Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File:                     W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier:          2FUzOztfpngbZJXTh3puhBUpSOAZLAfofd4ZjxPTt54=
Subject key identifier:   B6:9F:A2:40:4E:82:D3:4F:F4:AE:5B:3A:3C:3E:D4:BE:D3:6A:B3:EF
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer:       /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial:       01A1856389FDD8DF3558825CE94E73DB05B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number:          0716
Signing time:             Thu 29 Oct 2026 02:00:55 +0000
Manifest this update:     Thu 29 Oct 2026 02:00:55 +0000
Manifest next update:     Fri 30 Oct 2026 02:00:55 +0000
Files and hashes:         1: 6AdECEyUfnYbw235tYGMtHLw6Xw.asa (hash: Ay8h4movBGLpwUN8dQ7zR6CqdQIUbiESTeAG4Mdcu18=)
                          2: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: tIh0n4aZXIhWtbl5T6yq9hkt7pXhb2umaVIQ5ktu+s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:63:89:fd:d8:df:35:58:82:5c:e9:4e:73:db:05:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
        Validity
            Not Before: Oct 29 02:00:55 2026 GMT
            Not After : Oct 30 02:00:55 2026 GMT
        Subject: CN=b69fa2404e82d34ff4ae5b3a3c3ed4bed36ab3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:6c:c8:6a:13:29:82:06:79:10:62:57:70:
                    95:63:61:0a:ea:d8:9c:a6:56:93:0f:3a:f7:0d:73:
                    0c:21:31:db:d2:60:97:13:ad:69:42:aa:34:26:d4:
                    6a:3c:90:6e:3d:dd:ad:90:fd:c2:b0:42:e1:d9:dc:
                    50:33:74:59:53:a6:4a:74:9f:04:51:ee:67:c1:ea:
                    3d:e8:b8:9c:0d:d8:1a:1a:71:64:77:e4:14:2a:e9:
                    ea:a4:84:56:22:44:c1:1f:fb:6d:1f:e7:7d:56:75:
                    85:6f:c1:aa:fa:7c:c9:56:9a:1f:54:c0:b5:15:b3:
                    70:23:a8:8c:06:ae:22:af:4a:8b:a6:06:bd:02:fd:
                    ba:63:fb:92:05:aa:fd:53:7d:45:83:16:ce:11:c2:
                    90:49:44:cf:c1:69:f6:45:95:97:02:a9:a2:91:1f:
                    f8:bf:33:9b:65:38:31:8a:9a:3a:d1:dc:92:63:7b:
                    36:11:68:d9:71:08:1e:0c:cc:e6:f0:91:28:59:fc:
                    73:b8:b1:71:90:54:c7:62:83:a8:c6:03:6a:8a:f3:
                    1b:b7:07:ef:4b:80:f2:6b:d0:b2:1b:92:a8:0e:3c:
                    68:bf:58:89:5a:f0:cb:24:a2:07:5a:80:c4:ac:e0:
                    bf:bc:38:43:2a:b2:1c:a6:48:af:a8:16:8f:38:fa:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:A2:40:4E:82:D3:4F:F4:AE:5B:3A:3C:3E:D4:BE:D3:6A:B3:EF
            X509v3 Authority Key Identifier:
                keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fc:25:66:a2:7e:7f:5d:aa:3a:be:13:27:db:43:8f:cd:f6:
         21:b5:3f:88:42:6b:71:e7:9e:5f:b9:41:69:70:e1:60:9a:7b:
         14:6d:20:08:e6:f2:4a:fa:a8:6d:bf:3d:76:56:ed:05:68:73:
         b9:c4:94:97:80:ac:2e:69:3b:d8:2d:a7:bf:73:86:f5:e2:cc:
         3f:4b:83:bf:36:e0:33:58:72:8e:c6:c9:cb:bb:c1:16:16:28:
         b0:6e:5a:46:d3:14:2a:ae:78:ed:8e:bb:36:14:5e:f4:79:b6:
         cf:c4:02:f2:17:53:d2:06:bb:31:3a:57:45:bc:af:04:98:bc:
         3c:c8:bd:22:68:02:93:72:f0:99:51:ef:16:c9:73:b8:20:18:
         20:0d:3c:ad:7f:e1:58:69:cc:ba:e9:88:a5:3c:f8:44:f5:b1:
         ba:31:0b:c2:34:ba:c5:bf:60:91:81:d0:b6:54:61:c5:c3:d5:
         69:f5:07:04:0c:0f:86:bc:f3:01:58:51:9d:cd:c0:6d:6a:31:
         0a:bb:bf:76:0e:c4:63:c4:e2:a8:63:64:d8:e2:8b:64:a7:2f:
         af:fc:75:74:27:6b:65:21:b8:71:a7:34:2a:47:09:47:26:b0:
         48:95:17:a5:05:47:ea:4e:e3:03:82:6b:2c:e4:37:b4:51:4f:
         95:fb:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:03:58 2026 by rpki-client