Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          rbGYFWKpeRgVZCJk8DIwn/NUgj0tXQo7sk2iY/BKTtU=
Subject key identifier:   5B:8F:67:5B:7C:CB:CE:88:B5:03:0A:14:E7:DD:86:91:FE:77:73:AC
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       01A1114E370FF5E0A7C3B9DA90C9507A421E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          1625
Signing time:             Tue 06 Oct 2026 13:01:40 +0000
Manifest this update:     Tue 06 Oct 2026 13:01:40 +0000
Manifest next update:     Wed 07 Oct 2026 13:01:40 +0000
Files and hashes:         1: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (hash: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM=)
                          2: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (hash: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA=)
                          3: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (hash: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: HasM8rQY3czVlvx4VflTPeRYJLuB95jE8sW+0V0vm6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:4e:37:0f:f5:e0:a7:c3:b9:da:90:c9:50:7a:42:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Oct  6 13:01:40 2026 GMT
            Not After : Oct  7 13:01:40 2026 GMT
        Subject: CN=5b8f675b7ccbce88b5030a14e7dd8691fe7773ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:d9:1d:5f:51:ad:49:3e:3a:71:56:12:5a:
                    20:2b:ad:a7:b6:52:8a:39:e9:25:a2:9e:d1:9a:9a:
                    90:24:c6:c6:69:b1:1a:67:d2:fd:06:6a:74:9c:9b:
                    f8:1a:de:28:49:77:f8:87:69:c7:db:65:84:56:c6:
                    75:8f:28:78:ff:06:f5:64:c8:a9:7c:6e:72:58:da:
                    fe:a2:df:b1:1d:78:99:b8:66:b9:fb:32:be:38:be:
                    27:a3:f2:6b:c9:e0:26:d0:76:f6:4f:12:e4:3e:94:
                    7b:83:52:a9:03:7f:d3:e5:f0:21:70:10:3e:73:f6:
                    0e:4d:39:98:64:bf:69:eb:f1:0b:e7:be:03:e3:a4:
                    21:fd:87:7f:1d:bc:c2:10:bd:39:e2:b5:4e:4e:73:
                    4c:98:42:66:9e:35:fa:bc:76:85:18:ad:c5:d9:88:
                    09:9d:02:95:c5:81:a8:c8:c8:60:6d:8e:02:23:a9:
                    f8:65:16:eb:29:6a:92:72:95:39:45:00:a2:47:b5:
                    28:f2:d9:fd:4c:08:f6:6c:ef:37:c7:26:48:0b:e3:
                    a7:04:98:38:4f:51:8d:de:dc:84:d5:bd:a9:6c:4d:
                    e0:7c:b7:f3:c4:bf:f4:62:66:19:93:30:8b:9c:37:
                    93:91:5f:02:6b:70:07:cd:a2:eb:2a:df:1d:c3:b1:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:67:5B:7C:CB:CE:88:B5:03:0A:14:E7:DD:86:91:FE:77:73:AC
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:af:a3:f5:44:e6:6e:e1:dd:2b:fa:6e:f7:82:b6:d3:e3:
         1e:2f:6f:35:ec:a2:79:e0:be:4c:b3:d6:e2:a6:d6:c1:8a:67:
         a4:7e:7e:2e:cf:22:6f:29:bd:ee:4a:e9:93:4c:2b:b0:93:51:
         3e:77:cd:4c:6f:f7:9b:0d:92:e9:23:63:e4:cb:f6:9e:25:30:
         ac:a5:84:cc:51:9c:65:e4:88:62:61:91:e7:6f:cb:f7:ff:1b:
         c4:87:f2:c0:29:9c:b4:42:81:5a:fc:e9:c1:f9:15:07:61:a2:
         7c:15:e7:87:c1:71:24:bd:72:fc:0c:b3:50:3e:e3:74:c1:81:
         d5:1b:ed:0e:89:00:2e:ac:54:68:07:71:97:6b:2d:58:39:d3:
         12:10:96:44:6c:b7:b2:92:13:8a:0b:e4:76:98:77:d5:02:5f:
         4b:ce:57:69:10:b2:8c:7b:09:fd:56:d5:8b:37:1d:c2:6a:75:
         64:eb:2f:e8:b8:f6:9f:fb:51:27:40:34:0b:84:f6:73:50:ce:
         2c:02:c9:cf:26:c7:91:c2:ba:a0:92:19:e1:24:e4:d7:9a:19:
         6f:27:f5:07:09:15:58:c8:51:c6:c9:53:a9:34:77:15:e5:38:
         aa:47:26:1b:60:76:1f:b4:3f:0b:e9:2a:a1:06:fa:a9:7b:af:
         53:54:01:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERTjcP9eCnw7nakMlQekIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx
ZDllODYwHhcNMjYxMDA2MTMwMTQwWhcNMjYxMDA3MTMwMTQwWjAzMTEwLwYDVQQD
Eyg1YjhmNjc1YjdjY2JjZTg4YjUwMzBhMTRlN2RkODY5MWZlNzc3M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUHZHV9RrUk+OnFWElogK62ntlKK
Oeklop7RmpqQJMbGabEaZ9L9Bmp0nJv4Gt4oSXf4h2nH22WEVsZ1jyh4/wb1ZMip
fG5yWNr+ot+xHXiZuGa5+zK+OL4no/JryeAm0Hb2TxLkPpR7g1KpA3/T5fAhcBA+
c/YOTTmYZL9p6/EL574D46Qh/Yd/HbzCEL054rVOTnNMmEJmnjX6vHaFGK3F2YgJ
nQKVxYGoyMhgbY4CI6n4ZRbrKWqScpU5RQCiR7Uo8tn9TAj2bO83xyZIC+OnBJg4
T1GN3tyE1b2pbE3gfLfzxL/0YmYZkzCLnDeTkV8Ca3AHzaLrKt8dw7FIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuPZ1t8y86ItQMKFOfdhpH+d3OsMB8GA1UdIwQY
MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt
OGU5MjRmZmJlNTg0LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0
LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZY+vo/VE
5m7h3Sv6bveCttPjHi9vNeyieeC+TLPW4qbWwYpnpH5+Ls8ibym97krpk0wrsJNR
PnfNTG/3mw2S6SNj5Mv2niUwrKWEzFGcZeSIYmGR52/L9/8bxIfywCmctEKBWvzp
wfkVB2GifBXnh8FxJL1y/AyzUD7jdMGB1RvtDokALqxUaAdxl2stWDnTEhCWRGy3
spITigvkdph31QJfS85XaRCyjHsJ/VbVizcdwmp1ZOsv6Lj2n/tRJ0A0C4T2c1DO
LALJzybHkcK6oJIZ4STk15oZbyf1BwkVWMhRxslTqTR3FeU4qkcmG2B2H7Q/C+kq
oQb6qXuvU1QB4w==
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:18:35 2026 by rpki-client