Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File:                     wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier:          X7zx/xbfZmHF09UsluwKeL2L+be+BA3WLyTyZTDVTEE=
Subject key identifier:   49:91:53:D0:AD:92:D8:AD:22:E0:D1:3C:4C:16:25:88:17:2F:C7:BC
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer:       /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial:       01A121654DE3411BCC07FC1F188C3A682238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number:          1171
Signing time:             Fri 09 Oct 2026 16:00:49 +0000
Manifest this update:     Fri 09 Oct 2026 16:00:49 +0000
Manifest next update:     Sat 10 Oct 2026 16:00:49 +0000
Files and hashes:         1: ReU274f3n_ncs1j1EIj1p86OoXE.roa (hash: gMfCBPEt7VWfVkPLgLTzeV5Igcx1zRAc3Vj/1SP5EIg=)
                          2: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: 4l1cxh1gT4CpKpb3N6zlR+7qRE9XOMMFall2PVfq+Ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:65:4d:e3:41:1b:cc:07:fc:1f:18:8c:3a:68:22:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
        Validity
            Not Before: Oct  9 16:00:49 2026 GMT
            Not After : Oct 10 16:00:49 2026 GMT
        Subject: CN=499153d0ad92d8ad22e0d13c4c162588172fc7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:22:25:94:66:41:99:6d:8f:91:58:75:49:
                    09:22:75:b6:a0:66:ea:33:99:11:60:99:ea:c8:6c:
                    c2:d7:a8:29:4c:6c:99:44:8d:ea:1a:0c:ff:80:71:
                    71:57:8a:50:ff:50:2c:ff:52:1b:e7:31:d0:aa:26:
                    bf:f5:b9:05:99:d7:51:72:e1:15:5a:9c:c9:8c:8e:
                    10:b7:ec:ff:d9:45:f4:0b:d1:ae:8d:d9:2f:74:d6:
                    9c:ae:ff:ce:c3:6d:d9:10:c9:0e:3e:72:dd:d3:92:
                    ee:07:35:37:61:11:dc:eb:ab:67:c7:1c:81:67:ed:
                    8d:1d:e9:a1:01:cf:c6:95:71:72:bc:11:27:1b:ec:
                    87:8c:5a:43:bb:64:bf:a0:da:14:d8:2c:d7:e2:a0:
                    61:c2:92:67:b8:b5:96:6c:54:7a:f3:43:38:f0:73:
                    1b:42:4c:66:ba:b9:c7:be:84:3c:99:05:7b:98:aa:
                    90:77:d4:ca:3e:4f:e3:6b:48:8e:30:c0:a7:a0:fd:
                    7a:f3:01:3f:0b:15:3e:18:b4:8c:13:d6:89:06:43:
                    4b:23:93:c3:94:90:b0:4a:43:2b:d4:de:f4:64:ac:
                    a9:8d:f5:b1:c5:5d:f0:9b:06:e5:4a:45:5a:97:90:
                    9b:24:32:c1:00:ad:4a:88:5a:8a:43:ac:66:43:2a:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:53:D0:AD:92:D8:AD:22:E0:D1:3C:4C:16:25:88:17:2F:C7:BC
            X509v3 Authority Key Identifier:
                keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:d8:61:18:2f:d7:e7:b7:ae:7c:cd:94:55:6c:4b:e1:4e:
         00:7e:8b:10:03:fb:43:bb:f7:67:d2:2a:3e:1a:c2:3f:b3:94:
         a3:af:5b:4a:39:2d:54:25:79:ad:f2:51:bc:3a:6e:d6:5c:a5:
         4f:db:51:e2:16:f5:9d:48:91:dc:4f:cc:7f:8f:ef:79:9e:cf:
         80:9f:f2:28:b5:f8:d9:b3:98:50:fd:65:9e:0a:e4:cc:84:bd:
         85:8b:5f:6c:36:fb:b9:b2:55:65:0e:e7:10:90:f6:83:c6:09:
         c6:7c:c5:56:01:cc:91:0c:13:30:02:5a:dd:ca:ad:8f:79:e9:
         37:eb:71:04:fe:29:94:85:1c:7a:f7:96:ec:26:1e:a9:c9:8e:
         82:5e:3e:74:db:57:08:a9:8a:31:57:84:3b:c4:82:0d:cd:65:
         8f:47:8e:09:d3:c2:ea:21:3d:a1:1a:71:b2:47:fa:8e:83:2f:
         1f:71:5f:68:ea:a2:71:91:b8:13:af:ea:4e:62:ca:ec:ac:92:
         b4:aa:e4:3f:ae:4a:40:d2:66:3a:f5:3c:c7:b4:4f:88:54:ab:
         af:a2:5a:1d:d3:cd:b1:26:a1:e0:9a:ee:c1:e1:57:66:83:5e:
         73:fc:4a:fa:56:b0:c5:f9:7c:c6:39:55:36:44:6d:fb:d6:f4:
         2c:8d:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:19:22 2026 by rpki-client