Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File:                     wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier:          VcFtz4w6xFSOKON1QvDcH7SFBlQB+oehRjMIKoCkUwo=
Subject key identifier:   C9:65:38:1E:14:96:F3:D8:8A:A6:C0:EF:CC:8F:26:C2:9A:FB:8C:07
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer:       /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial:       01A06C82822A68F4CB1E747CAF0565EAAE75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number:          04B1
Signing time:             Fri 04 Sep 2026 13:01:27 +0000
Manifest this update:     Fri 04 Sep 2026 13:01:27 +0000
Manifest next update:     Sat 05 Sep 2026 13:01:27 +0000
Files and hashes:         1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
                          2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
                          3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: tAV8rrokgEjzgRoUAlf6teKGcPNd4Ph+TvxKxPF5o9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:82:82:2a:68:f4:cb:1e:74:7c:af:05:65:ea:ae:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
        Validity
            Not Before: Sep  4 13:01:27 2026 GMT
            Not After : Sep  5 13:01:27 2026 GMT
        Subject: CN=c965381e1496f3d88aa6c0efcc8f26c29afb8c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:8d:96:c6:00:8c:fd:c3:be:73:27:b2:1b:
                    4b:d4:75:34:75:6a:87:29:f0:cb:2a:98:6a:c2:22:
                    f6:05:48:73:e0:e2:3d:02:c7:ea:ad:3c:4c:ef:ad:
                    90:1c:1c:7b:a7:5a:25:b4:69:fb:ec:91:bd:e8:81:
                    9c:06:7c:b6:22:ca:b9:dc:15:d9:90:35:b9:28:54:
                    8f:57:06:ea:a6:8b:00:3e:46:42:07:a4:de:91:0d:
                    18:a3:6b:95:bb:79:11:58:2d:43:53:81:e3:ee:45:
                    36:6c:f2:25:b2:4f:97:cc:bd:e8:c9:dd:e7:e1:0f:
                    cc:97:9d:ef:73:5e:4e:64:e3:5a:8e:99:07:7f:eb:
                    3a:7c:7f:95:c5:65:0e:4e:90:93:4e:f6:d2:61:1d:
                    18:a4:39:e8:4e:c4:e8:1d:13:70:da:9f:27:8a:ed:
                    3f:01:93:92:c5:c8:ac:63:c0:27:18:06:45:12:eb:
                    20:57:2d:5d:fd:c2:8a:dd:78:6a:c9:ac:04:8a:47:
                    84:81:9e:fc:e5:ba:11:8f:23:87:41:1b:b1:1d:71:
                    52:99:6e:28:fc:53:e1:1b:34:b2:3f:6d:f7:bd:21:
                    4e:2d:a1:a2:32:08:fa:02:60:98:16:d3:38:6e:f3:
                    43:b3:01:64:30:b9:16:5e:65:e7:b3:dd:e6:76:d8:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:38:1E:14:96:F3:D8:8A:A6:C0:EF:CC:8F:26:C2:9A:FB:8C:07
            X509v3 Authority Key Identifier:
                keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:28:05:d9:51:df:99:8a:3e:b8:dd:e0:57:a0:77:f4:ee:52:
         46:38:dd:c9:20:60:bf:67:a6:b9:69:00:21:57:45:73:35:08:
         cc:4c:27:f1:41:c1:e6:72:69:3c:52:dd:9a:2e:1e:63:95:46:
         7a:84:65:b9:fa:ba:be:7b:aa:ca:a7:4a:a4:74:3b:92:80:1b:
         e4:9e:4b:e1:f0:91:65:f3:e7:cf:29:50:57:85:b4:35:14:d5:
         c0:13:a7:4b:f4:0e:2d:e3:ac:f4:12:5f:f5:9a:ba:93:52:66:
         d8:6f:af:d8:53:1f:b3:cc:f2:35:b7:77:fa:9b:e6:a1:4b:93:
         1d:69:52:e2:ed:c9:38:99:aa:ea:7b:0b:5a:05:1f:e8:e1:38:
         22:9a:55:c9:73:64:13:0a:67:0f:fa:16:28:ad:ba:48:78:6e:
         35:f0:95:e4:20:a4:9e:e4:38:0a:35:56:a3:71:2e:fb:43:1a:
         19:fa:e2:84:89:91:66:d5:70:dc:58:34:3d:15:d3:63:cd:3f:
         ac:a2:ad:44:67:71:4a:3a:04:eb:c7:58:44:b4:bd:3f:bc:80:
         6e:59:1d:44:4e:fd:a7:21:af:4d:c1:69:9e:8d:67:2d:b6:d3:
         0f:56:44:6a:da:c2:df:bf:f4:bf:31:e0:39:7c:ef:94:86:cb:
         4d:ed:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:36 2026 by rpki-client