Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File:                     Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier:          w2hWwaFagAMHd/gxGAjU8NYI+Krr7liXxr5178e1Ud0=
Subject key identifier:   A4:9F:C0:4A:FE:6B:21:DE:87:88:C6:E6:A7:BE:A9:C6:C4:ED:DE:32
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer:       /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial:       01A0DA2842F11131655706236DBCCC282A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number:          0EB2
Signing time:             Fri 25 Sep 2026 20:01:06 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:06 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:06 +0000
Files and hashes:         1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: jPa47PCnHwvf8jBqoWOxgTxYqU4Xo4bngfBW5S6W4fQ=)
                          2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:42:f1:11:31:65:57:06:23:6d:bc:cc:28:2a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
        Validity
            Not Before: Sep 25 20:01:06 2026 GMT
            Not After : Sep 26 20:01:06 2026 GMT
        Subject: CN=a49fc04afe6b21de8788c6e6a7bea9c6c4edde32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:0d:8c:0e:2e:6f:cb:46:20:88:86:1d:e0:
                    08:dd:74:8d:09:26:bb:9a:8e:d2:3e:76:6a:b1:a6:
                    af:7c:60:8b:3d:7e:06:dc:10:45:49:31:a2:1d:ea:
                    58:67:6c:96:a4:e8:8a:d8:c2:87:8a:36:dc:a0:0e:
                    7b:8a:d4:f4:e1:cd:b5:07:70:90:9f:29:0a:74:f4:
                    70:7a:b7:cc:9b:84:65:42:01:02:91:b8:f4:7e:bb:
                    17:bc:74:a5:ff:3b:7b:0a:12:71:7f:ac:bb:15:53:
                    c6:99:ae:ab:cc:32:5a:72:98:2d:b7:a0:fb:9f:a5:
                    09:b5:e2:99:32:bb:ff:2b:04:77:e4:f0:8f:37:f4:
                    b1:88:24:61:be:10:b1:9d:b2:a1:35:a5:c1:91:b3:
                    43:8c:e1:10:43:a0:f9:b6:c1:15:52:05:b2:7a:88:
                    73:7c:f8:90:d6:cf:d7:fc:db:c9:8b:b7:d7:61:08:
                    8b:33:e3:ad:21:9b:3c:d5:f4:83:14:33:77:b4:29:
                    78:45:10:7c:fd:ae:88:13:44:03:6e:a4:e8:07:e4:
                    54:2d:c6:43:3b:34:a8:e3:05:7d:ec:c0:62:2b:a2:
                    28:fb:16:e2:6d:8c:33:00:6d:6f:8a:1a:90:c1:7b:
                    73:4f:87:32:73:3d:4b:dc:a6:df:2e:ab:25:6b:eb:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:C0:4A:FE:6B:21:DE:87:88:C6:E6:A7:BE:A9:C6:C4:ED:DE:32
            X509v3 Authority Key Identifier:
                keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1a:a6:fe:bb:c6:f6:ed:82:24:76:a9:ea:f6:95:da:80:38:
         f3:0c:4e:f1:bb:b6:18:d5:bf:c8:f8:9c:8a:4c:ab:27:d9:6d:
         2f:8c:21:e2:df:4c:0a:43:7a:14:64:a6:27:8d:ce:47:af:3a:
         d6:1a:1e:05:08:f1:dd:37:1d:a8:ab:3e:56:3b:c6:63:47:d9:
         5c:a8:97:6b:44:8c:fd:6a:1d:77:7c:a4:43:fb:b2:05:7a:87:
         80:d6:78:86:f7:b8:56:36:b7:d3:c2:ba:da:90:00:0f:1d:a4:
         eb:01:8d:83:28:1b:26:af:bd:df:0f:5d:19:43:45:39:cb:3d:
         c2:86:fd:aa:64:5e:22:09:25:2b:b6:ad:a4:5f:ae:80:72:cd:
         2a:6e:23:9c:9e:ce:5d:8a:c0:8e:9f:3b:59:4b:f4:7e:ac:28:
         52:3b:a0:95:00:6a:ab:6c:fd:ff:b2:cc:8c:3d:9f:1d:b0:ef:
         6e:db:86:66:ac:07:9f:4c:73:e2:48:94:5a:d6:98:c9:19:e5:
         44:2d:c2:ef:c4:03:e2:a5:6a:92:22:aa:22:18:c1:34:9b:48:
         94:ab:d8:35:d3:39:90:8c:2a:02:76:46:68:27:6f:af:32:8a:
         f3:49:de:d5:98:4c:38:1d:35:5d:05:8d:d0:6c:95:24:b6:a9:
         78:b1:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:03:59 2026 by rpki-client