Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          jVu/gfAAfygGVuthB2NS9FelUpZ1JPjTNL9nzliPKkU=
Subject key identifier:   9F:C3:F2:01:7E:F1:8A:36:A6:5F:65:BA:77:84:4A:97:78:A1:79:F1
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       01A184513CDAAFE79B199F9F05CCAE244E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          1ACB
Signing time:             Wed 28 Oct 2026 21:01:18 +0000
Manifest this update:     Wed 28 Oct 2026 21:01:18 +0000
Manifest next update:     Thu 29 Oct 2026 21:01:18 +0000
Files and hashes:         1: F8BqFfZoIsv5x2t_rO_S_NuJemg.roa (hash: PB4J+IoKo4T7Q6QAGzoR44UFBrvbvOiTrydpAGnj8mc=)
                          2: GLHvXz2R1lOAHX7TzyDNoCB2iBY.roa (hash: OBjA+NNWsAq34/o+6Q0m7vwkANLJOuwcO5B1z9txcvU=)
                          3: Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa (hash: QSZtykOf++sIkuecLt/sSggguVhjdeR5YjW9l7cEQV8=)
                          4: OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa (hash: HQ35g8yBDULlIp8ua3XKzN1vR0rEMHW47KubxInNm2g=)
                          5: QYAIVSd2tgwed65DPiU0ds85aB0.roa (hash: g9cZELqfkNNkZkS/ZARd962rG7NHC+bpHrVh18iN6TI=)
                          6: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: 9gZNNX+tvpvhzC7jG3aMa7N9B2YLstEediflBbH4KY0=)
                          7: jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (hash: fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:51:3c:da:af:e7:9b:19:9f:9f:05:cc:ae:24:4e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Oct 28 21:01:18 2026 GMT
            Not After : Oct 29 21:01:18 2026 GMT
        Subject: CN=9fc3f2017ef18a36a65f65ba77844a9778a179f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:da:d4:67:4e:3f:65:31:33:51:aa:9d:0a:8f:
                    34:14:0c:63:38:fc:72:a7:cb:34:ec:b1:c9:b7:4c:
                    20:99:c2:a9:b0:af:80:2f:63:8b:9e:d6:45:64:56:
                    cb:89:40:d3:1c:99:20:ff:88:0e:79:65:f3:82:02:
                    7c:6d:eb:7d:15:7f:08:c1:32:0e:0e:c4:f7:62:08:
                    dc:14:2d:3b:38:2a:31:6e:ef:89:01:2b:56:b8:6f:
                    67:e4:96:e5:04:d5:ad:59:01:9b:f5:1f:a4:c9:4c:
                    4a:7b:2a:ab:5a:5e:70:a0:43:66:92:06:51:bf:c6:
                    65:9e:52:1a:40:78:45:63:7a:41:a2:8c:61:c6:8e:
                    f9:51:72:52:af:62:0b:7e:5d:f7:60:a1:9e:1c:29:
                    8e:95:40:3f:0a:b8:da:93:be:51:f0:4c:b9:f5:99:
                    f9:89:c2:9a:2c:4e:00:6e:c1:c7:b6:3d:94:ec:d8:
                    91:f5:ef:a2:ff:14:ba:cb:57:7d:7b:9e:a5:d3:bb:
                    30:7e:c0:83:59:23:55:60:1a:ab:31:a8:61:e2:ae:
                    6f:89:49:bb:49:c5:8f:69:c5:76:27:74:4a:e0:08:
                    24:88:3e:b8:33:4b:7f:97:22:77:a1:6b:66:d8:84:
                    00:d7:a4:30:02:66:a9:d3:b7:17:f0:93:94:82:a0:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:F2:01:7E:F1:8A:36:A6:5F:65:BA:77:84:4A:97:78:A1:79:F1
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:a2:e5:6b:62:96:82:c7:8c:f5:68:6e:39:21:bd:57:ae:
         6e:a6:84:bf:c8:e9:15:f1:a3:7a:b5:4c:25:3f:7e:d9:8d:57:
         9a:6f:5c:f8:63:03:38:35:bc:df:4d:2b:57:5c:f7:b5:7c:05:
         48:f2:72:4e:df:99:bf:cc:0f:fc:4f:d4:04:33:78:1c:2e:83:
         21:cd:99:24:41:57:d8:83:80:53:76:32:ea:dc:1d:87:e0:07:
         e9:7d:6a:a8:56:96:6a:6d:57:f7:8a:3d:e3:7a:46:87:68:b4:
         40:fd:0d:0e:cb:27:d9:4a:57:a9:18:77:74:34:e7:d8:f9:ee:
         a9:a5:7e:c0:a8:39:42:f0:32:d9:fc:d4:7d:15:29:4b:77:e6:
         73:63:c2:22:49:1d:e7:9d:93:7d:97:e3:37:f3:10:06:fb:f9:
         45:1f:60:62:e3:9d:e7:c7:e0:4a:5b:68:28:63:b5:70:9c:32:
         2e:9e:42:93:17:7b:7d:e3:c5:29:e0:c7:88:e4:5c:b8:a1:5c:
         03:d1:6f:5a:0a:54:67:4e:6a:21:9b:02:41:cf:75:b7:aa:83:
         b3:a6:be:ee:ea:e3:16:2e:62:70:ad:91:20:cd:04:5e:2e:3e:
         73:f5:b8:2f:20:84:d3:97:46:33:1c:94:74:4e:da:ab:3d:fd:
         8f:cd:1d:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEUTzar+ebGZ+fBcyuJE5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjYxMDI4MjEwMTE4WhcNMjYxMDI5MjEwMTE4WjAzMTEwLwYDVQQD
Eyg5ZmMzZjIwMTdlZjE4YTM2YTY1ZjY1YmE3Nzg0NGE5Nzc4YTE3OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7trUZ04/ZTEzUaqdCo80FAxjOPxy
p8s07LHJt0wgmcKpsK+AL2OLntZFZFbLiUDTHJkg/4gOeWXzggJ8bet9FX8IwTIO
DsT3YgjcFC07OCoxbu+JAStWuG9n5JblBNWtWQGb9R+kyUxKeyqrWl5woENmkgZR
v8ZlnlIaQHhFY3pBooxhxo75UXJSr2ILfl33YKGeHCmOlUA/Crjak75R8Ey59Zn5
icKaLE4AbsHHtj2U7NiR9e+i/xS6y1d9e56l07swfsCDWSNVYBqrMahh4q5viUm7
ScWPacV2J3RK4AgkiD64M0t/lyJ3oWtm2IQA16QwAmap07cX8JOUgqCBGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/D8gF+8Yo2pl9luneESpd4oXnxMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILqi5Wti
loLHjPVobjkhvVeubqaEv8jpFfGjerVMJT9+2Y1Xmm9c+GMDODW8300rV1z3tXwF
SPJyTt+Zv8wP/E/UBDN4HC6DIc2ZJEFX2IOAU3Yy6twdh+AH6X1qqFaWam1X94o9
43pGh2i0QP0NDssn2UpXqRh3dDTn2PnuqaV+wKg5QvAy2fzUfRUpS3fmc2PCIkkd
552TfZfjN/MQBvv5RR9gYuOd58fgSltoKGO1cJwyLp5Ckxd7fePFKeDHiORcuKFc
A9FvWgpUZ05qIZsCQc91t6qDs6a+7urjFi5icK2RIM0EXi4+c/W4LyCE05dGMxyU
dE7aqz39j80dqQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:31 2026 by rpki-client