Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          4qEIERTQbHhEdVZyY1sPf2BCGKMYRI7UBF+daBGzz10=
Subject key identifier:   4E:9E:45:2E:9E:6B:D5:81:18:86:AA:11:8C:B5:B3:A7:7F:1E:C0:15
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       01A08C7B355CE64203A5DCFB81696D515016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0EB3
Signing time:             Thu 10 Sep 2026 18:01:19 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:19 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:19 +0000
Files and hashes:         1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: NbJ4iEEyZBa4zHzB99E9LC4vWMjMxxUYc8x1noCNGP8=)
                          2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:35:5c:e6:42:03:a5:dc:fb:81:69:6d:51:50:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Sep 10 18:01:19 2026 GMT
            Not After : Sep 11 18:01:19 2026 GMT
        Subject: CN=4e9e452e9e6bd5811886aa118cb5b3a77f1ec015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:c6:1c:f2:63:83:cb:09:d6:ba:f2:15:41:
                    f4:ae:e1:f1:32:d2:dc:f8:a5:5e:70:eb:9a:f0:f2:
                    d6:b1:c2:f2:65:1c:76:9c:20:57:d2:0f:39:80:d9:
                    1b:82:b5:91:7e:cf:47:f9:62:5e:39:23:dd:b8:b5:
                    2f:8a:5d:fe:f3:fa:d6:e9:19:1a:b8:93:2c:23:42:
                    99:cb:48:66:cf:77:1e:67:8d:2e:fe:56:b0:84:48:
                    b0:8a:e7:d2:56:89:b2:69:45:1f:27:49:c8:f1:64:
                    24:4a:f2:88:ac:65:cc:21:22:61:87:66:58:67:b7:
                    12:fe:07:d0:dc:49:d5:0f:f7:8c:f1:ed:a4:53:23:
                    c7:07:1e:6b:0b:f8:a1:92:62:63:8d:79:99:2c:36:
                    4b:2b:9b:09:47:4b:bf:8a:57:d1:fc:fb:62:15:3c:
                    bb:1b:6a:10:af:fb:ed:8d:9c:6d:2a:70:b2:22:2f:
                    69:a5:c7:4f:ff:09:10:24:0b:86:34:93:dd:d1:45:
                    ab:81:88:68:02:db:07:44:91:9c:a5:4e:ed:05:76:
                    d8:6e:ff:8b:dc:b7:f2:ac:60:25:8a:c3:e6:25:44:
                    a4:93:68:fa:82:cc:64:0d:59:a2:b4:b8:d2:33:f3:
                    83:07:63:93:1b:e0:df:28:6f:b7:a5:50:10:92:f8:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9E:45:2E:9E:6B:D5:81:18:86:AA:11:8C:B5:B3:A7:7F:1E:C0:15
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ac:04:a8:6d:2a:a6:2e:df:2f:45:a3:5d:3c:b3:8d:ac:59:
         2f:99:4f:b9:96:89:97:5b:35:2a:c4:a5:b6:25:d7:f3:29:37:
         53:12:5e:45:87:74:59:58:99:0d:81:16:df:bb:59:1f:e5:66:
         1d:eb:d8:ab:72:88:86:24:e1:48:dd:cc:fa:6f:ac:40:99:de:
         3d:20:06:c2:64:bc:4a:38:1d:b8:f4:32:b5:16:bd:17:9f:70:
         98:51:59:12:76:86:30:d9:de:9d:13:b3:6a:fc:38:f5:24:2e:
         3b:fc:be:b2:4e:64:09:9f:fb:4b:a3:b8:40:96:da:ba:54:68:
         ce:35:da:57:e8:36:64:a1:be:b0:7c:d7:3d:a1:d2:58:17:7c:
         58:01:c6:a5:fc:46:55:e2:12:59:3b:61:5f:a8:9e:95:40:bf:
         df:5c:34:9b:ea:c6:48:f3:2f:e2:76:0f:86:4c:86:d6:ce:ed:
         45:c9:05:a4:5d:14:4d:19:5e:24:41:96:fb:98:bd:f1:e5:30:
         73:5d:cb:50:9d:2e:e1:79:fc:a6:74:7e:12:57:e7:ff:e4:e8:
         ff:8a:3f:e0:f1:76:7b:ae:94:40:f1:f9:fe:b8:66:b2:06:19:
         47:3c:db:08:fd:6f:5f:ea:59:aa:54:9e:12:c6:10:ac:95:a6:
         96:50:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:29 2026 by rpki-client