Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File:                     wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier:          f9e81esdLls7JdMYG8dgADY6va/iz6NUHEs3HLJKM1E=
Subject key identifier:   22:DA:F1:29:A8:A7:DF:1F:99:7C:10:0C:B0:57:0E:02:83:73:6D:59
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer:       /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial:       01A129C3D8AE6B9AA4C5DBB88B57F560A973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number:          03A6
Signing time:             Sun 11 Oct 2026 07:01:03 +0000
Manifest this update:     Sun 11 Oct 2026 07:01:03 +0000
Manifest next update:     Mon 12 Oct 2026 07:01:03 +0000
Files and hashes:         1: 9NpMCQPTdYLM6RigPHbxPRz98fA.roa (hash: ioCoSDv35er7fovn3uLODbMUmoh4IJiyFfj+GFkzs9c=)
                          2: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
                          3: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
                          4: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: YaL3pEJXacjpXFEv5viaQmFntyCZrS/8w/+9HqgQu5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c3:d8:ae:6b:9a:a4:c5:db:b8:8b:57:f5:60:a9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
        Validity
            Not Before: Oct 11 07:01:03 2026 GMT
            Not After : Oct 12 07:01:03 2026 GMT
        Subject: CN=22daf129a8a7df1f997c100cb0570e0283736d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:cb:cd:65:d8:2a:ad:4b:b7:b2:a9:19:73:
                    a8:16:c1:a9:06:c2:b7:ca:21:8d:a3:8c:a8:20:63:
                    cb:9e:4b:6e:64:e4:df:ed:d9:5c:74:02:b8:68:f5:
                    79:7e:11:76:6e:42:13:cc:f9:1d:0e:1b:3a:e0:aa:
                    c5:7d:c7:0f:c9:a4:3d:47:e1:75:32:19:9a:8e:fd:
                    26:c0:21:8b:43:0e:37:23:2e:28:86:75:28:76:d4:
                    1b:22:31:b8:2b:96:02:7b:a0:50:b2:3b:3b:67:cf:
                    36:d0:04:04:2b:3f:c8:bb:8f:b3:36:07:a8:4d:c5:
                    25:fe:63:72:e2:bc:52:1b:ec:b6:b4:06:cb:26:38:
                    ea:6f:7d:63:81:dc:53:fd:7f:ad:ba:0b:40:7f:35:
                    71:1a:ff:d0:00:57:77:a5:ea:a8:a9:8c:c5:13:a6:
                    63:60:f2:7a:a5:2b:ad:3b:ac:ec:83:d1:bd:30:f8:
                    a8:02:e9:a8:ed:2c:57:c1:93:6f:77:da:64:e5:9f:
                    6e:94:a6:77:60:41:a8:c8:cf:f1:ab:74:3e:f1:fa:
                    37:61:a6:94:42:39:e3:f7:71:ee:9a:9c:f0:26:0d:
                    6e:9f:5f:f4:f1:c2:2d:6f:e6:ac:0c:3c:aa:6e:2d:
                    1b:c0:f2:dc:20:e1:6d:c7:b2:99:88:35:15:42:b4:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:F1:29:A8:A7:DF:1F:99:7C:10:0C:B0:57:0E:02:83:73:6D:59
            X509v3 Authority Key Identifier:
                keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:2b:ec:73:78:90:bb:47:11:1c:20:34:0b:c4:38:10:02:
         aa:86:e9:af:2c:a9:70:2f:60:35:ff:e5:e9:c3:1e:e2:1d:c1:
         3e:af:85:5f:a6:b7:5d:04:c0:74:d2:d5:41:58:bd:3e:9e:cd:
         80:12:72:d3:0c:7a:f1:0f:7c:5a:f6:b2:3d:18:7f:32:cd:56:
         17:8d:1b:ea:db:4a:18:4e:17:fc:56:11:6e:27:c5:e5:d6:8a:
         27:4b:60:d5:71:d7:b2:a3:09:3a:a1:a9:8c:4f:18:98:95:6a:
         f3:13:da:f1:61:cb:68:63:32:9b:d6:53:6e:24:8f:23:5a:5c:
         4c:2f:87:c9:46:52:bc:d8:b5:25:93:af:d5:b7:1e:ca:60:11:
         dd:25:d0:ed:82:42:68:4e:eb:75:19:1d:3c:08:70:be:2e:95:
         26:f2:ca:9b:7b:e7:e9:93:49:9f:59:21:0a:4f:ff:87:a7:2b:
         08:5e:7a:7b:2e:88:3f:96:de:68:9a:c8:d0:6b:4f:52:60:94:
         53:c9:74:a0:cd:62:3c:d7:e1:72:08:ac:71:9d:84:ca:b5:78:
         97:ec:66:19:f7:3b:c0:2b:c2:cc:fc:f4:ed:31:38:af:f4:13:
         fe:55:da:f9:24:a3:4e:1c:2f:b7:b8:7e:a0:04:c5:85:42:53:
         e9:a0:4d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpw9iua5qkxdu4i1f1YKlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZmI0OTJmMGExODhmMDAxNDI3OGUwZGY2YmJiMDI5Y2Vi
YWRiYWYwHhcNMjYxMDExMDcwMTAzWhcNMjYxMDEyMDcwMTAzWjAzMTEwLwYDVQQD
EygyMmRhZjEyOWE4YTdkZjFmOTk3YzEwMGNiMDU3MGUwMjgzNzM2ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2abLzWXYKq1Lt7KpGXOoFsGpBsK3
yiGNo4yoIGPLnktuZOTf7dlcdAK4aPV5fhF2bkITzPkdDhs64KrFfccPyaQ9R+F1
Mhmajv0mwCGLQw43Iy4ohnUodtQbIjG4K5YCe6BQsjs7Z8820AQEKz/Iu4+zNgeo
TcUl/mNy4rxSG+y2tAbLJjjqb31jgdxT/X+tugtAfzVxGv/QAFd3peqoqYzFE6Zj
YPJ6pSutO6zsg9G9MPioAumo7SxXwZNvd9pk5Z9ulKZ3YEGoyM/xq3Q+8fo3YaaU
Qjnj93HumpzwJg1un1/08cItb+asDDyqbi0bwPLcIOFtx7KZiDUVQrQ4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLa8Smop98fmXwQDLBXDgKDc21ZMB8GA1UdIwQY
MBaAFMH7SS8KGI8AFCeODfa7sCnOutuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQt
NTE1YTBlZjY4NmFiLzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQtNTE1YTBlZjY4NmFi
LzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6wr7HN4
kLtHERwgNAvEOBACqobpryypcC9gNf/l6cMe4h3BPq+FX6a3XQTAdNLVQVi9Pp7N
gBJy0wx68Q98WvayPRh/Ms1WF40b6ttKGE4X/FYRbifF5daKJ0tg1XHXsqMJOqGp
jE8YmJVq8xPa8WHLaGMym9ZTbiSPI1pcTC+HyUZSvNi1JZOv1bceymAR3SXQ7YJC
aE7rdRkdPAhwvi6VJvLKm3vn6ZNJn1khCk//h6crCF56ey6IP5beaJrI0GtPUmCU
U8l0oM1iPNfhcgiscZ2EyrV4l+xmGfc7wCvCzPz07TE4r/QT/lXa+SSjThwvt7h+
oATFhUJT6aBNCw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:19:09 2026 by rpki-client