Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          Hs4smmHLi4koBazQAZOuUXPF1DO3pFPfCSYSPFQJL5M=
Subject key identifier:   82:AB:A4:5E:50:F0:96:A5:65:39:19:AC:37:5F:7C:4F:15:8C:BC:55
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       01A06CF054E28B14E25665EA9F345E28163D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          0AA4
Signing time:             Fri 04 Sep 2026 15:01:24 +0000
Manifest this update:     Fri 04 Sep 2026 15:01:24 +0000
Manifest next update:     Sat 05 Sep 2026 15:01:24 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: ppnuZbh5JWzQ2s153Novw8aNDxgQYwN+95lgNGxFYyk=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:f0:54:e2:8b:14:e2:56:65:ea:9f:34:5e:28:16:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Sep  4 15:01:24 2026 GMT
            Not After : Sep  5 15:01:24 2026 GMT
        Subject: CN=82aba45e50f096a5653919ac375f7c4f158cbc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:7a:39:05:12:bd:83:4f:06:e1:c3:39:ea:
                    08:10:a0:e6:77:57:34:b1:10:da:5d:b6:1e:05:46:
                    41:a0:d0:96:df:06:00:0d:f6:65:0d:f8:d9:77:67:
                    4d:11:8d:9f:df:ff:3d:a9:f7:e1:5e:51:8c:1e:f7:
                    e7:3d:88:2f:83:15:cc:a0:43:70:f8:14:e9:9f:3b:
                    33:63:f9:d9:52:17:0d:a3:87:37:b2:b1:3c:bd:1d:
                    33:e7:be:04:d1:07:08:61:a1:3f:46:e4:0a:50:76:
                    c7:db:ad:dd:dd:14:d4:ed:1c:2d:9b:b9:74:73:c9:
                    b7:c3:00:ca:2f:d5:9c:38:bb:9c:21:b8:1e:dc:92:
                    fc:43:c6:0f:3d:f4:c1:eb:d4:83:a4:7c:6e:65:fc:
                    b5:e3:cd:05:0d:28:89:4b:8d:6e:36:1a:e6:6b:ff:
                    17:54:27:b9:68:50:9d:e8:e4:82:ef:66:8f:60:ce:
                    e8:31:28:e7:78:23:7e:e3:fc:5c:63:ee:3c:f7:ff:
                    96:b3:66:c1:b3:20:c5:cb:1c:dc:bd:e8:5f:79:0d:
                    8f:9c:c5:d0:70:bc:7c:76:75:53:da:8d:56:85:69:
                    08:06:71:d1:ed:35:71:57:58:c4:f1:60:f2:47:12:
                    d2:36:a3:83:4b:a9:4a:3d:e0:13:4d:8d:e9:74:2c:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:A4:5E:50:F0:96:A5:65:39:19:AC:37:5F:7C:4F:15:8C:BC:55
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:83:53:be:53:e6:f5:6d:94:c9:09:1d:56:aa:6f:fb:33:
         23:dc:a3:9a:c8:d2:e7:85:ae:66:c9:f1:2a:26:7e:b2:50:26:
         64:e2:13:c6:92:f3:2d:da:84:e3:c6:ef:95:c0:fb:97:ae:71:
         e1:0d:ad:22:ea:0a:be:d0:b2:5d:0f:6d:86:be:69:44:f4:ef:
         8b:92:f3:b3:9c:46:58:07:e1:77:f6:41:c7:88:a4:d7:4a:d1:
         aa:01:c3:e8:60:b9:03:4c:b6:7e:c8:2a:ce:32:bb:f0:55:06:
         a7:6e:c5:97:97:be:8c:aa:3b:42:87:11:65:1b:64:9d:a6:ec:
         59:0c:86:eb:9f:70:17:b4:d6:c3:31:f6:80:36:d8:ad:4d:12:
         cb:46:5e:d4:bc:38:f0:e5:60:b3:51:d5:86:60:4b:b3:1e:b5:
         0c:a0:c8:97:7b:c8:bb:3e:8c:0c:ad:50:1f:f1:8f:c0:37:b2:
         8b:8c:cd:0b:c6:29:7f:7a:2c:3e:17:cc:54:a6:0f:5f:39:db:
         85:e2:f1:6e:f5:37:77:f1:ed:24:9c:d9:b3:e6:dd:2a:b8:8e:
         26:f9:ca:08:d9:a5:33:c0:d7:f1:43:c7:d8:08:d0:f5:0e:3c:
         3d:cf:f2:42:01:3d:0a:0d:13:1b:c5:b6:0a:36:f0:c7:81:58:
         4f:cf:74:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8FTiixTiVmXqnzReKBY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2
OWU0ZmMwHhcNMjYwOTA0MTUwMTI0WhcNMjYwOTA1MTUwMTI0WjAzMTEwLwYDVQQD
Eyg4MmFiYTQ1ZTUwZjA5NmE1NjUzOTE5YWMzNzVmN2M0ZjE1OGNiYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc16OQUSvYNPBuHDOeoIEKDmd1c0
sRDaXbYeBUZBoNCW3wYADfZlDfjZd2dNEY2f3/89qffhXlGMHvfnPYgvgxXMoENw
+BTpnzszY/nZUhcNo4c3srE8vR0z574E0QcIYaE/RuQKUHbH263d3RTU7Rwtm7l0
c8m3wwDKL9WcOLucIbge3JL8Q8YPPfTB69SDpHxuZfy1480FDSiJS41uNhrma/8X
VCe5aFCd6OSC72aPYM7oMSjneCN+4/xcY+489/+Ws2bBsyDFyxzcvehfeQ2PnMXQ
cLx8dnVT2o1WhWkIBnHR7TVxV1jE8WDyRxLSNqODS6lKPeATTY3pdCwRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKrpF5Q8JalZTkZrDdffE8VjLxVMB8GA1UdIwQY
MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt
MDlkYmQwOGNiZTJkLzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk
LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag2DU75T
5vVtlMkJHVaqb/szI9yjmsjS54WuZsnxKiZ+slAmZOITxpLzLdqE48bvlcD7l65x
4Q2tIuoKvtCyXQ9thr5pRPTvi5Lzs5xGWAfhd/ZBx4ik10rRqgHD6GC5A0y2fsgq
zjK78FUGp27Fl5e+jKo7QocRZRtknabsWQyG659wF7TWwzH2gDbYrU0Sy0Ze1Lw4
8OVgs1HVhmBLsx61DKDIl3vIuz6MDK1QH/GPwDeyi4zNC8Ypf3osPhfMVKYPXznb
heLxbvU3d/HtJJzZs+bdKriOJvnKCNmlM8DX8UPH2AjQ9Q48Pc/yQgE9Cg0TG8W2
Cjbwx4FYT890Iw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:50:55 2026 by rpki-client