Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File:                     wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier:          fjdLexdvPzCDdxj1040F0WsuwByt+3PVnr7YRi5nd8o=
Subject key identifier:   6E:11:61:73:20:EA:A7:DF:56:8A:45:21:AB:AB:EA:6E:F5:89:9B:DE
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer:       /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial:       01A0CFDB015BE6CA8F45B407396DC0316974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 20:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:31 +0000
Files and hashes:         1: fkjKY1GubqopgVMFItI3Dks0F0s.roa (hash: XHHriZ3RedEv637kMieJw9uopGlbC5EMU7/X4VulIbY=)
                          2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: b9JE9LzuUKbSvyXazW607e62hrswbhm/9nUCjBdgyyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:db:01:5b:e6:ca:8f:45:b4:07:39:6d:c0:31:69:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
        Validity
            Not Before: Sep 23 20:00:31 2026 GMT
            Not After : Sep 24 20:00:31 2026 GMT
        Subject: CN=6e11617320eaa7df568a4521ababea6ef5899bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:47:67:d2:aa:ec:48:07:bd:96:68:95:a6:
                    69:05:45:62:2f:b6:b8:15:9d:09:3f:27:1b:0f:43:
                    7d:64:74:32:17:a0:07:fc:e6:26:59:21:7d:b1:79:
                    d9:16:ed:74:18:ca:06:b5:db:5c:db:56:f0:84:49:
                    48:24:bd:2c:98:d7:07:4e:70:1a:ba:8c:87:8a:cf:
                    98:74:50:95:e8:cd:f0:1d:76:c5:55:55:fd:59:bf:
                    45:82:85:c1:a8:17:5b:13:b0:ea:f0:fb:69:20:1e:
                    c1:be:e9:2a:57:68:7a:12:86:ac:8a:20:8f:ab:2c:
                    25:3c:ae:b4:c6:6c:91:cb:0b:97:33:0e:17:d8:73:
                    41:f2:a0:99:d0:f3:21:83:07:7e:0a:53:40:c4:f5:
                    58:5a:fc:05:55:8c:a8:76:ad:27:89:7a:72:2a:4d:
                    82:53:ac:bb:80:b6:8c:e5:3d:d2:58:b6:57:d8:7f:
                    d5:0e:20:85:2c:46:e7:85:8c:26:ec:3c:b6:c0:42:
                    8a:32:74:be:97:28:cc:cd:98:1c:70:3d:20:b2:f2:
                    05:5f:9a:c6:d0:26:c7:7a:bb:e6:52:bc:2b:15:91:
                    06:8f:f0:cd:d6:9d:9b:0b:9d:0a:24:11:b8:e3:a0:
                    d7:42:fc:86:fa:c6:79:d7:56:a9:63:69:76:77:d6:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:11:61:73:20:EA:A7:DF:56:8A:45:21:AB:AB:EA:6E:F5:89:9B:DE
            X509v3 Authority Key Identifier:
                keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:72:c9:12:c7:85:61:9d:62:39:c1:53:79:81:8d:e5:02:65:
         3c:5b:0c:0b:f8:1f:04:c6:00:40:1e:09:d0:33:20:43:1f:25:
         ba:09:d4:77:e5:2b:59:ef:f1:f3:73:b9:10:f3:e4:62:06:71:
         d6:03:58:d9:9e:c7:6a:2f:65:ae:07:1e:52:22:09:81:ba:a2:
         08:38:ec:26:7a:51:4b:a8:ce:2c:84:b7:71:fb:02:de:5e:26:
         e8:70:5a:38:5c:5e:10:d2:56:20:7c:3c:e6:4f:c1:4d:4e:cf:
         d0:d1:48:2e:44:cb:2d:60:62:20:3f:48:1d:2f:48:23:4a:15:
         1d:bb:29:ce:67:1c:16:98:8a:7e:bc:cd:32:03:c8:8a:d0:8a:
         24:d5:ea:50:0d:26:6f:96:25:b4:11:fe:4c:91:58:e4:6d:b8:
         ec:ba:a6:d3:a5:e6:1a:60:79:5c:95:74:98:e4:9f:76:9e:3c:
         b9:2c:7c:ad:2d:fc:8f:0f:49:71:a2:20:08:b0:07:0d:ac:8b:
         76:e0:1b:e6:a9:ee:a3:e5:7d:94:ae:a9:a1:9b:95:b8:9b:b3:
         02:eb:97:5a:44:a6:00:6b:db:5d:a9:c3:40:c5:65:2c:e1:90:
         57:55:36:81:35:45:0a:c8:f8:f9:8e:23:0e:c7:be:af:30:91:
         07:50:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:19:43 2026 by rpki-client