Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          6dnIJSIIVPLZSZv2BBOg7vrnUuvqWVaHF1J1AOJRHws=
Subject key identifier:   FC:28:62:BE:FA:10:44:13:BC:C6:A5:CD:C7:2E:13:89:B8:77:DE:CF
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       01A0D1930C2630705C64984FDDB446FE0ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 04:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:09 +0000
Files and hashes:         1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: CR+d+Z+CzIgU3P6lVEtKLT6foBRLYenyMwugZr4nMCs=)
                          2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:93:0c:26:30:70:5c:64:98:4f:dd:b4:46:fe:0e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Sep 24 04:01:09 2026 GMT
            Not After : Sep 25 04:01:09 2026 GMT
        Subject: CN=fc2862befa104413bcc6a5cdc72e1389b877decf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:00:26:53:76:b1:f9:71:25:fc:a8:4a:31:
                    3d:ea:08:1b:b9:97:76:2a:bd:9e:8a:4d:98:00:31:
                    2e:eb:f2:1b:95:59:c0:03:7a:2e:c6:97:cc:ff:54:
                    14:9b:35:57:e6:6c:6c:a5:12:03:c5:a0:b6:83:7a:
                    d2:2e:04:24:87:ed:60:ad:e8:f9:97:20:60:45:27:
                    d5:27:6d:7f:1f:3b:b9:27:45:f1:86:52:4e:d9:77:
                    72:58:0d:7e:7d:00:74:03:4e:88:c6:88:83:05:d0:
                    c6:87:b2:52:5e:62:b0:49:12:23:f4:ef:a4:8b:54:
                    1a:3c:83:6e:6a:45:67:ac:b1:31:35:4a:cd:97:e3:
                    30:00:81:0d:0d:e1:2e:bc:46:6e:60:72:16:99:18:
                    d4:73:5d:a0:0c:c8:da:d5:88:f9:13:35:fb:39:4c:
                    cb:78:88:83:47:d1:8b:fc:9f:3b:92:ca:95:59:09:
                    f7:db:b1:21:c9:74:6e:b1:b6:a8:4b:91:e5:cf:13:
                    42:96:ca:46:a9:de:ed:9f:36:80:6e:12:bd:f6:0f:
                    ee:86:bb:e8:69:71:ad:e4:cd:8a:08:45:de:d1:b6:
                    8b:58:3f:ee:75:6f:24:0f:41:55:64:da:55:79:ac:
                    28:04:20:b9:bf:a7:8f:62:7d:a2:82:06:4c:84:e8:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:28:62:BE:FA:10:44:13:BC:C6:A5:CD:C7:2E:13:89:B8:77:DE:CF
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:de:bd:a4:20:48:ff:ed:9b:c9:87:44:ca:4e:b2:ae:bf:
         32:61:44:52:36:af:6e:cb:6e:e4:fb:ad:22:d8:6f:14:ba:23:
         42:2c:6c:91:80:ac:8d:47:9c:32:83:38:81:db:5b:9f:31:4c:
         c5:b5:db:ae:b8:b7:d1:b6:ce:0d:84:b5:e4:bf:d5:c0:76:68:
         44:a3:73:f2:8a:b9:d1:10:48:9a:3c:11:bd:15:66:48:03:06:
         94:f6:a8:65:aa:b5:23:f9:b1:4a:f3:c3:ea:54:c8:3d:cd:c9:
         97:b5:69:89:e7:b7:fc:0c:6e:6f:ed:ee:eb:ab:1a:ea:21:b8:
         fe:47:c0:26:a8:76:ab:dc:b1:e0:e4:0b:38:00:16:ba:20:ab:
         b8:f0:a4:db:e0:4d:c1:8e:cb:50:2e:2e:a1:f8:9b:95:3b:42:
         ac:15:6e:8c:6f:22:14:2e:5a:a4:6e:a2:8c:8c:ec:ab:1a:ac:
         5e:51:ed:dc:05:a5:6d:1c:ec:f9:a8:c4:96:5a:70:4f:00:b0:
         c1:79:7a:4a:94:f3:76:16:7a:d9:2e:10:26:a3:9c:b3:37:0b:
         ed:1c:d2:c9:4c:98:d7:1b:88:c4:75:01:e6:62:c5:b1:dc:e0:
         9d:cc:77:24:9c:e7:8b:69:62:b2:61:f2:38:f7:c9:a1:b6:f5:
         75:a5:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:35:44 2026 by rpki-client