Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
File:                     wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft (raw, json)
Hash identifier:          pfuED8/mA//orM+OpFZsdRFYc8jYIuX34Rem2ofkmek=
Subject key identifier:   39:BE:D7:6C:88:20:B0:A8:6B:90:E7:3B:3E:1A:0D:E5:47:80:91:72
Authority key identifier: C0:94:19:32:2F:67:0C:D9:9D:42:DF:F4:AC:54:24:8D:90:95:55:83
Certificate issuer:       /CN=c09419322f670cd99d42dff4ac54248d90955583
Certificate serial:       01A08A8CC7B384F56978AC76746154DBC777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:16 +0000
Files and hashes:         1: 1-he4zY3567sT-ir6gGOuSLJUrag.roa (hash: i7BZJdjCKGAhwVaWzHHchSwEiyPMMhU7WoOvC1KUVtA=)
                          2: wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl (hash: JNZeygQQ0BmUhWeuu3QDwijgViY6EREI9isT1EiAlBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:c7:b3:84:f5:69:78:ac:76:74:61:54:db:c7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09419322f670cd99d42dff4ac54248d90955583
        Validity
            Not Before: Sep 10 09:01:16 2026 GMT
            Not After : Sep 11 09:01:16 2026 GMT
        Subject: CN=39bed76c8820b0a86b90e73b3e1a0de547809172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:d8:02:e6:29:7f:bb:b6:3f:7c:01:e3:21:
                    eb:3a:26:cf:14:3a:74:54:ae:cd:c9:ed:4c:41:74:
                    e8:66:e9:5c:1b:8c:02:1a:1e:55:1c:1e:54:8c:b2:
                    9e:9f:0f:89:9e:bf:10:27:1c:6b:e3:84:60:52:36:
                    3d:3e:36:a8:b2:16:f3:e6:b3:2e:24:7b:d2:e2:af:
                    fd:dc:6b:35:d4:33:a5:de:d1:c7:85:e6:c5:29:df:
                    0b:c1:a8:39:e6:77:f2:1c:27:83:ac:c2:de:e8:8a:
                    ba:6d:e8:d4:f5:1a:82:ff:47:89:0b:74:00:7f:ca:
                    48:47:cd:42:f7:ed:2c:00:ae:43:9b:fc:25:d8:f9:
                    35:0d:58:9d:38:9d:b4:7d:62:d5:28:14:46:8c:87:
                    6b:9c:3c:25:80:df:53:0c:b5:c0:b1:f7:27:87:da:
                    8d:30:e6:cd:41:10:85:09:69:bc:f0:80:0e:a3:b7:
                    0a:2e:a1:79:03:95:e1:27:58:66:a6:b5:0e:d4:4d:
                    48:f4:00:9f:6b:da:15:2e:80:fb:bd:f3:13:66:6f:
                    12:a6:3f:2d:41:7b:92:c4:48:71:e7:c6:81:d7:78:
                    b1:2e:0b:20:ce:8f:28:5d:d3:70:04:11:29:b8:66:
                    e5:90:46:14:60:60:cc:cb:82:48:c6:d0:0d:04:71:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:D7:6C:88:20:B0:A8:6B:90:E7:3B:3E:1A:0D:E5:47:80:91:72
            X509v3 Authority Key Identifier:
                keyid:C0:94:19:32:2F:67:0C:D9:9D:42:DF:F4:AC:54:24:8D:90:95:55:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:5b:4e:dc:73:af:7a:31:b8:b7:31:2f:2b:19:5b:95:50:
         72:db:49:a5:b4:91:b9:ab:f9:dc:4d:0a:3e:69:8a:0d:c9:d4:
         fd:bf:c6:b4:8a:d9:f0:13:f7:e6:fd:f6:2b:a2:28:3f:ee:a3:
         4f:4c:cc:98:e3:0c:92:02:ec:23:ee:c8:c4:8f:92:a8:c2:ee:
         6b:b1:d8:ac:16:23:62:52:87:9b:36:91:dd:a0:2e:1f:fe:49:
         be:11:b6:17:a6:9a:15:93:19:86:97:4d:fc:e3:c1:08:f7:8a:
         59:d5:85:46:97:42:c1:41:c0:13:c8:e0:4b:ab:13:a6:f8:a0:
         de:fd:30:1d:17:a3:58:bd:ba:10:e9:fc:81:f6:37:1c:e2:06:
         7b:90:7a:ec:00:5e:01:f6:16:69:d1:d7:c8:33:7f:e9:25:37:
         a1:d5:9a:59:e9:e6:41:f9:8f:e0:4a:34:28:4a:5f:78:d9:cb:
         4a:2d:b0:0b:36:cd:5c:01:dc:2a:ed:d3:48:fc:c9:05:85:96:
         08:20:09:55:f3:2f:ad:3f:f9:a5:9c:7d:1a:92:12:f2:3f:f8:
         89:d8:0c:c6:7f:07:c4:2b:9b:5b:c1:b4:64:a9:4c:12:65:4b:
         54:73:86:e4:23:9a:13:49:53:ec:6e:d6:e2:61:10:5c:b8:6d:
         61:32:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:51 2026 by rpki-client