Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          4UBWkm65a+aIRsIvVbJBIpdm4bw3QSkAxJIB59aiuBU=
Subject key identifier:   C0:9F:F4:12:8C:86:31:5D:45:40:8B:87:32:3C:51:43:BA:EF:86:31
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       01A12AD68D31DEC84EBF33F16677FD7DC589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          0437
Signing time:             Sun 11 Oct 2026 12:01:06 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:06 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:06 +0000
Files and hashes:         1: 9PaaOmSrOKJberWeGKQpWTfgVbM.asa (hash: gv1K/NL9Q+mdG4vtMNP0YBGVCY29lnFJ34ohTAPnDSI=)
                          2: W9NokyXaMzMGQz2rT0ueVLsJj_c.roa (hash: H8qWbLTHoDh177+NLvlgjLRNqnjZkh6wnZIU1T8Kptk=)
                          3: XZSvF1-oCwgkEvyaA1zcCmMQRoQ.roa (hash: 7a2EYboJJn6eoh9awdDzHi5JfGRJnf5woWJ2uiIzujI=)
                          4: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: YWazX5kfe3bU0eHwlJLa7b9wE3ToHCpYIWG1l5kEyPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:8d:31:de:c8:4e:bf:33:f1:66:77:fd:7d:c5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Oct 11 12:01:06 2026 GMT
            Not After : Oct 12 12:01:06 2026 GMT
        Subject: CN=c09ff4128c86315d45408b87323c5143baef8631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:af:71:26:ba:fa:39:31:37:3c:ba:4c:8a:
                    2f:fc:60:10:e2:f2:ff:1b:51:d3:63:52:5b:09:23:
                    1b:35:22:09:55:62:f7:82:4f:29:e9:58:97:0f:65:
                    e1:0b:ce:06:3d:60:32:73:02:52:48:27:68:16:97:
                    51:34:02:ec:12:ab:01:9b:4f:4c:17:27:b0:7a:ee:
                    f5:f2:90:3f:fe:79:f6:8f:b3:15:10:36:93:da:66:
                    7a:f5:d8:0a:d5:c1:a9:ef:73:b4:22:e3:1d:f1:1d:
                    d3:31:0e:83:68:31:e6:d1:44:af:dd:e5:2f:0d:89:
                    e4:a3:f6:ab:83:ef:06:d7:af:aa:b3:4f:af:55:ea:
                    37:4c:c4:5b:1c:77:e8:69:54:ac:20:e1:6e:16:4e:
                    a8:20:3f:02:16:55:fb:55:6d:99:22:e5:d8:1d:22:
                    8c:a4:08:c1:bc:97:8e:5c:3a:df:c7:b2:e9:7e:d7:
                    16:42:40:d2:bb:db:49:55:bf:91:c2:61:d9:0c:f0:
                    41:78:fb:48:e0:59:e8:0e:13:f6:99:97:51:74:d3:
                    93:d1:28:af:ee:aa:36:19:0b:23:1e:5f:7e:cc:94:
                    a5:53:38:5e:ba:0f:fc:fe:a2:0c:88:d4:d4:3b:19:
                    53:95:e3:87:f0:a5:aa:1a:ca:1c:2b:72:44:39:3b:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9F:F4:12:8C:86:31:5D:45:40:8B:87:32:3C:51:43:BA:EF:86:31
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:23:80:ee:04:23:b5:f2:f5:19:d2:ee:15:e5:88:9e:67:77:
         e8:0e:fe:48:f8:3c:22:81:b3:f7:59:70:9d:81:98:2b:8f:ea:
         46:54:90:46:81:10:81:29:c6:56:b3:4c:af:6f:72:47:42:7d:
         91:dc:66:c2:05:06:fb:a6:ac:5e:4f:e4:c9:77:e7:ac:2a:aa:
         49:8e:de:04:2a:52:7f:d8:14:bd:7a:db:b7:89:f6:8a:58:53:
         18:a5:4e:1c:c2:23:10:c0:48:bd:35:bb:56:5e:5e:b3:6b:9a:
         b3:3a:92:5c:b3:a4:5a:28:4d:3f:99:be:86:90:7f:3a:47:53:
         bd:4f:4c:ac:2d:32:57:38:52:60:b4:4e:ab:e3:ea:6b:61:62:
         9e:b6:ed:dd:00:07:84:3e:c1:1a:38:fc:9b:9a:53:08:9f:d9:
         80:21:e8:eb:f1:7d:49:02:f5:f6:9d:ae:65:c5:70:0d:46:fb:
         e3:54:1e:74:ff:ff:7d:d5:c4:63:80:51:cd:11:30:c0:36:6a:
         d7:b1:5f:00:bb:88:c7:06:be:93:dd:fc:53:fb:67:c1:56:69:
         cf:c4:3f:88:0f:ae:3b:9b:23:c0:9f:5b:8e:44:01:8e:30:9b:
         4e:3d:9f:0a:35:31:06:5b:ec:bf:c4:0b:23:fc:ce:76:1d:46:
         15:f4:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:24:03 2026 by rpki-client