Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          8F7HbwL4HFGmnk+8f/vy83UITpJAjJ8lv9qBWq/Rnv8=
Subject key identifier:   72:03:67:8A:83:0E:38:08:96:37:99:31:ED:A8:21:08:4B:84:AA:45
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       01A0D4940F16E13D97A17347C4DB6501D827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          0754
Signing time:             Thu 24 Sep 2026 18:01:08 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:08 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:08 +0000
Files and hashes:         1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: mdlyFUc13teYxYxzVfwv6/Vj9DjPqzLfrMk7Bal3OkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:0f:16:e1:3d:97:a1:73:47:c4:db:65:01:d8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Sep 24 18:01:08 2026 GMT
            Not After : Sep 25 18:01:08 2026 GMT
        Subject: CN=7203678a830e380896379931eda821084b84aa45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:cc:11:12:04:3e:2b:d7:b2:25:f8:79:e8:
                    bd:26:1e:e0:a4:b2:6e:7a:40:3d:1b:36:32:55:61:
                    f6:8f:e4:6f:ba:6f:e9:e7:78:6d:93:83:4b:df:27:
                    c2:ef:3e:65:d5:a2:87:bb:39:19:77:65:f4:38:97:
                    d7:b6:bf:0d:e3:9c:25:f2:05:9f:6b:fd:b5:1c:b0:
                    a2:0d:dc:d1:cd:e0:d2:f3:bb:c6:fd:b9:13:ab:2e:
                    1b:cd:33:d3:0c:4c:20:43:e4:9e:50:c8:da:06:9a:
                    51:7b:7b:be:e5:46:66:fb:04:d1:d7:1b:05:05:9a:
                    7b:94:6a:0e:ef:8b:a8:3c:08:d8:8a:b0:9d:4e:21:
                    86:ea:8d:d9:05:87:73:4c:f1:70:bd:d2:93:58:3f:
                    a5:6b:f1:9c:12:c0:22:5d:12:02:c8:93:5a:a2:15:
                    a2:1b:18:13:c3:e4:a5:6d:d1:f0:38:a2:4f:21:6d:
                    90:3e:fd:41:f8:4a:9c:bb:1e:fd:b5:4c:2d:0d:7f:
                    e8:c6:16:1c:3d:41:82:03:b1:e0:fb:a1:a1:c7:0a:
                    80:4a:4f:54:df:51:d7:97:6d:81:4b:10:5a:5b:41:
                    3c:3a:0d:26:02:45:4d:54:53:fe:f7:8d:af:af:c3:
                    71:37:16:58:cc:0e:57:46:54:8d:ae:0d:64:57:ab:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:03:67:8A:83:0E:38:08:96:37:99:31:ED:A8:21:08:4B:84:AA:45
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:55:5d:e5:e3:88:ff:14:bc:23:e0:1e:6e:5c:6a:45:26:8f:
         2a:2c:19:ab:1d:53:aa:b5:46:56:30:84:43:83:97:6a:b0:b4:
         7e:1c:08:7a:21:6f:82:ca:b1:9c:dc:4b:84:ca:c3:af:15:ee:
         9f:f1:f9:7a:15:1b:0a:d8:59:b4:93:cf:ee:26:63:98:cc:56:
         32:7e:33:33:72:19:b0:47:95:73:1b:09:40:58:8a:10:49:27:
         5e:21:a9:74:75:f0:1b:c5:5e:97:b4:5a:bb:01:8e:0c:bd:3a:
         b3:b4:c5:0e:e3:cc:ea:ec:38:5f:8d:4a:79:49:7b:d5:37:b9:
         c2:e0:45:a9:c4:df:19:30:be:2d:41:74:d6:5a:8a:ab:77:05:
         bf:83:8b:cf:82:0f:c7:b0:26:c6:a6:b9:0f:ff:d7:2e:a5:2f:
         01:a4:59:55:2e:fb:94:8b:30:f8:6d:a0:3f:73:44:3f:53:13:
         5c:30:9d:fa:00:47:ca:77:0c:fb:6f:e8:9e:a9:cd:1f:28:d6:
         98:3a:6d:17:40:6b:07:26:fc:b3:70:44:70:77:ce:0f:38:37:
         64:cb:e5:dc:2a:4c:15:74:e5:ff:32:6b:22:2b:2a:4c:56:ac:
         95:d1:4e:8b:b3:b8:43:53:17:5b:eb:6d:75:f6:55:43:8d:14:
         04:55:f9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlA8W4T2XoXNHxNtlAdgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyN2NmNTU2MDIwN2VjZTg0ODJjMzJmY2I2OTk1Zjc3ZDdm
NzMwY2IwHhcNMjYwOTI0MTgwMTA4WhcNMjYwOTI1MTgwMTA4WjAzMTEwLwYDVQQD
Eyg3MjAzNjc4YTgzMGUzODA4OTYzNzk5MzFlZGE4MjEwODRiODRhYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O/MERIEPivXsiX4eei9Jh7gpLJu
ekA9GzYyVWH2j+Rvum/p53htk4NL3yfC7z5l1aKHuzkZd2X0OJfXtr8N45wl8gWf
a/21HLCiDdzRzeDS87vG/bkTqy4bzTPTDEwgQ+SeUMjaBppRe3u+5UZm+wTR1xsF
BZp7lGoO74uoPAjYirCdTiGG6o3ZBYdzTPFwvdKTWD+la/GcEsAiXRICyJNaohWi
GxgTw+SlbdHwOKJPIW2QPv1B+Eqcux79tUwtDX/oxhYcPUGCA7Hg+6GhxwqASk9U
31HXl22BSxBaW0E8Og0mAkVNVFP+942vr8NxNxZYzA5XRlSNrg1kV6v/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIDZ4qDDjgIljeZMe2oIQhLhKpFMB8GA1UdIwQY
MBaAFMJ89VYCB+zoSCwy/LaZX3fX9zDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEt
OTQxMjQ0ZjVkZGVkLzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEtOTQxMjQ0ZjVkZGVk
LzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlVd5eOI
/xS8I+AeblxqRSaPKiwZqx1TqrVGVjCEQ4OXarC0fhwIeiFvgsqxnNxLhMrDrxXu
n/H5ehUbCthZtJPP7iZjmMxWMn4zM3IZsEeVcxsJQFiKEEknXiGpdHXwG8Vel7Ra
uwGODL06s7TFDuPM6uw4X41KeUl71Te5wuBFqcTfGTC+LUF01lqKq3cFv4OLz4IP
x7Amxqa5D//XLqUvAaRZVS77lIsw+G2gP3NEP1MTXDCd+gBHyncM+2/onqnNHyjW
mDptF0BrByb8s3BEcHfODzg3ZMvl3CpMFXTl/zJrIisqTFasldFOi7O4Q1MXW+tt
dfZVQ40UBFX56Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:46:06 2026 by rpki-client