Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          gjXXpeSD/grUUs7+rrTRIqYn4245Bv2ZxmdpkuTQiFk=
Subject key identifier:   AA:AF:30:E4:C5:47:B3:2E:1A:18:DB:0D:23:DE:A5:CB:0D:22:66:01
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       01A119065A71427CD99B98612195A9C584AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          05CC
Signing time:             Thu 08 Oct 2026 01:00:09 +0000
Manifest this update:     Thu 08 Oct 2026 01:00:09 +0000
Manifest next update:     Fri 09 Oct 2026 01:00:09 +0000
Files and hashes:         1: 4mtxApph_9MS77mo7dnRYHNzv98.roa (hash: PhPkJXgdPNKURqwnzEUMiajtjEnbJmXFdFqDd1kopb0=)
                          2: 9EYbQcuokiQ3PLXtCGAIwFewXeo.roa (hash: jLNXeOrl0Rii7w4wiHiLKivUNt1cz5L0GNNK/0vRrvI=)
                          3: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: UbD0Bkc5jwF05THY8jqjJVVUU63SXaX1wBIVJBr7HVY=)
                          4: aZTkPbXNRsPD1lOUCeaDegTWgE8.roa (hash: JFUxMjofzQwR3Oc2ar9w9EVMpvVMJoznshzwwTzRBIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:06:5a:71:42:7c:d9:9b:98:61:21:95:a9:c5:84:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: Oct  8 01:00:09 2026 GMT
            Not After : Oct  9 01:00:09 2026 GMT
        Subject: CN=aaaf30e4c547b32e1a18db0d23dea5cb0d226601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:51:69:af:32:95:9f:37:60:ed:86:2c:15:
                    ef:6e:0b:ee:6d:dc:cf:48:00:db:2c:28:5c:44:2f:
                    35:fb:46:fe:7b:a8:50:1a:5d:48:b5:7c:ab:94:6c:
                    0f:b8:eb:28:16:05:c3:a9:d1:e0:d5:c9:7d:e6:bd:
                    4d:56:9f:13:b0:9f:8b:cd:96:13:a4:df:c3:b9:3a:
                    35:b5:28:d7:04:2b:7b:96:7f:d3:9e:6a:10:a7:6d:
                    d6:bd:27:ce:e0:12:bd:a1:69:03:d7:32:98:fa:b6:
                    f0:47:be:3c:e8:96:3d:78:27:ae:88:af:0d:f7:09:
                    5c:c9:46:16:10:f9:23:79:b6:70:17:54:81:c5:1b:
                    c7:a6:ed:a2:17:ef:9a:9e:dd:39:fe:02:5c:c8:37:
                    55:4b:05:44:fb:7e:d1:a2:3a:60:4e:7c:a9:be:2e:
                    86:ab:5e:be:f1:c3:a8:8e:63:0e:a6:ae:b3:5a:a4:
                    94:33:a3:ef:22:4f:19:4c:27:82:d9:26:24:ab:49:
                    e3:6c:bf:86:ed:6d:77:73:72:47:8d:4b:2f:ce:94:
                    06:31:23:75:3c:82:f3:39:a6:91:bc:24:d7:e3:05:
                    bd:90:07:10:39:1a:58:ec:d8:c3:74:eb:b1:0f:4f:
                    00:c4:b2:0d:12:27:c7:14:0b:83:11:bb:81:9a:82:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:30:E4:C5:47:B3:2E:1A:18:DB:0D:23:DE:A5:CB:0D:22:66:01
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:2b:91:13:26:30:db:8e:c3:a7:36:d2:6f:0e:30:9b:f3:
         91:a8:2f:3c:e5:7a:01:c5:39:c5:99:09:4d:2e:10:64:95:3d:
         58:ba:1f:93:89:8f:c3:4f:0d:8c:e9:52:bb:18:e6:d5:34:6c:
         7d:4d:93:97:25:d0:c5:65:d0:0d:3d:ee:11:77:40:60:89:65:
         b5:46:b2:49:f2:b0:44:e1:ed:38:5b:a4:15:25:50:74:f8:3f:
         9e:59:45:85:8f:4f:77:56:4c:df:65:b0:bd:5a:ec:3f:a8:c5:
         1b:62:e6:09:29:61:62:78:4e:75:62:bb:0c:e2:7a:ce:70:b0:
         f3:27:a6:6d:68:6b:1d:52:c8:a8:0f:b1:78:9f:23:79:c3:fd:
         25:97:83:d3:a3:c4:45:f0:82:d9:7c:95:0e:f5:31:31:fe:23:
         d4:44:18:81:76:3c:94:25:10:ab:b7:a5:4c:11:d3:e0:77:e0:
         ac:0d:6d:15:ec:8a:18:03:b2:31:97:f9:f3:a8:96:b1:37:6a:
         7a:60:54:02:90:f1:3d:c1:56:b2:f8:d1:71:9d:eb:b6:1a:d2:
         84:57:99:fb:95:e4:8f:3c:07:9b:fb:9f:14:ab:79:da:f4:ae:
         3d:90:fb:ad:fe:a8:59:ef:08:ad:bd:4e:8b:5c:05:4d:eb:4f:
         18:82:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:23 2026 by rpki-client