Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File:                     nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier:          0CEToPvct3QUwj1SImuQiFNfZ0bM6Pc6dZLGLvOJ/mE=
Subject key identifier:   8A:6D:F8:F2:45:65:FC:14:F4:06:4A:BA:15:40:C9:A5:CB:FB:29:90
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer:       /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial:       01A12052A2AEE4067C3C484193C9668F0CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number:          13C1
Signing time:             Fri 09 Oct 2026 11:00:48 +0000
Manifest this update:     Fri 09 Oct 2026 11:00:48 +0000
Manifest next update:     Sat 10 Oct 2026 11:00:48 +0000
Files and hashes:         1: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (hash: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY=)
                          2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: 3CAo3HYOeZQf1vyMqvfApt598n4Js2RoWSi2HHMwGA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:52:a2:ae:e4:06:7c:3c:48:41:93:c9:66:8f:0c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
        Validity
            Not Before: Oct  9 11:00:48 2026 GMT
            Not After : Oct 10 11:00:48 2026 GMT
        Subject: CN=8a6df8f24565fc14f4064aba1540c9a5cbfb2990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:8a:20:e5:a9:11:3d:6e:bf:65:de:38:c6:
                    64:c1:e6:65:de:df:dd:b6:6f:27:5a:b2:3b:d8:95:
                    61:d8:d0:54:7a:d9:0b:11:7e:37:8c:b6:38:54:74:
                    a2:ad:f4:81:f9:b0:be:55:ff:fe:15:09:cf:ec:72:
                    7c:54:51:f2:23:eb:89:ee:7a:a3:86:ce:b6:48:69:
                    7e:e5:a0:2a:e7:4e:56:54:a8:32:72:14:3d:e6:c3:
                    d7:6a:e1:c4:0d:01:e8:00:65:d1:03:b2:08:44:8e:
                    21:02:a9:7c:63:e3:d3:9b:2e:70:25:1a:f0:66:27:
                    51:22:91:fd:6f:d0:17:23:6e:49:67:40:63:95:73:
                    e3:80:61:04:9a:b5:e5:dc:bc:89:96:f8:8a:5f:7a:
                    29:57:00:5c:cb:2f:7c:2c:07:09:e6:76:14:00:de:
                    f9:3b:08:95:07:f9:1a:ca:19:a5:b8:41:de:5b:d1:
                    02:2e:b7:72:77:24:de:85:66:61:90:45:7c:a2:60:
                    6e:79:a7:82:26:1a:fd:f7:76:28:4b:3b:fc:cb:49:
                    34:03:20:35:f5:78:88:d0:a2:ca:5c:7f:54:28:9d:
                    58:77:b8:18:f5:d2:6b:b8:10:5d:e1:82:5a:af:90:
                    25:9a:72:82:77:af:46:5e:66:24:c1:b5:de:94:6d:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:F8:F2:45:65:FC:14:F4:06:4A:BA:15:40:C9:A5:CB:FB:29:90
            X509v3 Authority Key Identifier:
                keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:6a:f7:b7:fa:4d:34:93:d3:9e:63:ce:58:6c:ec:c9:b5:
         13:b3:04:33:b2:af:7e:48:c8:f0:43:a5:67:b3:a5:e4:59:00:
         bf:ea:c1:86:85:8e:8f:00:25:9f:30:fe:68:13:f0:27:c4:80:
         3a:96:a1:5b:a2:89:15:59:c7:1e:fa:d1:54:b1:b4:43:bb:13:
         fc:7c:08:46:3c:d1:63:51:25:04:dd:81:b9:7b:0f:d5:2e:7d:
         26:d4:6a:ae:13:45:a9:27:32:cb:c9:94:a2:73:02:89:8c:f4:
         d4:7c:14:0a:fe:e2:28:30:a7:e7:b8:9c:54:5f:2f:03:e7:a4:
         b6:aa:50:0b:45:af:44:e5:1d:27:48:60:72:a5:99:a8:49:d1:
         8b:f4:0f:74:a3:f3:f9:0c:33:b9:c4:54:7a:69:fe:d0:27:b5:
         20:b6:0b:c3:f4:ef:0a:b4:3b:45:9b:5d:24:4c:67:32:40:44:
         24:ac:3e:a7:1a:55:dc:48:a9:74:f2:cb:b9:59:de:e7:1b:07:
         a7:05:26:b8:84:f1:ee:84:11:32:0f:38:9b:5a:64:2d:ef:5a:
         26:42:20:df:10:9f:e0:3d:09:fc:10:71:33:8f:aa:97:37:9c:
         ed:01:de:0d:0e:40:24:72:53:e2:1a:d1:ff:31:a2:08:99:5e:
         69:d2:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:50:04 2026 by rpki-client