Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File:                     wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier:          dRSU7kCFdsuQlgnUklc4hkt+yCmNDYAwNxt/sIR2HjY=
Subject key identifier:   78:2A:3B:CB:EA:99:D2:F6:01:36:4A:5E:B2:E4:C3:AF:99:88:C6:9E
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer:       /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial:       01A1141818634AAEC89D9423F909AE36BC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number:          10F0
Signing time:             Wed 07 Oct 2026 02:01:25 +0000
Manifest this update:     Wed 07 Oct 2026 02:01:25 +0000
Manifest next update:     Thu 08 Oct 2026 02:01:25 +0000
Files and hashes:         1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
                          2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: nagT+G7CTtHpR6LMo0k3zDF05GBN5voRkRr3Z7h346Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:18:18:63:4a:ae:c8:9d:94:23:f9:09:ae:36:bc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
        Validity
            Not Before: Oct  7 02:01:25 2026 GMT
            Not After : Oct  8 02:01:25 2026 GMT
        Subject: CN=782a3bcbea99d2f601364a5eb2e4c3af9988c69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:fb:c6:ad:ea:d6:5a:e3:6d:f7:2c:dd:8b:
                    82:af:7f:f5:ee:a7:4a:b3:3a:6e:3a:7e:6c:6c:d3:
                    63:45:2a:63:ac:32:90:c3:f4:45:5d:5e:01:fd:98:
                    bc:35:46:a7:36:63:5d:e9:1a:5b:d8:63:d0:01:47:
                    4c:7b:98:eb:a4:3a:f0:12:91:56:a1:3b:28:81:1b:
                    9e:9b:86:bf:78:ea:5d:67:6f:cd:f2:3c:61:2a:53:
                    d7:5a:d1:d1:32:d8:28:03:af:67:d3:03:2b:2f:61:
                    6b:34:51:b6:f1:f8:c7:d6:37:a1:0a:e6:45:ff:da:
                    27:e1:f2:50:12:05:29:8f:ff:ac:96:0b:f7:4f:3d:
                    2e:c8:37:45:4e:f0:7f:94:d9:0d:ea:80:45:89:c6:
                    6d:7f:01:c5:ff:c3:a0:33:c1:42:15:f9:91:c8:18:
                    4a:87:c6:f6:f9:66:bf:81:c4:21:96:42:dc:08:f5:
                    40:dd:39:56:e7:5b:34:57:34:36:ff:9f:8e:c4:29:
                    7e:bb:69:98:1d:2a:d9:c0:1d:56:36:8c:e1:21:f8:
                    6b:41:2e:91:08:ee:a9:98:5d:7a:5d:4c:2a:36:c9:
                    30:61:2c:c3:24:46:2f:88:a6:5f:b0:39:76:a5:f5:
                    86:c1:4f:3d:7d:3c:6f:e7:22:f4:f6:0b:0d:12:6f:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:3B:CB:EA:99:D2:F6:01:36:4A:5E:B2:E4:C3:AF:99:88:C6:9E
            X509v3 Authority Key Identifier:
                keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:48:69:3c:92:d6:3d:08:0d:8c:86:63:b4:c9:b5:d6:7b:
         6b:36:14:ee:2b:14:63:68:59:2e:d8:13:3c:fc:68:2f:5a:17:
         74:73:49:af:a1:82:1c:01:ab:90:cc:6a:a2:a1:cb:2f:eb:df:
         e9:b2:d2:b2:88:15:94:55:4d:8d:34:6b:7b:2a:e1:b9:07:00:
         04:56:5a:99:15:35:19:c4:65:5f:4e:c2:d4:ad:c0:86:ab:86:
         00:aa:6b:43:27:a9:43:f6:c5:85:02:29:d1:a9:dd:82:d6:8f:
         1c:4f:78:c4:0c:6d:a1:ed:2a:0a:27:a3:bb:39:af:fa:51:3e:
         a1:49:32:b8:c5:5f:75:d4:79:5b:db:7a:1c:4a:8f:a2:f8:d7:
         d3:ca:ec:a6:67:64:2c:6c:2d:a7:53:1d:97:d1:c8:26:22:77:
         8e:2f:3a:0f:aa:ca:5c:f3:2e:8f:34:ed:01:13:22:c4:25:88:
         e8:55:9f:e6:22:cf:98:cc:8a:67:33:25:41:4b:73:3c:60:8a:
         f1:2c:32:79:87:ea:30:63:6f:47:d0:55:1e:26:40:03:26:5e:
         31:85:62:94:e5:a7:7f:59:07:71:f1:ad:94:c1:4e:fb:36:a4:
         93:4a:9c:ce:2a:09:d6:70:2d:0a:e7:42:de:38:d6:2e:33:c4:
         2b:72:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:01:07 2026 by rpki-client