Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File:                     WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier:          Q6AI3NfedieZoDQGGNyIPJRM1WXc6PGxa8fL+ysNao8=
Subject key identifier:   BA:75:78:D9:0D:DF:E0:09:B8:75:AB:2D:53:B8:F1:CD:E2:15:85:F7
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer:       /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial:       01A08A1F1A8DCAADED72AA155852DF209DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number:          15C4
Signing time:             Thu 10 Sep 2026 07:01:29 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:29 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:29 +0000
Files and hashes:         1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
                          2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: 6u+0f1j2rnAjjmoq5qrddHZFJBjfgDipNJji8GA25pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1f:1a:8d:ca:ad:ed:72:aa:15:58:52:df:20:9d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
        Validity
            Not Before: Sep 10 07:01:29 2026 GMT
            Not After : Sep 11 07:01:29 2026 GMT
        Subject: CN=ba7578d90ddfe009b875ab2d53b8f1cde21585f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:7f:b4:d1:e2:03:1e:26:83:76:ab:dc:2c:
                    da:92:35:d0:ff:12:d6:d4:1c:9a:2b:b4:6d:3d:31:
                    e5:e7:b8:cd:f2:78:fc:98:be:e9:a2:4b:be:76:b0:
                    31:db:c7:df:45:02:d0:ae:5c:28:ab:78:b3:80:62:
                    b9:6a:67:20:82:0b:f8:dc:43:c8:25:dd:7f:57:74:
                    df:24:65:c1:79:0f:90:9c:72:b7:90:00:08:85:19:
                    29:97:62:e0:f8:af:ad:aa:33:04:16:00:82:4d:53:
                    bb:47:f3:d0:53:4c:fb:6a:a8:0a:01:92:1a:66:28:
                    bb:23:c9:5e:d5:c9:ef:ca:cb:a5:57:53:d0:32:5a:
                    04:a3:40:b6:a8:d3:cd:b3:86:7e:0d:70:d8:f2:df:
                    96:0e:f8:db:cb:49:8a:1a:a4:bd:b2:35:dd:ac:93:
                    d6:2c:60:91:2d:92:c4:ed:86:2d:ce:be:07:f8:47:
                    cc:87:41:53:0d:2b:3a:ab:23:a8:d4:e9:99:a1:08:
                    69:30:4e:b0:4f:b2:79:84:73:a8:45:51:25:f8:8e:
                    3b:76:7d:48:87:2d:5d:70:76:fb:86:8b:9a:f1:47:
                    a7:45:f8:ae:1e:37:01:b0:51:b5:98:ae:71:ff:d5:
                    1c:95:1f:49:bd:f4:f8:0f:fe:67:d7:dd:df:31:07:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:78:D9:0D:DF:E0:09:B8:75:AB:2D:53:B8:F1:CD:E2:15:85:F7
            X509v3 Authority Key Identifier:
                keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:2a:b8:9b:ee:b2:3a:54:f3:18:f7:23:e4:52:e7:4f:9c:
         65:ed:8e:0b:0d:19:6f:9c:58:87:ef:fe:46:1d:3f:49:97:0b:
         5d:c4:57:ea:a6:4e:d6:b1:8a:63:41:b8:90:18:83:c0:8b:61:
         40:84:9b:9a:bb:c8:73:54:88:56:7d:ba:c0:c6:62:54:e0:9e:
         1a:4b:3b:53:c4:73:39:57:30:92:02:e1:9b:eb:b0:02:e8:50:
         b5:4e:65:67:80:7d:1e:8c:9d:61:de:4f:d2:ad:8c:e8:33:44:
         14:76:99:84:44:a0:13:9f:31:42:d1:61:19:e1:a5:a5:76:dc:
         b9:f5:b5:32:1f:7d:70:9c:04:e5:76:82:a5:3f:75:3b:8a:ac:
         91:df:0c:8e:78:4d:da:1f:d2:67:2d:a0:81:93:d6:b5:9d:ec:
         32:02:7d:5f:e3:59:3b:01:73:d7:a7:6e:0d:64:2d:2c:3d:b2:
         a2:59:21:b8:f4:34:0c:b3:da:06:21:8e:3c:6e:c2:23:2f:e7:
         4d:41:b0:13:cc:68:5d:cd:f1:83:9e:0a:7d:e6:02:1c:c7:c0:
         8b:ba:c5:bb:db:7d:14:95:1b:f9:37:b1:f3:3b:6b:2f:f6:2d:
         3e:6e:24:98:00:e5:bd:0f:9d:92:c2:c1:bc:d5:4d:e7:01:15:
         46:71:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:39 2026 by rpki-client