Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
File:                     Wc72wcLU1dfibqWTTOGDspjym_w.mft (raw, json)
Hash identifier:          EnzRgCcYHRXSNSSrzR8YuR6AgSieUjc1cZLEGtw+SIk=
Subject key identifier:   9D:0A:91:EE:CE:65:B1:6C:70:87:E1:8C:15:F0:1B:B5:94:4E:1E:40
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Certificate issuer:       /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial:       01A0C28CFC57C6CC095212A42884760BBA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
Manifest number:          DE
Signing time:             Mon 21 Sep 2026 06:00:14 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:14 +0000
Manifest next update:     Tue 22 Sep 2026 06:00:14 +0000
Files and hashes:         1: 8h9N0o1DP4cTa1joJkvtjZ69cPY.roa (hash: QzvwZtMRPLOwFSrMXC5EMOKl6ZFJXjd+NvjDqLCoAws=)
                          2: BuMsAfkHa-6AI8ccw7-eBpf0J6M.roa (hash: yP4C6TlJul/KiVGvD+UG3KhXgh+OIWp2I4u/TGi0zQ8=)
                          3: ISP_LRUi3H-qUiROKRLTXG0ZCSg.roa (hash: nVGzjeuQbZBgx3j88p/HXhsvqoQ3LPEn12/DTiOeylY=)
                          4: Wc72wcLU1dfibqWTTOGDspjym_w.crl (hash: 3LqBsdxoPLBsUb0GnXn2MGy4OCRNNpANpqTNNJxITL4=)
                          5: WnYMq2XpRB6QDhSzZM8aF3MzCrs.roa (hash: GmfV7EEWhKbI0gi0zpi283vs2OrNBsy92kA7RhKK+MI=)
                          6: gyJT59mv6KBVG_Zo9tx_hnZpJKY.roa (hash: EGF+yWuAT2mFnT93FBKX6jU9cu5gZF1RyLSjHRTOPb4=)
                          7: iecDijbzGFi52XpQIrqVxDTqq5o.roa (hash: yUELKL1Lfwx+qeED8Re9HELksNh5w6uJDDVbVgczPpM=)
                          8: j9H05ICBG6NeKqBUo0QOZbr1ebc.roa (hash: COAJnvgwdstpYOrS53924468t7JF7s5mFBTU++mc60A=)
                          9: rF8hKKPYi1_6uvshddsJC7FpHcU.roa (hash: gfmH90XdvGauAKsUY5JnJuPZCvFmZV8GXH8tq56hdGk=)
                          10: tPIdoj3UUYmUkRkD66gzASs_7lw.roa (hash: yc1VdGTD+R18zDVV1b+Z+1bYQb+Hr0FGdKkZS6ve5QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8c:fc:57:c6:cc:09:52:12:a4:28:84:76:0b:ba:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
        Validity
            Not Before: Sep 21 06:00:14 2026 GMT
            Not After : Sep 22 06:00:14 2026 GMT
        Subject: CN=9d0a91eece65b16c7087e18c15f01bb5944e1e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:7d:41:19:17:97:2c:57:04:eb:03:f4:21:
                    46:b4:28:7e:ad:de:53:1d:b6:70:36:37:c3:36:36:
                    da:57:02:c9:3d:a2:56:ea:63:ab:af:58:12:d1:db:
                    ae:9f:2f:c6:27:c2:3b:e7:32:65:1c:fb:7c:9c:ed:
                    cb:3f:37:6f:0a:12:3e:ba:19:87:58:30:d1:23:0a:
                    27:86:75:84:4d:be:e4:16:11:6f:cb:43:cf:ba:82:
                    fa:78:90:63:39:ad:80:2b:e0:a6:36:f2:80:6e:e5:
                    cd:9a:2f:da:52:14:f1:6f:07:2a:a3:0a:9f:e1:51:
                    aa:0c:cf:78:61:72:53:14:b9:5a:da:ab:51:ad:2f:
                    a8:35:c5:b1:5f:40:18:d7:0b:7a:b8:82:03:1e:3d:
                    fe:f3:2c:1b:2e:ac:06:e0:b6:c2:1a:e7:8f:31:4e:
                    f1:8e:71:99:50:f3:bd:78:9d:51:90:bf:69:b1:58:
                    6e:2a:ea:41:50:94:57:1c:a9:d1:a0:ab:8b:77:c1:
                    bb:7b:0e:74:ed:45:c6:35:4e:d8:03:c6:16:e5:ff:
                    bf:88:7d:55:28:64:13:cf:01:de:76:b7:8a:07:02:
                    8b:73:1f:68:69:1b:78:3d:50:17:de:ed:42:8d:79:
                    e3:70:4b:c0:ca:f3:b8:d5:bc:26:f8:da:6a:35:6e:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0A:91:EE:CE:65:B1:6C:70:87:E1:8C:15:F0:1B:B5:94:4E:1E:40
            X509v3 Authority Key Identifier:
                keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:26:36:af:b8:30:b0:2a:94:13:9b:c2:d6:9b:7b:2e:2d:68:
         ca:73:1b:b4:48:20:5a:73:69:c9:05:f5:5c:cb:fe:ce:e8:18:
         4c:2c:d7:35:6e:03:21:1a:60:eb:5c:b0:c5:f5:7f:33:8f:9c:
         98:73:6d:4d:28:6c:a1:bb:06:fe:b3:1d:9d:ba:dd:6a:a8:b5:
         36:14:b9:4d:51:27:10:fa:32:62:55:98:b5:1d:19:20:d5:54:
         ca:2a:64:91:bd:41:63:68:8e:b8:49:94:cd:ae:a3:d8:60:31:
         3d:23:1a:3a:25:01:29:a1:e7:6e:b7:d0:66:a4:a8:79:90:f8:
         bd:a8:7b:58:05:98:11:7d:57:21:5c:f4:3b:2d:e2:8a:97:e8:
         b3:a4:f3:89:fd:23:4f:3b:61:09:ca:d5:8a:0b:43:2c:15:52:
         45:41:89:fd:e1:67:de:e7:cf:44:98:a2:01:11:25:f3:59:43:
         3a:dd:90:be:a9:fa:9f:93:65:46:b8:fb:5a:21:bc:af:29:32:
         89:4f:70:52:83:18:a4:f4:21:99:dc:31:fb:2b:02:5f:a3:37:
         f1:49:2f:bd:51:39:25:9e:ab:53:f9:ed:a2:a3:a7:87:36:19:
         cf:27:44:ba:44:30:50:70:18:d3:d0:56:a4:0a:81:40:4c:d6:
         10:01:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:41:40 2026 by rpki-client