Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
File:                     waTZZ9XMsUJbke9O14moOvzkYS4.mft (raw, json)
Hash identifier:          e8yNddHy/2XP+xsiCK6cSNF+HL66WeE4iZb6zHnbXKE=
Subject key identifier:   59:5A:16:0B:37:C8:DD:A9:43:93:90:3A:E9:EB:8D:91:00:EE:C4:2A
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Certificate issuer:       /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial:       01A1227881CE7D1D637335CBA9DA1EA88A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
Manifest number:          0112
Signing time:             Fri 09 Oct 2026 21:01:25 +0000
Manifest this update:     Fri 09 Oct 2026 21:01:25 +0000
Manifest next update:     Sat 10 Oct 2026 21:01:25 +0000
Files and hashes:         1: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (hash: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=)
                          2: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (hash: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=)
                          3: waTZZ9XMsUJbke9O14moOvzkYS4.crl (hash: K4v7KMa9RbUuP2NXIIeHukeplzyMm4i3SreqwVhXyZg=)
                          4: zK_O173R9rM6kmYP6t5ZMpzvyj8.roa (hash: 8jI4m5E4Fs/hNYjrx6Dlw+4Ou6r9lvQaFPoouEIUKzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:78:81:ce:7d:1d:63:73:35:cb:a9:da:1e:a8:8a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
        Validity
            Not Before: Oct  9 21:01:25 2026 GMT
            Not After : Oct 10 21:01:25 2026 GMT
        Subject: CN=595a160b37c8dda94393903ae9eb8d9100eec42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:80:58:9c:c8:c2:ab:e5:19:07:2f:88:db:
                    7b:20:58:d7:ef:30:7b:81:4f:10:7f:38:1d:a9:57:
                    bf:d8:c2:fb:d5:1b:39:4e:aa:04:03:a9:de:67:4e:
                    58:d5:7f:55:64:a5:1d:6a:c9:d1:66:dc:c4:97:d5:
                    bd:5a:9f:e2:b8:c5:ff:08:17:64:94:e6:dc:51:d4:
                    2b:e1:7a:8e:0a:d8:96:93:6d:bd:15:73:29:bf:d5:
                    15:af:e3:de:b6:64:2d:f5:40:81:45:30:2a:6c:fe:
                    8b:09:e5:9a:02:e5:26:f3:6b:f0:da:17:cd:0d:7f:
                    18:a0:f5:b3:22:5d:5e:27:da:51:71:44:f0:0e:4d:
                    a4:8a:f9:9e:ce:6e:48:da:a4:0e:65:7a:59:24:a4:
                    48:be:0f:18:67:f2:4b:62:46:bc:5f:56:8c:fc:d3:
                    92:b9:e3:ec:64:ef:63:2d:cc:8d:55:ff:e8:c4:24:
                    2d:4b:a0:a3:bf:21:24:92:37:b3:db:42:35:57:91:
                    64:94:b2:73:17:b1:3c:15:df:59:b4:af:64:a2:3e:
                    41:23:56:e6:45:9d:a4:2d:00:c8:0c:5a:e5:9f:d5:
                    ba:21:9d:58:30:c2:5f:3c:37:af:f4:6a:fc:14:1d:
                    ef:3b:66:90:62:7a:4a:a2:4a:af:a8:30:2e:0a:61:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5A:16:0B:37:C8:DD:A9:43:93:90:3A:E9:EB:8D:91:00:EE:C4:2A
            X509v3 Authority Key Identifier:
                keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:f6:01:f5:7f:18:f5:a1:55:9f:96:21:cc:2a:68:59:02:
         b8:8c:35:45:3e:01:b2:6f:21:f6:b5:d5:86:26:f3:99:9c:e3:
         c1:8b:7f:d2:22:fc:7e:51:5a:2d:1f:91:ab:62:1a:62:02:db:
         c9:8d:3e:15:22:5e:92:c4:6c:c7:a1:ba:ba:a2:e3:a4:85:54:
         86:fc:b3:52:e2:93:f6:1b:20:a2:97:ab:61:f0:b9:98:a4:c3:
         36:06:38:52:52:11:05:5c:65:25:75:8a:b5:0c:43:5c:c5:82:
         68:0a:5c:09:1f:d4:77:74:06:5c:4c:24:07:3b:db:76:33:cf:
         6e:67:85:6c:5e:96:d6:22:28:2c:8f:03:f5:3d:dd:11:28:8f:
         4e:61:00:3d:fd:61:be:1e:39:41:8e:cd:5c:08:15:d4:c7:ae:
         4b:bc:5d:97:f6:75:02:6c:8a:41:d5:f9:34:57:dd:e7:d9:a5:
         5e:7c:5f:a1:56:b0:d8:f3:59:46:67:c2:0a:a1:62:fa:b3:42:
         dc:3f:40:15:bc:49:74:a2:d9:c0:7a:fd:5c:6d:83:42:e5:aa:
         fb:c8:68:db:3e:56:f4:c2:05:47:88:fd:6c:08:8e:b4:ed:d6:
         f5:8a:ab:93:47:1e:a7:a2:ac:ae:1d:c3:8a:f8:a9:75:13:36:
         d1:72:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:42 2026 by rpki-client