Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File:                     wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier:          xJTx/MkHve/nld2udjhfGxP+8sEYJUWVSAZB83fnDvo=
Subject key identifier:   03:A0:2D:10:C0:87:12:3F:27:91:F1:E5:25:41:BC:71:B5:6C:29:E9
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer:       /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial:       01A15FD60DEA6748B7C2EA04E8E417A72E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number:          052F
Signing time:             Wed 21 Oct 2026 19:00:25 +0000
Manifest this update:     Wed 21 Oct 2026 19:00:25 +0000
Manifest next update:     Thu 22 Oct 2026 19:00:25 +0000
Files and hashes:         1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
                          2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
                          3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: hpNvYeDv7hxlduQ0WvjHWvTUZLOuY9b+X/puqsT0EXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:d6:0d:ea:67:48:b7:c2:ea:04:e8:e4:17:a7:2e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
        Validity
            Not Before: Oct 21 19:00:25 2026 GMT
            Not After : Oct 22 19:00:25 2026 GMT
        Subject: CN=03a02d10c087123f2791f1e52541bc71b56c29e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:e1:9c:dd:6a:f2:cf:cc:2e:cf:24:23:3f:
                    aa:62:07:d9:9b:f2:bc:5f:1b:32:43:56:da:78:b4:
                    be:f9:c6:17:8d:ed:ad:cf:4d:d9:fe:57:8a:70:ab:
                    1f:37:bf:ce:f4:d9:ca:8a:64:f2:6c:d7:28:00:67:
                    3c:90:65:5e:6c:88:42:2f:0d:2d:61:ca:46:48:f5:
                    f2:04:07:4b:62:2c:e1:42:ae:21:0c:32:43:30:73:
                    f0:fc:cf:33:16:8a:f4:5a:a9:f7:fb:1b:17:77:b4:
                    57:6a:bd:d7:54:b1:28:b5:c0:dd:2b:ff:d2:6e:57:
                    82:c6:e8:9c:df:26:92:61:47:3d:22:35:d3:ae:49:
                    65:90:4f:41:b1:8c:c4:b1:54:54:2e:06:b9:49:a7:
                    2a:c6:dc:aa:27:c4:a5:9b:8b:80:ec:25:8c:85:0c:
                    c8:74:76:71:7c:12:3d:10:78:fd:22:30:9e:4c:9b:
                    b6:e1:87:05:46:5b:c2:cd:20:79:bc:0d:04:be:c3:
                    c3:95:41:f7:c4:b9:05:0c:79:b6:28:81:39:65:68:
                    e4:40:a1:9f:4b:d2:cb:f3:8f:a9:be:6c:fc:5b:e6:
                    37:05:0d:9a:5b:21:00:60:ca:41:1d:95:7d:78:f3:
                    d8:f9:1d:19:57:13:a8:ab:5b:6c:8f:89:2d:01:86:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A0:2D:10:C0:87:12:3F:27:91:F1:E5:25:41:BC:71:B5:6C:29:E9
            X509v3 Authority Key Identifier:
                keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:e5:0e:c0:1f:de:b1:f9:ec:00:ed:40:78:fd:37:29:00:
         5e:10:5b:ff:60:5b:2e:af:16:5a:1a:15:92:81:7d:24:e3:26:
         5a:06:e9:e8:82:c2:e9:74:b5:aa:e8:18:93:32:65:25:72:ba:
         07:49:5c:eb:6d:ab:e1:62:cd:ff:62:57:57:b3:eb:5e:ce:09:
         4d:f2:d4:e7:2d:88:28:e1:9d:59:b4:cc:09:5b:67:0b:de:f2:
         82:28:d2:c5:51:33:13:44:2a:5a:0c:93:a7:1e:04:c8:88:3e:
         f6:f3:4e:34:d7:47:4a:14:68:9b:d9:0a:13:53:da:6e:be:12:
         6f:e9:9d:7d:79:ab:35:1a:5b:4f:2e:72:a8:fa:ec:e6:8d:fd:
         d3:2a:a8:7f:ed:4b:02:23:22:55:5c:95:61:27:bc:f2:3f:97:
         c4:77:1c:83:30:df:ec:3b:ee:80:e7:7f:0b:30:fb:3b:11:fb:
         b5:b5:45:ed:f5:24:89:ef:39:31:70:82:49:83:51:c5:ed:64:
         be:1b:3a:af:eb:0a:32:dd:1f:6d:51:5c:c0:f9:09:72:30:df:
         60:31:f9:d7:27:dc:ee:13:4b:46:d2:92:1e:31:a0:10:16:bd:
         98:d4:94:2b:57:bd:00:40:3f:35:0f:db:83:0a:1e:26:b7:66:
         2f:f3:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:14:56 2026 by rpki-client