B
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:48:3e:6f:ed:f8:56:36:c4:d0:d8:25:97:b9:da:2d:d5:
         b5:6d:83:b2:a6:9d:2f:7f:d9:15:13:12:ff:94:92:26:96:c1:
         66:7c:e8:ea:55:52:10:8f:39:0e:63:be:3d:03:69:86:e2:18:
         78:dc:34:a5:37:00:21:28:7d:62:91:7d:ce:bf:a6:7f:1d:43:
         c4:ee:52:3c:cb:5f:98:da:09:b7:2c:21:48:be:a8:7e:88:aa:
         8a:04:86:58:7c:4e:e7:3d:83:b7:40:bd:d9:2d:9e:fa:e2:e5:
         1f:f9:51:69:65:b5:10:5f:47:89:2f:7e:78:0d:08:45:bc:d4:
         19:c3:37:20:d1:16:32:75:9a:45:88:9f:36:dd:14:a2:27:18:
         82:99:7a:38:b0:e9:33:40:85:76:e1:32:da:32:63:d0:6a:64:
         a9:f0:c6:5e:9b:69:24:42:12:c6:44:2c:bf:50:b3:9c:d2:3f:
         61:97:20:40:e8:9b:54:88:09:52:ba:e3:9a:a5:d1:1e:84:dc:
         e6:fb:26:f7:5d:1b:c7:52:3a:27:81:b0:22:80:30:e2:00:c8:
         7e:99:f4:a3:69:62:99:a3:bd:31:31:c7:26:42:ce:7f:b8:fc:
         56:44:48:e4:4d:d8:ce:e8:c1:1c:14:2b:be:f9:e2:6d:aa:a0:
         28:70:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:17:41 2026 by rpki-client