Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
File:                     wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json)
Hash identifier:          FpCqKqQpPsykiJUELKF8Li0ueOGMu5zvOFidd2zKsDs=
Subject key identifier:   17:44:22:59:F2:59:F2:CD:72:26:21:E6:26:6F:66:B7:C9:EF:27:12
Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
Certificate issuer:       /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Certificate serial:       01A08BD6714BB6901DD95BC821E7B43B1823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
Manifest number:          19DA
Signing time:             Thu 10 Sep 2026 15:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:21 +0000
Files and hashes:         1: 9pt5Bi5CAiW7TpMLmtUGaccMt8I.roa (hash: 77PFwHWJqDe9UTrzBkk6ZTKXRRD9iv6QhbadNXN0T+g=)
                          2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: Eur76mHbJyZcXxgzroBsmGl0OwkCDtdUXLXjSiGqEGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:71:4b:b6:90:1d:d9:5b:c8:21:e7:b4:3b:18:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
        Validity
            Not Before: Sep 10 15:01:21 2026 GMT
            Not After : Sep 11 15:01:21 2026 GMT
        Subject: CN=17442259f259f2cd722621e6266f66b7c9ef2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:77:91:b1:11:97:70:21:be:06:04:f7:28:
                    93:bc:eb:24:5b:42:ab:8f:0a:b8:2b:05:75:4d:db:
                    0b:be:fc:b5:f6:32:e0:14:09:32:a3:a8:52:3f:26:
                    6c:b9:97:7e:bf:8b:87:7f:05:c4:46:27:d5:e7:3a:
                    b1:31:bf:fe:fb:e4:19:3d:9b:89:f6:fb:df:05:e3:
                    99:ae:21:f4:54:21:8b:85:42:38:8b:62:05:a2:65:
                    21:46:4f:f3:d5:7e:aa:cb:4f:80:87:17:b5:43:8b:
                    4f:9a:11:3f:53:b9:50:72:36:d9:0a:7c:92:47:06:
                    79:34:69:6e:7b:5d:29:40:6a:d7:38:4c:33:ce:d0:
                    a3:20:b9:0e:91:aa:b6:7d:64:04:fc:8c:c2:30:6c:
                    3d:da:34:25:f6:c9:15:25:53:31:01:c6:74:bd:bf:
                    28:af:26:b2:26:96:7c:2d:6a:06:4a:74:d3:4c:27:
                    60:7d:2a:4d:6c:f4:0a:1c:ac:7c:6b:68:fb:e8:2e:
                    ee:85:2b:69:7f:8d:5c:db:5a:e2:c8:a7:d9:14:5d:
                    dc:c2:f0:0e:6a:b2:35:62:4a:56:34:7d:45:c4:8d:
                    de:ca:c6:b0:88:31:75:f0:62:7f:f9:ee:03:0a:e0:
                    90:ac:9a:3c:41:3c:d6:da:85:7f:77:38:18:39:02:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:22:59:F2:59:F2:CD:72:26:21:E6:26:6F:66:B7:C9:EF:27:12
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:59:28:6e:5c:e7:dc:45:6f:95:c0:f6:5f:bc:32:e4:76:1a:
         bd:32:5a:b6:b6:e3:81:1c:8c:77:c2:53:8f:54:17:da:31:e9:
         94:02:b7:3a:11:67:5f:e8:52:f8:9c:1d:a9:7d:b7:0b:24:64:
         8a:af:c9:79:30:c8:f7:79:4d:66:22:a4:6e:e3:c0:5a:5e:3f:
         dd:f2:88:8d:8d:67:7e:e1:81:b2:ef:b5:87:ac:9d:37:82:73:
         f1:35:43:fc:ea:7a:8b:76:0b:a4:46:a9:0b:58:28:ba:9b:ac:
         d1:83:1d:9b:3c:a6:92:c1:6a:6c:cb:02:d2:17:17:a5:9b:13:
         e5:22:79:e9:66:72:63:86:73:f4:f3:f4:4b:a7:a4:a7:5b:52:
         43:9d:13:55:41:64:9f:2e:13:23:e0:75:17:af:a7:1c:f7:6a:
         e7:a6:05:ee:35:31:36:03:7a:40:09:83:44:e6:2a:e2:03:38:
         36:ec:56:a9:9c:29:90:c9:ca:d7:4e:bb:36:c6:bf:40:43:3f:
         60:d5:20:54:58:5d:fb:f0:35:3d:98:9a:dd:7e:a8:11:df:dd:
         c6:5e:60:f3:81:5e:59:75:6c:90:61:2b:84:86:18:56:54:f1:
         9b:ae:f4:dc:d0:ff:3d:be:13:07:0c:8e:dd:a7:6b:17:ba:c4:
         ae:90:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:34 2026 by rpki-client