Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
File:                     wntzN4NAR9_qqYcCUyvow3XdB3o.mft (raw, json)
Hash identifier:          4wp/OivFvihLnNV08e9YVD0bhTdOk4WH9dYMobB7nZw=
Subject key identifier:   68:32:61:6B:6F:41:B7:EA:B7:3F:22:33:B7:DF:80:4C:30:E3:8E:4A
Authority key identifier: C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A
Certificate issuer:       /CN=c27b7337834047dfeaa98702532be8c375dd077a
Certificate serial:       01A08C7B079E58A859A793815C34884D7362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 18:01:08 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:08 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:08 +0000
Files and hashes:         1: aqK2yV13pktyyVa6pRyNZueOCTI.roa (hash: WeiFnY8BGtV7+1lMlp9uKyJPDrkxhq8o+eMa1t7FgGw=)
                          2: wntzN4NAR9_qqYcCUyvow3XdB3o.crl (hash: HIyc9c0W/P+k5Yn8O4BbVfmAoGyISVvZLWwpBbfXy9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:07:9e:58:a8:59:a7:93:81:5c:34:88:4d:73:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27b7337834047dfeaa98702532be8c375dd077a
        Validity
            Not Before: Sep 10 18:01:08 2026 GMT
            Not After : Sep 11 18:01:08 2026 GMT
        Subject: CN=6832616b6f41b7eab73f2233b7df804c30e38e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:43:35:b5:8e:ff:50:d1:27:d5:f6:1f:00:
                    cd:38:bd:b5:cf:cd:fa:84:43:ec:10:89:85:05:0b:
                    ca:f5:e9:fe:ed:4e:fb:ab:52:4e:b3:9d:9c:1f:1c:
                    98:a7:41:4c:e3:1c:3a:48:a0:2c:75:38:dc:50:c1:
                    1d:84:46:82:50:1c:d1:8f:81:2a:09:0b:f9:d2:17:
                    ba:ed:0f:b1:3c:ba:fb:bc:e4:25:a7:10:66:dc:43:
                    46:9f:5e:85:28:cb:30:3b:c2:e3:28:7c:b3:1f:f6:
                    65:86:f1:27:df:64:c4:3b:17:92:f5:b7:5d:ed:bd:
                    d5:09:fd:db:c5:68:18:d8:b6:f0:b1:5a:3f:c0:59:
                    6a:ff:97:95:1c:6a:77:62:7f:af:b0:42:61:c7:d1:
                    0c:05:e0:51:d5:ac:cb:c5:31:29:5e:6d:05:05:3b:
                    6a:6b:f6:8d:6a:1a:fb:cb:93:68:0b:33:9a:77:f2:
                    00:3b:c8:08:2c:8a:ce:30:0f:17:9a:e1:7c:be:7d:
                    66:2a:7a:40:56:21:23:af:99:d3:fb:c7:cb:37:b1:
                    6a:d2:15:d3:4b:8a:e7:1e:51:cc:10:b7:36:5e:61:
                    68:2f:15:22:42:c5:40:5f:01:3a:65:81:95:12:cd:
                    da:89:9f:8f:98:e7:3f:97:00:8c:e6:b8:b6:f0:e0:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:61:6B:6F:41:B7:EA:B7:3F:22:33:B7:DF:80:4C:30:E3:8E:4A
            X509v3 Authority Key Identifier:
                keyid:C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:f0:b9:de:80:90:85:9d:1b:90:dc:10:83:7c:f9:6f:e3:
         d5:33:30:c8:9b:fd:ad:e8:27:43:6d:4d:5d:3a:a9:96:2f:25:
         78:69:c0:cf:97:68:60:ea:d2:ba:1b:59:c9:7b:65:bb:70:18:
         ed:7c:c6:0b:b9:eb:93:39:00:ee:47:f6:e1:fe:de:9e:66:06:
         73:e1:76:6c:50:79:4b:a2:c0:83:64:6f:e5:31:60:b1:5c:3e:
         ee:66:8f:8d:7f:80:c6:6a:18:a6:7e:c6:38:57:d4:0a:96:36:
         5c:ad:ed:73:c2:97:79:97:c3:6f:46:ca:b2:11:a5:cc:11:0b:
         16:9b:3d:18:41:2c:fd:ea:a2:3c:6e:3f:0c:ee:68:80:a2:ce:
         10:e3:73:10:32:29:4c:62:99:0f:a4:4c:f9:5d:3a:fc:3c:a1:
         8c:9b:13:15:7a:c0:6f:6f:47:37:a8:81:28:f0:db:a6:5f:6e:
         19:59:45:c7:12:3d:c4:5b:db:86:b1:f0:d2:b6:82:81:53:2c:
         b3:ef:d2:c3:64:13:59:07:37:53:41:0b:1d:f3:de:bc:90:1d:
         2f:5d:ee:f9:72:e8:c4:06:6b:33:1b:70:ca:aa:5b:09:74:84:
         dd:9b:02:63:44:09:3c:02:b2:2f:2c:85:ef:51:1f:c9:61:67:
         71:b9:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:30 2026 by rpki-client