Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File:                     CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier:          aELXsiiUblnzlqHHDaYQ/g51lIy3n0sjwkzdeQYg4xQ=
Subject key identifier:   6B:7E:DC:5C:CA:38:F8:88:DA:9F:DB:71:D6:D0:02:24:14:54:F0:BA
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       01A0F1FA7B4267B93C1EAB994B0A94AADCB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number:          1A82
Signing time:             Wed 30 Sep 2026 11:01:59 +0000
Manifest this update:     Wed 30 Sep 2026 11:01:59 +0000
Manifest next update:     Thu 01 Oct 2026 11:01:59 +0000
Files and hashes:         1: 3pHQTzxvnePiZsDxPy-BBwbaxHE.roa (hash: Y44S6ZmGxtTJuSR6q9viqsdpr1+gHx7RTzN1MdK3yOs=)
                          2: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: UMpJcxUC4s9lkJkd7SvEDF1RoddTF60Q/gttOjUaXbs=)
                          3: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (hash: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:fa:7b:42:67:b9:3c:1e:ab:99:4b:0a:94:aa:dc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Sep 30 11:01:59 2026 GMT
            Not After : Oct  1 11:01:59 2026 GMT
        Subject: CN=6b7edc5cca38f888da9fdb71d6d002241454f0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:a6:9e:3d:67:1e:ae:b0:83:9e:83:bf:38:
                    18:a3:fd:c9:58:39:16:d8:17:14:1d:fb:3b:0b:d3:
                    6e:30:1f:41:f0:a5:c4:0d:d4:31:7f:15:32:3b:21:
                    14:6f:05:38:e7:fb:dd:7c:1e:ba:db:fc:08:ee:8e:
                    7b:52:4f:2c:55:7e:9f:0c:9d:23:7b:da:ed:87:a2:
                    17:43:9b:72:92:83:61:96:0e:df:32:c3:93:a8:e2:
                    97:99:05:2c:12:28:23:b5:8d:93:f7:c9:69:02:5b:
                    c8:4d:8b:ba:b9:b8:37:8d:b5:06:c2:1f:b9:62:63:
                    96:b1:d9:46:8f:60:31:13:4d:dc:64:70:c1:e2:fa:
                    36:ab:c6:8e:ed:d5:49:2a:8f:2f:6e:71:b7:bf:9c:
                    6b:ec:e6:70:f8:09:9e:45:88:f9:b7:7d:fb:a1:7c:
                    04:f3:06:fc:06:88:1d:4d:e9:20:c3:33:4d:f5:00:
                    3d:06:8e:41:fb:d2:fc:ed:b1:e2:48:79:50:1a:40:
                    81:dc:3e:bb:6c:62:c8:42:d4:b5:ee:72:ef:28:77:
                    e1:96:06:6f:61:59:40:7d:b9:1f:4e:49:1a:d0:8a:
                    a9:42:6a:5b:9c:d8:3b:11:d5:dd:b3:84:4d:9c:33:
                    b7:f0:2c:32:d7:ca:75:96:ea:2b:15:02:79:d6:8c:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7E:DC:5C:CA:38:F8:88:DA:9F:DB:71:D6:D0:02:24:14:54:F0:BA
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:51:a9:d9:fa:5b:22:06:ed:8d:67:69:0f:da:bf:4c:38:e2:
         53:4d:b5:31:05:b6:3e:13:0b:36:45:b4:53:5e:0b:70:4a:49:
         50:94:dc:c8:c9:b2:6a:66:05:72:2f:99:6b:76:77:57:48:0e:
         d4:d9:c6:6d:2f:63:53:ea:0f:c6:e2:56:d9:87:a6:22:56:ec:
         02:14:62:42:35:15:87:64:2c:c6:aa:c0:4e:b6:a9:05:2f:4e:
         01:2d:de:63:a4:e7:23:47:49:67:60:72:00:9b:c8:ce:4a:66:
         bb:b0:a6:cb:6d:69:a2:46:0b:44:05:f1:34:b1:ee:99:03:92:
         a0:76:17:de:22:81:55:1a:28:3d:df:95:0d:5e:57:94:f8:b1:
         38:f7:a8:8b:99:79:4f:96:99:37:00:b2:78:c0:61:8a:dc:25:
         d6:ec:1a:46:d2:cf:24:4a:ab:97:c4:65:7e:d4:5e:29:65:1e:
         a1:0e:91:37:10:24:75:99:6f:55:70:d5:2f:03:71:21:39:4a:
         5f:f1:6b:ef:89:bc:d1:de:6f:3d:0b:fc:e9:8e:d9:f8:3d:d3:
         28:22:9f:12:0a:d7:7a:93:0a:cf:ae:2f:30:17:88:c6:1a:a4:
         fc:2a:8b:b9:23:6b:de:61:f3:8b:3e:63:39:a4:06:e8:3e:49:
         f0:a6:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:10:45 2026 by rpki-client