Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          Zr65it4SL2+QM70wHZUEY6RCd78obMwNuggJl85IIiU=
Subject key identifier:   69:37:02:35:E9:FB:06:76:7E:0B:6F:41:B6:9B:6D:82:72:E2:3B:79
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       01A0F8D82C709B12B943C769EB3D67D5158B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          1A82
Signing time:             Thu 01 Oct 2026 19:01:51 +0000
Manifest this update:     Thu 01 Oct 2026 19:01:51 +0000
Manifest next update:     Fri 02 Oct 2026 19:01:51 +0000
Files and hashes:         1: 80PdpdaZu0agDCN9RQnDf0bgfeU.roa (hash: DH5ZQA3PWXrg29JH5F4jHegGPMYQINXJvtbDzJXlSLo=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: LVSK2A7GfEoMQWrNBa1EI9/FYZOON7rD+xq6wDOzpw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:d8:2c:70:9b:12:b9:43:c7:69:eb:3d:67:d5:15:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Oct  1 19:01:51 2026 GMT
            Not After : Oct  2 19:01:51 2026 GMT
        Subject: CN=69370235e9fb06767e0b6f41b69b6d8272e23b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:2b:b1:68:07:ca:74:71:30:d8:56:0e:7d:
                    88:81:59:d0:94:2a:f0:bc:34:fc:c7:4f:9c:f3:fc:
                    f5:38:4d:f9:7c:25:29:20:6e:9b:81:51:ca:c1:ea:
                    ef:e5:8e:05:ee:9e:37:7b:a7:b9:2f:54:43:97:4a:
                    b2:b3:de:cf:56:fd:a5:33:de:e8:9f:3c:c6:74:52:
                    c2:96:88:44:19:52:2d:b4:06:76:13:6a:1d:47:b5:
                    d9:ad:ee:e9:cb:9c:f9:76:aa:25:43:b4:9f:6e:fe:
                    91:1a:bd:6f:00:c0:23:14:d7:2a:53:17:dd:96:43:
                    91:38:08:37:39:77:da:32:b5:cc:af:78:91:83:94:
                    a2:3f:4d:34:b4:78:2b:98:ee:43:8b:fc:0b:b3:f2:
                    3e:fb:6c:fb:ad:1d:bc:fc:02:0f:58:1c:33:cd:41:
                    82:6c:d2:e9:17:87:18:3f:d6:22:83:7f:85:e2:7d:
                    c9:6a:b3:f0:e4:be:5e:79:09:5b:9c:1a:1b:ca:b2:
                    f2:d1:37:0a:04:86:a3:66:42:e4:3c:4c:92:8d:d0:
                    86:f9:d0:7f:c3:77:f5:cb:0c:04:eb:38:aa:21:f4:
                    fb:18:69:a9:2a:34:d0:33:bc:92:83:86:3c:a8:f1:
                    fb:08:11:07:51:db:18:51:92:10:f3:05:2f:08:9f:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:02:35:E9:FB:06:76:7E:0B:6F:41:B6:9B:6D:82:72:E2:3B:79
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:a1:f6:ae:c7:2c:ec:ac:07:77:92:67:17:90:b7:3d:ed:
         77:9d:e3:a8:ba:a3:b1:aa:fc:41:2b:6d:5b:4d:a1:56:dc:35:
         e8:9e:ce:22:e4:57:d1:8e:66:21:3a:0b:41:7c:30:8b:d7:2c:
         f8:34:50:90:99:e1:19:2f:ca:2d:60:c0:44:6b:2c:5b:cf:14:
         77:7c:ea:df:ce:8c:12:fa:18:9b:8e:23:16:fd:b0:0b:d7:a3:
         9a:1a:1c:46:85:25:f3:05:d3:c9:88:b6:e5:eb:b9:d5:65:55:
         aa:59:1b:57:ca:aa:6d:57:c5:fd:a2:48:85:9c:5b:d1:8e:2b:
         56:36:1f:f8:e2:dc:2a:ee:55:84:e8:78:ac:86:bf:d4:70:0e:
         76:1c:31:00:7e:80:e5:45:6a:fc:aa:12:f7:e7:72:04:4a:91:
         c0:36:5c:43:28:d4:b4:de:9f:b4:3e:72:53:11:8e:82:4c:19:
         b1:bf:0d:06:29:49:ce:36:ce:6f:39:91:00:12:21:db:c1:d1:
         e1:4a:03:75:a8:f9:50:b7:41:3e:ee:9c:6f:60:e5:f6:08:c6:
         61:7d:7e:0e:49:29:d6:dd:f3:55:8d:44:e5:94:d0:2a:43:86:
         f6:a9:6c:a3:12:3b:da:83:4f:41:79:a1:cd:90:f8:2b:11:da:
         d2:7e:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:48:07 2026 by rpki-client