Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
File:                     wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft (raw, json)
Hash identifier:          tagujd9ctN2RjEN0RQMB/knoreKNezsVSChZngE9rMw=
Subject key identifier:   63:D2:9A:92:CC:91:3B:2D:FC:A3:E5:1A:28:68:2C:5A:11:6D:1E:C6
Authority key identifier: C0:94:19:32:2F:67:0C:D9:9D:42:DF:F4:AC:54:24:8D:90:95:55:83
Certificate issuer:       /CN=c09419322f670cd99d42dff4ac54248d90955583
Certificate serial:       01A17DE11DE01E391CB100B7A7F6D248AC43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 15:01:07 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:07 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:07 +0000
Files and hashes:         1: 1-he4zY3567sT-ir6gGOuSLJUrag.roa (hash: i7BZJdjCKGAhwVaWzHHchSwEiyPMMhU7WoOvC1KUVtA=)
                          2: wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl (hash: DUSzzKoZ9WPgmCj60sar+4N1QBTjKvCAZSUdbETumQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:1d:e0:1e:39:1c:b1:00:b7:a7:f6:d2:48:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09419322f670cd99d42dff4ac54248d90955583
        Validity
            Not Before: Oct 27 15:01:07 2026 GMT
            Not After : Oct 28 15:01:07 2026 GMT
        Subject: CN=63d29a92cc913b2dfca3e51a28682c5a116d1ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:ab:ec:61:ae:70:d8:99:ca:3a:a6:92:0c:
                    79:a3:af:2b:d1:35:40:f6:61:69:56:74:2a:86:84:
                    b3:9c:77:79:71:e1:dd:80:78:eb:60:e0:ae:18:75:
                    9b:8a:a2:6a:4a:01:39:2a:07:13:8d:7e:f7:ad:a4:
                    44:0b:c9:02:7a:e1:35:b2:f8:9c:f1:d4:ea:bc:0f:
                    50:d1:65:76:ab:a5:66:52:c8:e1:f7:83:b0:a7:7e:
                    58:b9:ad:78:3c:52:63:29:fb:b0:ac:d5:79:36:26:
                    f1:d1:73:e2:91:eb:ee:42:59:1f:22:7a:85:2a:26:
                    89:6f:02:bb:0a:9f:c0:21:96:a1:56:3c:e8:85:bd:
                    e4:e7:63:9d:8e:d4:51:29:7c:c2:54:24:a5:da:20:
                    e4:3c:05:bc:b3:93:e9:72:4c:e4:74:60:a5:ae:e2:
                    c2:fc:26:59:ba:a8:b7:45:95:3c:70:f2:09:8e:2e:
                    e8:88:9e:41:7e:8a:bf:11:21:e1:51:e1:59:4e:56:
                    19:81:51:42:d4:90:cf:61:8e:ca:19:c2:82:29:18:
                    13:6f:c8:b3:7b:86:e3:08:63:0b:ae:3c:8e:8b:a6:
                    6d:55:e6:1b:8e:0b:2f:14:8d:15:29:ce:b9:12:c5:
                    4e:2d:64:88:dd:e7:ae:25:e5:f0:36:89:a0:85:5f:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D2:9A:92:CC:91:3B:2D:FC:A3:E5:1A:28:68:2C:5A:11:6D:1E:C6
            X509v3 Authority Key Identifier:
