Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          4MRJC3yo3ccNWOGh7TWUCNfj/O5iZVJCS36TmefsWHs=
Subject key identifier:   33:6E:1E:69:D3:BC:0D:E7:66:54:B3:14:42:33:48:64:E7:65:E7:5F
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       01A11B6300A2418C15007948F7620216506F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          1A96
Signing time:             Thu 08 Oct 2026 12:00:35 +0000
Manifest this update:     Thu 08 Oct 2026 12:00:35 +0000
Manifest next update:     Fri 09 Oct 2026 12:00:35 +0000
Files and hashes:         1: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (hash: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY=)
                          2: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (hash: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=)
                          3: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (hash: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: uGbm7sHopgscY5CiZ9kHsoo48hTrjE6AMs9vpbAjOD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:00:a2:41:8c:15:00:79:48:f7:62:02:16:50:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Oct  8 12:00:35 2026 GMT
            Not After : Oct  9 12:00:35 2026 GMT
        Subject: CN=336e1e69d3bc0de76654b31442334864e765e75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:c3:83:07:d6:3b:4b:f1:4e:86:a8:3f:9b:
                    c3:42:96:b1:70:e5:be:66:06:e2:8b:46:7c:6f:d0:
                    34:e5:49:6e:45:f0:6b:96:32:9b:15:87:b1:44:ca:
                    07:b1:8a:4f:37:c0:ee:2f:89:70:b0:7f:9a:ed:0d:
                    b7:27:a4:66:dd:a8:04:e3:37:b6:06:03:aa:9d:fe:
                    67:b4:98:7e:a3:08:3d:1f:5b:3d:ce:6f:55:a0:2a:
                    c1:b6:1b:10:bb:c7:35:11:65:d3:32:8c:78:d5:04:
                    52:d0:3f:c0:b2:42:da:32:fd:d0:49:49:70:21:1e:
                    1a:39:48:70:ee:04:f9:01:2e:a2:fe:32:f3:8d:3d:
                    78:47:33:b6:21:a3:68:8c:eb:39:d8:07:e5:18:b8:
                    ee:27:15:d1:a8:6e:bd:3a:cc:56:e8:3a:18:9d:39:
                    34:0a:c5:c7:c2:b4:03:b8:f3:6e:f2:f6:c1:26:40:
                    86:06:ad:94:73:7d:75:78:52:7b:99:aa:6f:59:25:
                    4a:5c:47:1b:14:63:34:21:0a:dc:39:08:e5:db:81:
                    d7:e0:49:c2:66:05:c2:ce:e2:0d:95:bd:8b:f3:13:
                    5f:e1:64:0e:79:fc:52:39:f5:84:ae:d0:54:c5:7b:
                    ba:06:70:00:75:c5:3e:fe:f8:bf:af:1c:17:84:0e:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:1E:69:D3:BC:0D:E7:66:54:B3:14:42:33:48:64:E7:65:E7:5F
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7e:6a:3e:4f:ab:88:88:aa:18:74:6e:67:be:84:35:f5:e3:
         32:71:55:65:2c:65:d2:34:dd:dd:d4:4e:01:18:6c:14:0f:09:
         9a:d6:fe:7b:2e:c6:02:13:c9:a0:f7:0f:89:45:39:15:30:77:
         db:c8:d1:c9:b8:05:5e:49:a8:37:f3:66:c2:43:c0:da:8d:6a:
         8f:34:b8:fb:ed:22:5e:95:1b:3d:49:06:6a:7d:fc:1b:b5:55:
         83:96:af:4d:67:d0:49:bd:77:77:15:89:4b:f2:27:1a:f0:6b:
         7c:61:d7:73:49:e3:31:19:fe:8d:90:a4:b8:f1:36:34:3e:85:
         9f:48:98:08:2a:fe:91:d2:89:f3:f6:90:00:36:c2:ec:bf:13:
         1f:ff:b1:a0:8d:9c:45:0c:c0:9e:fd:3e:e1:5b:3a:0d:b8:a8:
         7d:3e:ac:37:e1:73:ad:7e:d5:36:9e:9c:3e:e8:36:75:6b:85:
         d3:3e:be:98:de:08:0a:03:d0:e0:ba:71:ad:ac:9b:65:76:6a:
         f1:fd:80:b8:cf:dc:99:10:88:48:45:00:8f:ad:f4:9e:2f:51:
         27:ed:a1:ec:36:76:75:a9:67:8f:f5:97:77:26:11:a1:c7:ed:
         3c:77:bd:2b:c3:60:0c:fd:14:98:af:59:48:b3:1d:f2:46:da:
         2a:f4:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:53 2026 by rpki-client