Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
File:                     wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json)
Hash identifier:          Y5s5gqzNdW9b6618r9WX6FMls98knZ26rNNhH/0P3vk=
Subject key identifier:   74:42:B9:44:5E:9F:76:2A:CB:6F:6C:3A:7A:C1:0C:00:B8:1A:62:6D
Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
Certificate issuer:       /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Certificate serial:       01A17B4D75C1F061C4590DED4267A76B28C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
Manifest number:          1A56
Signing time:             Tue 27 Oct 2026 03:00:36 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:36 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:36 +0000
Files and hashes:         1: 9pt5Bi5CAiW7TpMLmtUGaccMt8I.roa (hash: 77PFwHWJqDe9UTrzBkk6ZTKXRRD9iv6QhbadNXN0T+g=)
                          2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: RmqCsbWgO/puAEnjm+4OIF41XmAwEmzHuCkbczl5LUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:75:c1:f0:61:c4:59:0d:ed:42:67:a7:6b:28:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
        Validity
            Not Before: Oct 27 03:00:36 2026 GMT
            Not After : Oct 28 03:00:36 2026 GMT
        Subject: CN=7442b9445e9f762acb6f6c3a7ac10c00b81a626d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:cd:44:e3:1b:fc:86:02:b8:a7:bd:ce:60:
                    3e:f5:83:47:d0:0c:df:c1:cd:02:fe:81:59:e3:ed:
                    0a:eb:6f:92:21:33:5b:13:53:3f:e1:b9:80:f4:1c:
                    d1:5d:a0:f6:3b:db:08:50:fc:7a:99:88:1d:24:ec:
                    e5:df:90:d7:ec:9c:5e:1a:36:43:29:0d:99:c8:91:
                    00:16:a3:0e:9e:00:2f:48:fc:80:4a:95:1d:0b:b8:
                    ed:5c:8e:67:ff:12:28:db:6f:99:8a:9d:a1:77:f9:
                    9e:20:97:c3:1a:00:8b:38:15:53:80:6e:ce:cc:53:
                    ef:b2:cb:33:27:bf:9e:df:02:77:47:0a:90:0c:c7:
                    d5:de:b8:30:c9:5f:88:13:de:a5:98:ad:d1:f2:f0:
                    a1:88:24:ac:d4:eb:8c:65:ba:cc:3a:14:1d:7e:f6:
                    3c:8b:29:70:7a:b1:e8:d7:bd:16:12:60:09:c2:27:
                    a5:a0:0e:8a:40:4f:33:7b:b5:4c:bf:02:f5:c2:b1:
                    fc:ca:33:2a:f5:65:63:ad:15:cf:52:af:a6:a2:bb:
                    75:6a:b9:35:52:f6:81:49:ed:92:79:6e:d8:38:22:
                    25:01:1d:c5:89:95:b3:56:bc:e2:9d:a4:df:30:06:
                    7a:22:6e:82:ef:5a:c3:0b:d2:de:1a:d3:cf:3e:ac:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:B9:44:5E:9F:76:2A:CB:6F:6C:3A:7A:C1:0C:00:B8:1A:62:6D
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:2b:87:8b:f0:c3:b8:92:71:9a:5e:7a:08:a7:35:ed:6d:
         01:2b:37:2d:cd:4c:b4:a2:0b:3c:91:f4:29:5a:f4:9d:2f:b5:
         1b:44:92:69:41:3f:11:47:7a:21:29:4e:74:c7:29:a1:c6:13:
         b4:e6:7b:a1:77:b5:f4:65:f2:00:1f:91:7a:61:06:40:5a:2e:
         e4:e5:49:80:4b:c7:32:0a:94:e8:55:a3:94:55:b8:68:c9:64:
         f5:0d:cf:24:3d:70:ed:8c:67:b7:5d:23:8d:28:3f:bc:d0:24:
         1d:10:55:84:33:ef:b5:24:49:06:17:bf:d6:64:38:6a:71:4a:
         f0:d8:94:07:5d:e7:b2:12:19:46:f7:d8:83:aa:73:81:6a:59:
         68:05:31:10:be:3c:71:47:6e:15:c0:5f:1a:09:9c:84:06:ac:
         6f:94:af:f9:f4:bf:71:2d:cd:8d:c5:6a:9d:62:78:8c:d6:87:
         83:0e:f5:31:81:df:c9:42:a7:a8:1f:08:a5:a4:ff:b2:64:1c:
         cf:99:c5:99:55:99:8d:5d:2a:c3:6e:fc:85:0f:cf:80:dc:f6:
         cf:62:a0:f6:a0:51:23:d3:3c:e7:6f:09:73:45:b3:05:24:17:
         ed:cc:90:9b:5a:29:c1:ce:80:b6:80:43:93:fc:04:d9:bb:48:
         5f:1b:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:08 2026 by rpki-client