Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          8Lq5T4XCZg8SvTJs7qGXR3t36zgFYKtR5UhPtgT+8Tw=
Subject key identifier:   58:89:8A:58:A5:E6:4A:DB:01:6C:C7:AB:50:D4:06:6A:58:35:21:2F
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       01A0F67B3D473DC6E4F909C730C9339414B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1A91
Signing time:             Thu 01 Oct 2026 08:01:06 +0000
Manifest this update:     Thu 01 Oct 2026 08:01:06 +0000
Manifest next update:     Fri 02 Oct 2026 08:01:06 +0000
Files and hashes:         1: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (hash: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8=)
                          2: TURon6JiNs0lgTZSDniUslEGz9E.roa (hash: eXgvunaSwK3PiegbOluPRt7fixoWf2ckeL+bp42GNpc=)
                          3: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (hash: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: GCU4ShSPYw97CqljXER6UxUKW0KeTnVrMyMAgELqyFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:7b:3d:47:3d:c6:e4:f9:09:c7:30:c9:33:94:14:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Oct  1 08:01:06 2026 GMT
            Not After : Oct  2 08:01:06 2026 GMT
        Subject: CN=58898a58a5e64adb016cc7ab50d4066a5835212f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:c8:a4:59:e7:2a:89:7d:66:35:b2:c5:c1:
                    36:81:45:b3:6f:82:49:3f:21:3b:60:67:bd:bc:c7:
                    a2:bf:91:74:b2:dc:fd:d2:39:e6:5a:ce:1c:c5:78:
                    0e:e8:7c:b4:43:48:b3:d3:3a:32:32:cc:70:e8:23:
                    3b:74:37:c7:44:ee:7d:16:07:39:48:ab:c5:3f:14:
                    62:f1:58:37:cc:f4:8b:fb:c3:cd:d9:8f:31:f1:00:
                    ac:c4:b0:bb:c9:21:e8:63:18:06:10:b3:ba:cb:a0:
                    62:95:b4:d5:30:32:95:c7:ba:a5:88:39:a1:5c:5e:
                    df:d3:43:9a:72:bb:83:11:78:92:ee:f0:17:2d:1b:
                    36:c8:8b:5f:d2:13:77:7f:15:29:25:ec:5a:ce:b4:
                    32:a6:50:1f:b9:59:2b:21:13:f0:a1:f5:18:68:16:
                    fd:b1:12:94:ae:34:42:78:d5:7c:f7:e4:7f:d9:1c:
                    a2:d4:ab:83:34:87:f2:46:0b:8b:ec:70:96:ee:1b:
                    41:16:e2:8a:d2:b8:d0:3a:37:94:8d:93:de:14:58:
                    ab:c0:cd:76:36:d6:51:c6:15:5e:99:ec:78:d4:98:
                    66:c3:83:05:14:51:9d:02:e8:df:f2:96:29:38:06:
                    ea:01:d2:9e:ce:ca:ef:fc:4c:ed:bd:0a:11:e3:97:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:8A:58:A5:E6:4A:DB:01:6C:C7:AB:50:D4:06:6A:58:35:21:2F
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c4:75:1c:9f:62:2c:bf:e1:2a:e6:bd:86:bb:89:44:eb:a6:
         46:41:84:38:23:7a:33:b6:67:49:cd:d4:c8:70:ac:94:b9:41:
         2c:92:c1:48:c5:9d:7f:f7:38:db:64:03:1c:ce:ce:f2:1f:e7:
         28:1c:47:e9:da:76:05:30:ca:d9:f8:52:18:dc:c8:24:25:19:
         57:63:ad:8b:1d:00:0d:b5:04:1b:1e:03:56:ca:fd:2b:b4:bc:
         76:aa:ef:db:f8:ce:41:5e:f6:e0:f7:b2:6f:c2:77:02:bc:50:
         22:cd:26:fd:c6:19:d6:3f:b7:86:11:74:61:1b:db:8e:39:8b:
         98:9e:5d:83:22:45:05:0c:c3:bc:d7:e1:38:4a:5b:51:ad:f6:
         92:d9:58:72:37:24:6e:70:ea:e4:11:d8:e9:09:54:4a:0e:9e:
         2c:25:df:53:58:ba:9e:04:8e:45:6f:74:7d:ef:e2:d7:b0:f9:
         e9:88:16:11:45:6f:a5:b5:11:85:f1:fd:fd:88:47:73:c5:26:
         49:3f:4a:a6:37:3f:a6:22:18:24:60:71:2b:51:e6:fe:0b:f0:
         89:02:e6:e6:72:35:24:7d:f5:3b:78:4b:ba:b1:c8:60:7d:99:
         ad:eb:62:17:a9:9e:fb:38:a9:87:91:e0:b5:3f:32:b4:c5:85:
         b6:4c:99:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD2ez1HPcbk+QnHMMkzlBS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl
MDk3YmIwHhcNMjYxMDAxMDgwMTA2WhcNMjYxMDAyMDgwMTA2WjAzMTEwLwYDVQQD
Eyg1ODg5OGE1OGE1ZTY0YWRiMDE2Y2M3YWI1MGQ0MDY2YTU4MzUyMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjIpFnnKol9ZjWyxcE2gUWzb4JJ
PyE7YGe9vMeiv5F0stz90jnmWs4cxXgO6Hy0Q0iz0zoyMsxw6CM7dDfHRO59Fgc5
SKvFPxRi8Vg3zPSL+8PN2Y8x8QCsxLC7ySHoYxgGELO6y6BilbTVMDKVx7qliDmh
XF7f00OacruDEXiS7vAXLRs2yItf0hN3fxUpJexazrQyplAfuVkrIRPwofUYaBb9
sRKUrjRCeNV89+R/2Ryi1KuDNIfyRguL7HCW7htBFuKK0rjQOjeUjZPeFFirwM12
NtZRxhVemex41Jhmw4MFFFGdAujf8pYpOAbqAdKezsrv/EztvQoR45cuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiJilil5krbAWzHq1DUBmpYNSEvMB8GA1UdIwQY
MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct
ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2
LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA18R1HJ9i
LL/hKua9hruJROumRkGEOCN6M7ZnSc3UyHCslLlBLJLBSMWdf/c422QDHM7O8h/n
KBxH6dp2BTDK2fhSGNzIJCUZV2Otix0ADbUEGx4DVsr9K7S8dqrv2/jOQV724Pey
b8J3ArxQIs0m/cYZ1j+3hhF0YRvbjjmLmJ5dgyJFBQzDvNfhOEpbUa32ktlYcjck
bnDq5BHY6QlUSg6eLCXfU1i6ngSORW90fe/i17D56YgWEUVvpbURhfH9/YhHc8Um
ST9Kpjc/piIYJGBxK1Hm/gvwiQLm5nI1JH31O3hLurHIYH2ZretiF6me+ziph5Hg
tT8ytMWFtkyZ5w==
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:10:35 2026 by rpki-client