Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          mLG/RC6CMNWTYiflsl4GM+vX3yWqao06VnJvLpAwnXY=
Subject key identifier:   80:A9:68:D3:B0:F8:63:9C:FC:58:3C:62:6B:4E:AD:5F:AB:2B:10:FE
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       01A08AFA04CEC161A638EE713AC2286C317C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          1240
Signing time:             Thu 10 Sep 2026 11:00:35 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:35 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:35 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: pEUyDNXsspm9ew6ChJJ1mXfOvU18GuceH0Ic2+NfA0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:04:ce:c1:61:a6:38:ee:71:3a:c2:28:6c:31:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Sep 10 11:00:35 2026 GMT
            Not After : Sep 11 11:00:35 2026 GMT
        Subject: CN=80a968d3b0f8639cfc583c626b4ead5fab2b10fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:f8:2b:dc:b3:bf:e7:f9:38:76:bf:30:07:
                    7a:82:de:32:74:a6:f2:b4:84:3d:89:35:f4:36:e3:
                    7f:c2:53:48:98:66:27:ff:95:fc:34:e2:9a:70:e2:
                    02:51:12:63:70:ca:6f:8a:71:f9:df:1b:f2:a6:13:
                    54:67:bf:0c:9e:e0:bc:8b:40:4b:4f:1d:9f:11:f5:
                    b5:7c:d7:5a:ae:1e:b1:d9:1b:67:97:77:98:42:99:
                    de:c2:33:43:81:e8:26:2d:66:76:b6:73:ca:3c:9e:
                    bd:62:5f:44:9d:a8:dc:bd:78:fc:d8:50:85:0e:cc:
                    d9:32:b6:bb:26:73:ba:d5:6f:e9:4f:ac:ce:d3:f4:
                    96:3f:db:5e:b4:a1:87:32:58:70:fe:77:4f:d9:ae:
                    cb:9a:cd:f5:87:f3:3b:08:9a:b3:77:64:16:2f:60:
                    50:bd:47:97:6c:48:1b:6a:ea:79:0d:73:29:ce:23:
                    0e:62:3a:9d:14:04:ff:58:fe:8d:22:bc:9f:ef:63:
                    2b:57:47:d8:b2:eb:83:44:e1:91:a3:60:f6:a7:e0:
                    cb:26:75:b1:a5:b3:03:a0:d9:15:eb:4f:a9:75:a0:
                    0c:ae:b1:0d:d1:bb:82:da:8c:e6:c5:2d:e2:9b:27:
                    3e:c0:12:8f:c1:3e:d3:d8:fd:cc:e2:f1:52:93:a2:
                    45:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:68:D3:B0:F8:63:9C:FC:58:3C:62:6B:4E:AD:5F:AB:2B:10:FE
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:03:13:2e:da:8e:ba:48:7c:29:3b:21:68:1c:48:06:29:
         3a:7d:58:c4:39:d5:3d:ec:b7:cb:ad:f4:9f:df:db:6b:c9:4e:
         69:89:34:aa:75:52:fe:87:5e:25:74:9a:ee:5d:57:c9:6d:0f:
         f8:66:71:3c:2b:0a:c6:2c:f6:ef:d9:80:7a:7f:ae:34:23:3d:
         c7:64:0a:08:91:da:1d:97:41:69:05:e7:0b:d5:58:40:c6:16:
         4f:20:8a:b8:ce:24:99:db:5e:0d:d4:83:6a:e0:ae:0b:16:db:
         86:20:d8:53:c7:3f:5f:c9:a8:e7:92:37:ce:35:4b:c3:ec:88:
         3e:70:b8:16:b0:09:a4:65:e2:b2:67:85:03:5a:ec:d1:a0:ee:
         f3:a6:9b:4c:56:24:ba:82:ab:98:d5:bf:bc:f5:88:de:66:fc:
         c4:b1:77:4c:3b:1c:44:c7:eb:30:dd:91:54:34:07:34:6a:79:
         9c:c9:d4:14:4b:23:c5:18:d7:94:7c:25:cb:75:74:0b:10:a1:
         a6:a8:26:b6:3f:15:0a:c6:46:d6:7a:e0:4d:ef:0f:55:b4:45:
         c8:43:90:c3:84:db:50:89:4f:70:f6:df:4f:f6:1f:51:3d:f0:
         25:6c:a8:e4:9d:36:73:10:aa:10:2b:ce:03:bb:73:c0:13:50:
         ff:0d:6f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+gTOwWGmOO5xOsIobDF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj
NGFkODQwHhcNMjYwOTEwMTEwMDM1WhcNMjYwOTExMTEwMDM1WjAzMTEwLwYDVQQD
Eyg4MGE5NjhkM2IwZjg2MzljZmM1ODNjNjI2YjRlYWQ1ZmFiMmIxMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQv4K9yzv+f5OHa/MAd6gt4ydKby
tIQ9iTX0NuN/wlNImGYn/5X8NOKacOICURJjcMpvinH53xvyphNUZ78MnuC8i0BL
Tx2fEfW1fNdarh6x2Rtnl3eYQpnewjNDgegmLWZ2tnPKPJ69Yl9EnajcvXj82FCF
DszZMra7JnO61W/pT6zO0/SWP9tetKGHMlhw/ndP2a7Lms31h/M7CJqzd2QWL2BQ
vUeXbEgbaup5DXMpziMOYjqdFAT/WP6NIryf72MrV0fYsuuDROGRo2D2p+DLJnWx
pbMDoNkV60+pdaAMrrEN0buC2ozmxS3imyc+wBKPwT7T2P3M4vFSk6JF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICpaNOw+GOc/Fg8YmtOrV+rKxD+MB8GA1UdIwQY
MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt
ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1
LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfoDEy7a
jrpIfCk7IWgcSAYpOn1YxDnVPey3y630n9/ba8lOaYk0qnVS/odeJXSa7l1XyW0P
+GZxPCsKxiz279mAen+uNCM9x2QKCJHaHZdBaQXnC9VYQMYWTyCKuM4kmdteDdSD
auCuCxbbhiDYU8c/X8mo55I3zjVLw+yIPnC4FrAJpGXismeFA1rs0aDu86abTFYk
uoKrmNW/vPWI3mb8xLF3TDscRMfrMN2RVDQHNGp5nMnUFEsjxRjXlHwly3V0CxCh
pqgmtj8VCsZG1nrgTe8PVbRFyEOQw4TbUIlPcPbfT/YfUT3wJWyo5J02cxCqECvO
A7tzwBNQ/w1vnA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:35:57 2026 by rpki-client