Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File:                     wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier:          PxPqYRd+sSR9A9Dsr2zybEOa+yJgmUYNwOFL0KsTZPY=
Subject key identifier:   6F:B9:36:67:F8:0E:A1:2F:F7:0E:26:8B:69:7D:E0:8A:74:6F:A4:68
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer:       /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial:       01A06D94B5C781B337FF1EEDAEA6EAF667F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number:          1A5A
Signing time:             Fri 04 Sep 2026 18:00:57 +0000
Manifest this update:     Fri 04 Sep 2026 18:00:57 +0000
Manifest next update:     Sat 05 Sep 2026 18:00:57 +0000
Files and hashes:         1: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (hash: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg=)
                          2: CkKLYj92galNREO338sWbNXvtys.roa (hash: GswGrCpFRGcvwQ2BBbOurYuHd/8bVtTdmHhmb10JZX0=)
                          3: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (hash: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY=)
                          4: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (hash: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o=)
                          5: T6WYRwpE69f1_segiofKG18EyPU.roa (hash: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw=)
                          6: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (hash: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc=)
                          7: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (hash: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4=)
                          8: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (hash: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY=)
                          9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: hsdsmOTQajNiXykwE+qmouR3hxNljHukdpz0Ye5oyW8=)
                          10: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (hash: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:b5:c7:81:b3:37:ff:1e:ed:ae:a6:ea:f6:67:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
        Validity
            Not Before: Sep  4 18:00:57 2026 GMT
            Not After : Sep  5 18:00:57 2026 GMT
        Subject: CN=6fb93667f80ea12ff70e268b697de08a746fa468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:c1:23:c4:84:7f:9b:dc:62:7a:9d:e0:2a:
                    06:ea:e9:f9:28:4b:14:18:bb:a3:d2:a8:0d:57:2f:
                    1b:b2:04:30:f2:f0:18:ca:f0:05:44:20:ef:88:8a:
                    a7:20:70:6d:86:15:fc:92:1b:63:12:26:2c:06:a2:
                    15:1a:b7:46:00:41:4d:2b:a6:3f:3b:5b:e3:c0:53:
                    e9:c1:dc:1e:46:a2:00:8a:f6:09:84:ed:03:2b:19:
                    50:81:61:09:52:38:6d:8d:26:54:27:4e:24:8c:42:
                    cf:24:ad:8b:6a:a9:e9:fc:ef:24:16:84:06:94:77:
                    0c:23:2d:26:b7:ba:60:ac:36:37:18:1d:97:a5:92:
                    21:ad:fe:b6:00:c9:57:d6:0a:9d:ea:fa:e4:f5:0a:
                    cc:1b:92:cf:58:7d:19:2a:f0:6a:58:48:1c:6e:c9:
                    c8:0e:85:80:d9:51:49:0b:6c:2c:70:e8:8c:d7:30:
                    35:39:cb:75:1b:38:0f:43:29:45:fa:dd:29:bc:9d:
                    77:4d:17:c4:c3:5e:fb:73:94:df:1e:89:29:f1:f3:
                    71:b3:5e:c2:3e:d8:cb:a2:35:c4:54:aa:ae:87:f5:
                    bd:f6:58:0f:f5:3d:e4:52:53:ec:f2:52:fe:d2:ff:
                    97:a8:82:b3:25:9d:94:7f:d8:93:9a:3a:79:23:f0:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B9:36:67:F8:0E:A1:2F:F7:0E:26:8B:69:7D:E0:8A:74:6F:A4:68
            X509v3 Authority Key Identifier:
                keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:04:29:0a:e7:39:08:da:45:f7:ba:4d:f7:3e:25:ce:35:
         33:d4:11:20:8d:13:99:34:f6:f0:55:9b:47:07:85:20:d0:d9:
         97:7a:5e:4c:22:e6:5d:09:97:10:17:72:cc:ee:a1:ef:3f:c8:
         64:21:ef:0d:fc:50:97:1e:20:39:d8:c6:85:d6:b0:09:57:07:
         85:f8:4b:3a:e7:03:26:7e:e4:7a:f1:f1:54:e5:32:3e:64:7d:
         14:c8:90:ea:63:9f:ce:cd:68:10:d4:64:64:25:bf:88:b2:59:
         32:e2:61:cd:65:bc:a6:09:42:3f:ae:42:a9:46:1e:3b:cc:7a:
         2a:11:a9:62:ad:ab:a4:ff:a8:0c:39:54:10:b2:91:c3:07:9d:
         6b:90:1e:15:57:3d:08:b5:bb:9a:0b:e0:9b:d5:2a:ed:a8:88:
         93:59:fc:ee:72:bb:9d:71:89:bb:7d:0f:4a:e0:79:86:b8:2d:
         fb:76:e0:ae:3d:22:52:15:bd:09:fc:09:9d:80:82:92:25:d3:
         b4:da:f2:44:15:27:d9:fa:9d:61:d9:4a:aa:a4:9f:8e:ba:ae:
         ed:a7:1b:56:eb:6a:4e:a7:fc:34:a9:6a:da:cb:fa:b7:75:16:
         3e:2c:8a:e8:0e:c3:d2:52:4f:d1:51:7b:4e:31:4f:71:21:e4:
         34:93:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:29:49 2026 by rpki-client