Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File:                     wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier:          cdMkmc4pT/ucV1+EwbHAbzLphY5Nvd2GcXJ/eCj0FnA=
Subject key identifier:   66:0F:1E:2A:92:0B:8A:35:F8:5D:F9:DC:B4:25:A9:03:2D:6F:E6:BA
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer:       /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial:       01A17D3C743B04C55039600F8211434F124A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number:          1404
Signing time:             Tue 27 Oct 2026 12:01:16 +0000
Manifest this update:     Tue 27 Oct 2026 12:01:16 +0000
Manifest next update:     Wed 28 Oct 2026 12:01:16 +0000
Files and hashes:         1: 8s5mYxT0FSRplUfX2pjGSu5Ka04.roa (hash: oOY6cZI+YmdFuCyChAP/z3GyHQKcVcfCKBCkx+0GXYY=)
                          2: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (hash: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A=)
                          3: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (hash: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0=)
                          4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: kFVWnpDqink853kEoTlBq+RdFF16dEXmC/e/1orVFsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:3c:74:3b:04:c5:50:39:60:0f:82:11:43:4f:12:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
        Validity
            Not Before: Oct 27 12:01:16 2026 GMT
            Not After : Oct 28 12:01:16 2026 GMT
        Subject: CN=660f1e2a920b8a35f85df9dcb425a9032d6fe6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:e7:bf:24:37:b0:80:44:a2:02:f6:22:75:
                    a6:d2:85:e6:49:45:13:ea:5a:45:e6:29:cb:d8:4b:
                    20:62:19:6a:d9:56:f8:4f:6e:fa:36:6a:b3:7a:df:
                    a6:3b:74:12:c1:a0:88:0d:7e:de:f2:ad:15:7b:9a:
                    65:34:e9:aa:e6:e0:ef:17:8e:ce:6c:1f:a2:41:2b:
                    e7:6e:91:21:59:c8:f7:5c:78:d1:d6:53:2e:ec:ee:
                    47:fb:71:b9:05:7b:d6:c4:67:82:12:ef:ce:3e:23:
                    11:c7:2b:52:26:11:41:81:50:94:51:de:c8:af:b5:
                    1d:82:1e:57:47:7e:90:24:1e:ca:b8:77:1f:b3:79:
                    af:7b:a9:82:e2:24:e2:f1:4e:bf:e1:f3:fa:24:fa:
                    5f:b8:93:48:11:08:e2:23:99:88:86:14:d2:75:cf:
                    9e:27:b9:84:02:bf:47:05:cb:b2:06:0c:58:7d:fc:
                    ec:c8:04:37:4d:85:ef:5a:62:b1:eb:dd:3b:c5:3a:
                    f0:af:25:94:70:76:d4:54:e7:05:b3:6c:ba:59:e6:
                    93:70:88:81:f3:95:ec:bc:70:91:18:eb:34:8b:cc:
                    d5:5d:15:97:45:83:9a:15:97:37:7d:c5:2a:6a:8b:
                    c3:ea:bf:d4:90:01:d4:cc:27:29:71:2e:21:39:61:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:1E:2A:92:0B:8A:35:F8:5D:F9:DC:B4:25:A9:03:2D:6F:E6:BA
            X509v3 Authority Key Identifier:
                keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:e9:d8:bc:7d:1e:bd:0a:97:90:98:25:08:25:fe:d7:7e:
         eb:2b:5f:90:62:2d:2d:3e:76:b1:f7:f0:ed:a3:77:a1:3d:76:
         51:a0:7d:53:4b:24:84:ed:b3:88:bd:f9:03:dd:d7:9e:f5:7d:
         0b:68:5b:f3:9e:42:65:d7:a4:14:10:ec:bf:77:f2:55:27:1f:
         5f:fe:5b:ea:60:20:01:77:f6:90:28:39:cc:e5:f4:6c:16:81:
         c8:4c:4f:c2:0d:ab:b8:fd:57:f7:74:a3:a6:85:10:13:2c:3e:
         96:99:b6:31:e8:5d:58:04:5f:57:93:b9:50:13:3e:06:84:34:
         ff:46:1e:3d:df:99:69:f1:e5:9c:cc:fa:38:4f:82:46:85:09:
         3c:e2:d5:f8:19:7a:3d:47:2a:8f:ff:cd:09:17:16:61:cd:b9:
         c3:1a:d5:0b:3c:62:fe:81:9d:8c:92:b4:1b:94:fe:d6:69:93:
         5d:cb:0c:d3:73:eb:ed:4b:a2:39:b2:f8:16:22:99:15:cb:7f:
         b5:9f:fa:d4:d6:8c:62:f8:0d:a5:49:bf:76:f1:db:63:01:e1:
         62:8c:41:c1:d4:81:bd:6c:32:1c:dd:ab:99:17:f8:17:fd:8a:
         73:8e:d5:03:e9:48:cf:7d:c2:a6:8c:76:ca:ba:85:c7:5c:46:
         fa:57:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:34:43 2026 by rpki-client