                keyid:C0:94:19:32:2F:67:0C:D9:9D:42:DF:F4:AC:54:24:8D:90:95:55:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f1:fc:ab:28:c6:d5:4f:d5:56:dc:cd:68:82:b2:5f:e2:75:
         bd:39:11:89:33:a4:68:83:5c:9c:da:4b:bb:5d:3b:a7:46:20:
         ca:4f:7f:11:a8:4f:b0:0b:85:61:20:94:e5:d7:3e:c1:45:53:
         65:95:2b:76:47:c7:65:78:47:68:6f:6d:d3:dd:eb:5b:d4:88:
         db:ed:f5:d9:42:94:ef:95:e5:d2:25:12:ed:7a:a9:23:df:c8:
         59:5a:6b:13:a1:90:1e:ce:16:07:ec:07:14:b9:87:cc:50:3a:
         08:0d:4b:9f:4b:06:33:d8:12:90:72:ae:8c:0d:0d:96:d1:fd:
         54:93:8c:46:63:f8:b7:36:54:48:e5:67:5f:f2:60:7e:68:74:
         5a:57:ad:07:69:92:a8:71:cb:eb:9d:47:49:bf:c1:7f:dc:44:
         d0:dc:36:b4:0d:41:7e:d5:fe:29:44:d9:0e:eb:ea:0d:52:99:
         12:0e:d6:7a:b6:17:ea:a5:cd:13:55:93:74:ce:7f:14:47:1c:
         40:c6:49:7f:72:b0:6c:e1:80:25:e5:9c:4e:fe:51:36:bc:57:
         52:cf:a0:ec:69:c3:ff:d6:e3:34:71:9b:be:a4:e8:cf:fd:23:
         73:55:3e:1f:9e:82:11:4b:1a:be:cc:d2:13:ce:1e:ff:89:50:
         3c:ed:5c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94R3gHjkcsQC3p/bSSKxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOTQxOTMyMmY2NzBjZDk5ZDQyZGZmNGFjNTQyNDhkOTA5
NTU1ODMwHhcNMjYxMDI3MTUwMTA3WhcNMjYxMDI4MTUwMTA3WjAzMTEwLwYDVQQD
Eyg2M2QyOWE5MmNjOTEzYjJkZmNhM2U1MWEyODY4MmM1YTExNmQxZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ir7GGucNiZyjqmkgx5o68r0TVA
9mFpVnQqhoSznHd5ceHdgHjrYOCuGHWbiqJqSgE5KgcTjX73raREC8kCeuE1svic
8dTqvA9Q0WV2q6VmUsjh94Owp35Yua14PFJjKfuwrNV5Nibx0XPikevuQlkfInqF
KiaJbwK7Cp/AIZahVjzohb3k52OdjtRRKXzCVCSl2iDkPAW8s5PpckzkdGClruLC
/CZZuqi3RZU8cPIJji7oiJ5Bfoq/ESHhUeFZTlYZgVFC1JDPYY7KGcKCKRgTb8iz
e4bjCGMLrjyOi6ZtVeYbjgsvFI0VKc65EsVOLWSI3eeuJeXwNomghV8cEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPSmpLMkTst/KPlGihoLFoRbR7GMB8GA1UdIwQY
MBaAFMCUGTIvZwzZnULf9KxUJI2QlVWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0pRWk1pOW5ETm1kUXRfMHJGUWtqWkNWVllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt
M2RkMjkzZjc0ZTVlLzEvd0pRWk1pOW5ETm1kUXRfMHJGUWtqWkNWVllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl
LzEvd0pRWk1pOW5ETm1kUXRfMHJGUWtqWkNWVllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfH8qyjG
1U/VVtzNaIKyX+J1vTkRiTOkaINcnNpLu107p0Ygyk9/EahPsAuFYSCU5dc+wUVT
ZZUrdkfHZXhHaG9t093rW9SI2+312UKU75Xl0iUS7XqpI9/IWVprE6GQHs4WB+wH
FLmHzFA6CA1Ln0sGM9gSkHKujA0NltH9VJOMRmP4tzZUSOVnX/Jgfmh0WletB2mS
qHHL651HSb/Bf9xE0Nw2tA1BftX+KUTZDuvqDVKZEg7WerYX6qXNE1WTdM5/FEcc
QMZJf3KwbOGAJeWcTv5RNrxXUs+g7GnD/9bjNHGbvqToz/0jc1U+H56CEUsavszS
E84e/4lQPO1chg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:43:21 2026 by rpki-client