Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          tHaX+gMGWhZlM4jaXfUjOcwqwabtMllk5UeVIAEgsuY=
Subject key identifier:   63:D7:DE:0D:64:F7:D9:95:36:CB:1F:07:1C:07:51:D2:ED:C5:BE:F4
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       01A180067BC2132939E96A8F3D2DEE00D87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          1AC6
Signing time:             Wed 28 Oct 2026 01:01:10 +0000
Manifest this update:     Wed 28 Oct 2026 01:01:10 +0000
Manifest next update:     Thu 29 Oct 2026 01:01:10 +0000
Files and hashes:         1: aNasyvhnecUaGBiJJmKLy86blxw.roa (hash: SzBG9cwAKB7DYZM2SXTm4Asbf+eO0ZOQ6ca0yvr84RI=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: dR6QSfXLLqmx82+cPgXp29cbLxhcDk3pIU5eQNYLxNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:7b:c2:13:29:39:e9:6a:8f:3d:2d:ee:00:d8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Oct 28 01:01:10 2026 GMT
            Not After : Oct 29 01:01:10 2026 GMT
        Subject: CN=63d7de0d64f7d99536cb1f071c0751d2edc5bef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:8a:5e:57:c6:7d:00:f3:7d:92:ff:3d:bf:
                    82:c6:be:be:0f:cd:bc:1b:0f:9a:43:e9:11:a2:71:
                    c2:1d:de:e5:51:54:0b:58:99:02:a9:65:86:22:27:
                    3b:f6:cf:4f:b7:cb:b7:39:30:d9:5c:96:bc:ef:92:
                    95:88:9c:7f:13:17:10:8a:f2:2c:99:71:90:ef:b4:
                    d5:01:73:d7:69:9e:88:5c:17:0b:8f:87:58:a5:24:
                    8f:8b:5d:f3:f1:32:cb:6b:57:6b:91:4c:ec:97:d9:
                    17:bc:3f:db:f0:d7:a3:8c:f4:6a:85:d7:e2:9a:64:
                    01:01:e6:35:1c:f2:a6:9a:65:48:20:dc:06:bd:7f:
                    2a:8b:41:82:13:e2:ba:8c:3d:98:af:64:80:80:36:
                    96:7e:61:30:b1:f1:3f:ce:56:db:3f:0a:ab:ad:ca:
                    a9:8f:68:f1:36:ad:2f:9a:b9:05:89:77:8b:e1:49:
                    67:bd:8e:28:ad:77:3b:4d:b4:fb:44:99:dd:9d:87:
                    a6:6e:ae:cf:02:31:5d:e8:23:22:47:cd:aa:9e:34:
                    05:d1:5a:be:aa:57:13:f7:34:eb:11:6f:86:d6:cb:
                    67:2c:6c:23:6d:b9:b5:38:09:95:b9:19:4c:0f:f1:
                    97:05:76:ae:84:b5:fd:c1:67:09:aa:7c:82:5f:04:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:DE:0D:64:F7:D9:95:36:CB:1F:07:1C:07:51:D2:ED:C5:BE:F4
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b5:a9:34:79:e3:76:0a:ff:3e:df:41:c9:75:a2:cd:2e:21:
         e0:7c:7d:19:86:cd:60:6d:a8:9f:c9:73:9f:ed:de:eb:5a:fb:
         a3:96:ca:c6:30:f8:3d:24:f9:37:00:ae:84:a9:8e:8d:93:ab:
         ba:a9:47:81:48:81:4b:20:e6:88:56:d1:e1:a5:6c:1f:03:28:
         50:52:66:5a:91:f1:29:68:96:58:a3:4b:60:b9:cd:3a:d3:f0:
         42:9e:19:9e:81:d9:10:05:ff:74:88:71:15:6b:05:3d:ed:95:
         25:4f:bb:c2:ca:6b:9c:e9:b1:4d:c9:73:5b:0a:e5:a6:7a:b8:
         0b:40:73:3a:b3:a9:54:09:c7:c3:01:2a:00:e4:5e:e5:d8:72:
         61:a8:02:ce:95:87:8f:28:ee:17:5c:98:6f:81:15:d0:b3:66:
         77:3e:8d:aa:db:e5:d0:db:61:ae:d0:ba:7e:50:56:7d:ad:5b:
         90:d2:3e:e6:79:70:c6:c7:64:bc:c5:ee:32:8f:cd:da:a5:70:
         87:8a:cc:cd:02:10:d0:ef:ee:5b:15:88:37:f6:25:69:a9:e2:
         b8:b4:b2:54:b1:19:5f:10:2e:02:81:fe:82:0d:86:08:99:60:
         17:41:f6:06:ce:34:00:92:fd:5b:86:f0:3f:fc:28:90:b0:f7:
         5a:58:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:26 2026 by rpki-client