Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          tsGwxrOR90gJKgvTJHvh4rjWF7DUtjMCkUDzStTEzqc=
Subject key identifier:   A8:DC:E5:96:EC:11:A3:DD:9B:66:71:14:A5:90:2E:4B:EF:2E:24:07
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       01A130D897F5D8A51F3A1E7137334F93B4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1AB3
Signing time:             Mon 12 Oct 2026 16:01:03 +0000
Manifest this update:     Mon 12 Oct 2026 16:01:03 +0000
Manifest next update:     Tue 13 Oct 2026 16:01:03 +0000
Files and hashes:         1: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
                          2: MV0PEtEAVz8oWit9PFrLe1hLSck.roa (hash: Di1VZRsfDQtFnrr5bv1XXI0tFLJXBe+C/kKalWG3jf8=)
                          3: TUjQx-SCeFceGAtPQxFXJNzqxpo.roa (hash: gK+ZRgHX462dQbtKVmO0TKz0Zq0HpGa0egijOyBQn+c=)
                          4: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
                          5: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
                          6: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (hash: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=)
                          7: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
                          8: fN8blsar4uk3CFDp_6xMSmC4GZ4.roa (hash: Se9bMqfGOKgf+Jc52q2agg90/5A68AwV65YDYKowZso=)
                          9: g2E1f-BxBAur9lYreK_DDpQmlrA.roa (hash: B5+1L111o4GgfrlNcBbCeeD8BCchToJhANvD28KbrqA=)
                          10: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
                          11: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: hc4RNgPDR8+LouRavd4vtEgurZnfmVQ8dAbwFPmzAYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:d8:97:f5:d8:a5:1f:3a:1e:71:37:33:4f:93:b4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Oct 12 16:01:03 2026 GMT
            Not After : Oct 13 16:01:03 2026 GMT
        Subject: CN=a8dce596ec11a3dd9b667114a5902e4bef2e2407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:36:68:7b:3c:c4:49:d5:ae:f5:aa:0c:1b:
                    5c:86:ae:8a:b3:86:9d:43:a4:43:52:02:d1:b9:04:
                    2b:da:22:58:da:f1:62:e5:b0:49:82:86:62:3e:e0:
                    5c:d1:04:9c:af:3c:ff:ec:11:10:ef:8f:27:63:8e:
                    4d:2b:2f:99:1d:2f:8f:fc:5f:89:d1:ff:d2:5a:fc:
                    31:71:02:ba:3d:74:48:57:1c:ab:16:59:4d:6e:77:
                    9b:83:2e:90:78:f0:5a:45:ca:67:eb:d6:3f:58:f0:
                    19:6a:f2:a7:ef:d4:80:ef:de:49:e4:37:54:33:7c:
                    85:75:35:d3:84:82:13:99:5e:f6:da:f9:5e:cd:4a:
                    1a:39:d0:d2:55:46:55:e2:69:41:15:45:30:94:1b:
                    e0:eb:a4:11:fc:6d:bf:e1:fa:d1:ab:18:45:6a:91:
                    e6:cb:76:d3:65:36:89:11:1d:34:ba:d8:d4:69:4f:
                    a1:94:31:a0:eb:28:68:52:22:c9:a4:9e:5d:d0:73:
                    db:f0:f2:56:18:28:9e:ab:b2:d8:fe:63:9e:71:f8:
                    89:c8:6f:e8:d4:83:93:c6:25:86:73:b0:6f:d0:d6:
                    d9:98:ae:ee:22:ee:8e:3b:fd:11:96:ad:d8:04:df:
                    7c:c2:3e:9c:70:f0:83:b3:ce:98:ea:c4:76:c2:71:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:E5:96:EC:11:A3:DD:9B:66:71:14:A5:90:2E:4B:EF:2E:24:07
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:3c:bb:0f:ac:ec:b8:76:5c:94:99:c9:57:ad:bc:e0:cb:
         0b:4b:d8:ba:e4:2e:84:f5:cb:6e:12:7b:17:0a:08:33:1b:0a:
         69:c9:20:45:72:06:92:b3:9c:56:dc:08:08:4d:7f:fe:29:38:
         25:68:bb:fc:8c:a0:c0:7e:62:72:8a:50:93:c1:00:bf:77:c9:
         c6:91:0a:72:ca:17:85:6a:bd:66:dd:b2:61:04:2a:3b:08:2c:
         33:66:9a:be:9f:e1:92:20:58:8f:8a:25:1c:0c:1f:17:fa:f2:
         f1:67:c1:b0:5e:75:21:26:58:c2:67:cc:50:17:42:bf:11:ae:
         13:b7:7d:48:31:aa:62:94:d0:55:b1:00:90:b3:9f:d5:00:aa:
         bf:b4:37:45:73:e0:cb:3d:e9:a6:cf:c8:0d:02:ed:08:12:34:
         74:df:92:b8:08:10:7c:69:7d:4c:91:88:db:d1:1a:1c:62:2c:
         56:03:f9:86:b8:3c:b1:95:0b:21:68:fe:ac:c5:0d:4a:2f:e7:
         e8:29:fd:07:6b:5e:56:3a:71:6c:08:20:00:c3:8b:1c:4d:ca:
         b5:28:55:a2:db:d7:26:5e:bb:b9:80:f4:05:5d:e7:78:be:bf:
         8a:b9:bf:0d:65:a6:92:e3:ca:40:98:68:a6:c3:42:75:d1:d2:
         a4:48:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:46:27 2026 by rpki-client