Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          wkfXQOlV8dAxfgs4ABg18ixrApnscupsPlcvHpRMJKk=
Subject key identifier:   43:A1:69:A5:F7:A9:7E:06:83:9A:D1:20:0B:87:70:63:3C:59:F8:C5
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       01A0D2A5DCC938B404B721734B1434F13DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          0753
Signing time:             Thu 24 Sep 2026 09:01:20 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:20 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:20 +0000
Files and hashes:         1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: kYGwmfcDKmI48h5CrQWQuPTWC5arcvvk3VsB6imYCEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a5:dc:c9:38:b4:04:b7:21:73:4b:14:34:f1:3d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Sep 24 09:01:20 2026 GMT
            Not After : Sep 25 09:01:20 2026 GMT
        Subject: CN=43a169a5f7a97e06839ad1200b8770633c59f8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:0e:9b:28:f1:25:e6:16:31:32:af:2a:25:
                    05:4a:5a:57:8e:8d:4c:1c:25:c5:e7:c5:d4:a3:3b:
                    80:21:a3:af:92:19:6b:4a:43:05:b5:97:5c:55:7d:
                    33:b8:f8:28:ac:c3:2c:9b:21:1a:ff:e9:f5:ba:e5:
                    a9:55:de:31:bf:9b:f6:d0:18:7e:10:59:63:7b:3b:
                    13:78:38:3e:79:be:53:b9:f4:d4:81:0d:5f:19:f6:
                    38:b9:51:b8:bb:90:4f:f5:bd:c9:43:64:68:5a:c4:
                    cb:56:19:21:10:b2:d6:dd:65:b8:85:7c:79:b6:cb:
                    96:2e:44:51:f9:bb:4a:14:33:d5:f4:18:0e:fb:dc:
                    75:1c:5d:63:cb:05:32:8d:53:e1:49:0c:2e:d3:41:
                    fa:5b:37:c3:ed:07:2b:27:55:db:42:61:99:58:6f:
                    dc:c0:bb:32:50:16:0d:43:9b:01:5a:6d:d1:16:90:
                    a1:72:be:0b:74:02:bf:6f:ca:0c:e0:f9:70:69:3a:
                    36:3f:68:bb:d0:76:8c:d5:ac:ce:98:78:7c:4d:00:
                    56:1d:fd:a5:e6:df:27:86:9a:38:0c:97:c9:f0:b1:
                    c9:1f:42:c7:85:29:0f:81:72:72:51:9e:0b:b9:16:
                    fd:29:51:7e:6c:0c:58:30:10:bd:17:ff:7e:05:2a:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A1:69:A5:F7:A9:7E:06:83:9A:D1:20:0B:87:70:63:3C:59:F8:C5
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:fb:6c:fc:de:11:58:19:59:b6:21:fe:9c:17:10:c6:c0:
         de:e4:b7:18:0e:e8:d3:07:61:80:99:5b:ab:12:1a:ed:ee:6d:
         06:0f:10:06:d3:71:ef:33:2b:29:c1:d7:de:b1:55:cd:9d:c5:
         30:1e:e9:41:20:a3:0e:37:00:ac:71:62:f3:5b:ce:41:03:b8:
         3d:b4:28:1d:05:25:c2:0b:db:0d:e8:f4:d9:44:aa:68:1f:8d:
         1a:d3:6c:91:21:7f:4d:60:ae:82:3f:0a:b5:e3:9c:44:8c:4a:
         a2:81:6d:da:e1:93:40:65:a5:86:55:e3:e7:95:e3:20:b4:e6:
         98:ff:24:09:21:68:6b:76:12:b8:c4:85:c5:0d:a9:36:78:52:
         22:64:2b:dd:54:ad:51:ff:ce:75:73:4b:75:ae:1a:9e:94:3d:
         a7:16:9a:a6:be:92:21:f7:c0:b7:d8:02:c6:81:4e:37:24:29:
         94:eb:e2:cd:3d:cd:b2:f8:24:a1:63:b6:73:ab:68:63:3f:27:
         32:02:89:49:0d:06:aa:c4:e3:11:e3:19:31:c2:13:63:c3:f0:
         72:dd:3a:ba:6c:77:cc:06:12:b0:1f:46:ea:6f:fb:0e:dc:0d:
         d3:98:29:3d:e3:71:7a:77:b6:cd:51:f1:23:47:ae:02:31:49:
         fb:16:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:36:21 2026 by rpki-client