Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          Tlqu5dGGD5Hd+8HbLUzZregnvz1sbgsCl7+2vxOjFp4=
Subject key identifier:   3B:2F:19:CF:B5:F3:A4:3F:9E:ED:B0:61:7D:A0:08:BE:25:54:1A:85
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       01A1099416B80357A8B756FB8A7B253A63EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          0F3B
Signing time:             Mon 05 Oct 2026 01:01:02 +0000
Manifest this update:     Mon 05 Oct 2026 01:01:02 +0000
Manifest next update:     Tue 06 Oct 2026 01:01:02 +0000
Files and hashes:         1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: Z+nWUyc9GrvRuXkBIoNVMO6pPYbk2u4irpNpKiem7PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:94:16:b8:03:57:a8:b7:56:fb:8a:7b:25:3a:63:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Oct  5 01:01:02 2026 GMT
            Not After : Oct  6 01:01:02 2026 GMT
        Subject: CN=3b2f19cfb5f3a43f9eedb0617da008be25541a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:c2:c0:2f:7b:0d:1b:13:6a:ff:10:12:24:
                    46:73:4c:dc:91:33:68:37:19:28:be:ee:e2:93:17:
                    ef:7a:f4:05:e3:59:42:50:d8:d6:14:97:18:a4:bc:
                    6f:49:b2:b3:bf:5a:6a:62:39:7d:c4:fd:c9:c3:93:
                    b8:b6:ae:d0:11:d7:2f:11:d2:46:f0:ed:81:c0:a6:
                    23:3f:4c:40:58:83:b1:11:05:1f:dc:4b:86:4c:3e:
                    59:db:14:5d:55:d6:b9:11:7d:bb:53:dd:c0:df:15:
                    0a:55:21:9d:5d:9a:10:48:d4:3f:aa:96:5f:e1:a5:
                    62:07:76:48:81:99:0e:a1:97:ea:3b:3e:cd:e2:67:
                    2f:6a:43:b7:0f:2a:7d:df:e2:e5:b6:ac:05:0b:94:
                    1c:8b:19:0b:6a:18:b2:86:70:fd:78:84:4a:61:23:
                    27:3f:e2:a4:a8:5f:be:81:b3:ae:06:05:9b:13:fe:
                    fb:8c:fd:ec:cd:43:68:b7:b6:27:ed:72:e6:a3:34:
                    f1:3d:5b:4b:ff:b4:65:98:73:d0:8f:85:33:db:6c:
                    09:11:92:22:14:0e:bd:69:1b:46:2d:89:ec:96:0f:
                    71:7b:4f:59:90:80:57:9d:8e:7b:69:89:96:51:3a:
                    ea:6a:82:1f:c8:68:48:68:2f:1a:ce:89:1e:0f:13:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2F:19:CF:B5:F3:A4:3F:9E:ED:B0:61:7D:A0:08:BE:25:54:1A:85
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:5d:a5:36:f2:6c:71:4c:d2:6c:54:fa:f5:32:57:8c:33:
         f7:26:ab:c5:44:ba:27:23:f1:b0:c2:5c:06:53:2f:8d:70:6a:
         f3:fa:0a:cf:de:34:0f:43:e6:90:7f:18:04:b3:3e:4f:9e:58:
         83:6d:a9:5b:d7:2f:83:1e:34:20:b7:82:eb:b2:67:ce:af:d5:
         f3:55:22:75:92:80:c6:53:33:fa:97:c7:43:ce:3b:1d:a3:7e:
         06:bc:d6:7b:d9:18:80:cb:af:65:66:09:e5:c4:b5:c7:a2:62:
         6c:da:4d:06:bb:52:7d:51:de:64:c6:f7:0d:94:41:3a:2a:4e:
         d0:09:f4:1c:c7:d4:15:1b:03:78:e5:5e:12:e5:ac:27:fd:ef:
         e3:ca:18:26:ee:c5:86:65:4e:e4:d8:a2:d5:11:b2:5e:70:95:
         93:20:ea:a7:c5:05:2d:9a:68:4b:9b:53:e9:0d:34:c9:3b:14:
         0e:48:9c:43:9f:a9:a9:fe:03:89:eb:4a:42:19:12:91:6f:41:
         45:4a:ce:6e:29:13:09:0d:ef:2b:10:11:f1:54:e0:21:b8:95:
         e8:ab:c0:a9:40:73:ec:30:15:2f:3d:e6:05:60:46:a5:c2:9f:
         a7:a0:46:86:6f:2f:96:a5:ed:d1:89:23:33:b4:9d:b7:48:89:
         02:ed:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:48 2026 by rpki-client