Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          A+3ANHhnVJnbW9EXclVZalZfSx8lgXZiD7a4RDzgU4Y=
Subject key identifier:   CA:D9:B4:AC:48:16:53:86:89:D4:73:A5:4F:FC:FA:B6:3F:57:EA:70
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       01A186086303A491EE286F6CF9B45C0B32AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          12C2
Signing time:             Thu 29 Oct 2026 05:00:58 +0000
Manifest this update:     Thu 29 Oct 2026 05:00:58 +0000
Manifest next update:     Fri 30 Oct 2026 05:00:58 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: N2gpKcMgES0p/bjO4Pcn0fiJ7JnqLNw12YIInbb8bCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:08:63:03:a4:91:ee:28:6f:6c:f9:b4:5c:0b:32:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Oct 29 05:00:58 2026 GMT
            Not After : Oct 30 05:00:58 2026 GMT
        Subject: CN=cad9b4ac4816538689d473a54ffcfab63f57ea70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:8a:e1:ce:bb:29:3f:03:03:8d:18:e9:d4:
                    41:89:f3:63:9f:6f:7e:76:02:b9:52:5c:ce:a9:7a:
                    b0:d1:e5:f2:59:70:cb:62:4c:23:ef:65:66:8d:91:
                    41:b6:bf:7d:ac:c2:65:97:25:1e:69:da:6d:2a:5c:
                    5d:0a:a8:38:9f:8d:5e:2d:c2:b7:1f:29:0c:b2:4c:
                    8f:9e:1f:59:3d:9c:82:17:21:ed:39:0f:e8:5d:4b:
                    73:f7:7e:eb:84:a2:ae:25:30:3f:8e:69:f2:3c:83:
                    25:9a:fc:cf:b3:a7:ca:08:ad:e5:74:fc:fa:68:ee:
                    61:0e:91:68:23:a6:d1:c1:ba:03:da:b7:e0:a0:43:
                    52:87:9d:2a:4d:13:2d:8e:c0:f0:6c:9b:48:d2:ea:
                    bf:bd:63:bf:34:81:23:d0:85:c5:bd:17:4a:ce:c4:
                    3a:2b:ce:fb:6f:52:0e:28:67:ef:3d:90:f5:9a:5a:
                    1c:a5:0b:4d:1f:b6:50:9a:53:45:ea:1d:ee:d7:e1:
                    ff:58:ca:18:71:b4:dc:06:23:13:fa:21:a6:bb:b4:
                    18:10:43:c1:d5:a7:14:bc:1d:66:91:10:bf:87:3f:
                    e9:fe:b6:87:0a:67:a3:ee:b2:4b:7c:dd:aa:c1:a1:
                    d0:2c:18:b3:34:d2:a8:22:a4:d3:de:f9:af:8e:fb:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D9:B4:AC:48:16:53:86:89:D4:73:A5:4F:FC:FA:B6:3F:57:EA:70
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:df:6c:a7:b0:ee:cb:1c:4f:83:f9:1f:fa:a5:c2:75:fe:7e:
         2c:56:3c:4e:58:72:e4:90:36:c5:22:87:f3:e0:3e:4b:91:1e:
         87:3d:8f:08:ab:ac:57:e2:d7:23:e5:52:23:3a:d9:64:ea:98:
         8d:8d:cf:1b:a2:65:da:75:c1:4b:63:67:0f:22:69:89:1c:2d:
         03:44:b6:e9:27:51:b0:41:9e:15:61:ff:fa:a2:26:73:af:aa:
         dd:4b:65:04:b2:2b:b4:bb:4a:d5:27:0f:b1:2b:46:2b:34:f9:
         ae:93:33:a9:16:8f:d8:d6:1a:08:07:60:6b:35:f7:94:b0:fd:
         3b:c2:d2:5f:90:05:ef:d9:f8:21:b5:c1:48:2d:e8:4d:2b:4e:
         ad:38:2b:9c:62:d4:64:1c:d9:cf:45:40:e6:6e:43:e3:3e:eb:
         eb:fe:d4:68:c3:19:5b:63:9f:f7:b2:eb:43:e1:42:05:b1:3f:
         81:3d:3d:69:f6:f2:ee:b4:c2:35:28:d4:ca:48:d1:f8:03:09:
         23:17:d7:5a:70:6b:6b:f8:ae:a7:74:c3:81:85:19:81:26:07:
         0c:bb:20:0e:af:6f:f1:76:27:89:e4:7e:f2:ab:e3:c5:ff:b1:
         36:f2:03:5e:37:0e:f3:50:e2:4d:dd:e1:ae:80:74:b5:24:5d:
         a6:b9:6b:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGCGMDpJHuKG9s+bRcCzKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj
NGFkODQwHhcNMjYxMDI5MDUwMDU4WhcNMjYxMDMwMDUwMDU4WjAzMTEwLwYDVQQD
EyhjYWQ5YjRhYzQ4MTY1Mzg2ODlkNDczYTU0ZmZjZmFiNjNmNTdlYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6eK4c67KT8DA40Y6dRBifNjn29+
dgK5UlzOqXqw0eXyWXDLYkwj72VmjZFBtr99rMJllyUeadptKlxdCqg4n41eLcK3
HykMskyPnh9ZPZyCFyHtOQ/oXUtz937rhKKuJTA/jmnyPIMlmvzPs6fKCK3ldPz6
aO5hDpFoI6bRwboD2rfgoENSh50qTRMtjsDwbJtI0uq/vWO/NIEj0IXFvRdKzsQ6
K877b1IOKGfvPZD1mlocpQtNH7ZQmlNF6h3u1+H/WMoYcbTcBiMT+iGmu7QYEEPB
1acUvB1mkRC/hz/p/raHCmej7rJLfN2qwaHQLBizNNKoIqTT3vmvjvvT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrZtKxIFlOGidRzpU/8+rY/V+pwMB8GA1UdIwQY
MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt
ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1
LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAct9sp7Du
yxxPg/kf+qXCdf5+LFY8Tlhy5JA2xSKH8+A+S5Eehz2PCKusV+LXI+VSIzrZZOqY
jY3PG6Jl2nXBS2NnDyJpiRwtA0S26SdRsEGeFWH/+qImc6+q3UtlBLIrtLtK1ScP
sStGKzT5rpMzqRaP2NYaCAdgazX3lLD9O8LSX5AF79n4IbXBSC3oTStOrTgrnGLU
ZBzZz0VA5m5D4z7r6/7UaMMZW2Of97LrQ+FCBbE/gT09afby7rTCNSjUykjR+AMJ
IxfXWnBra/iup3TDgYUZgSYHDLsgDq9v8XYnieR+8qvjxf+xNvIDXjcO81DiTd3h
roB0tSRdprlrhQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:57:39 2026 by rpki-client