Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File:                     wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier:          5XWGU9sNUJNIyzpRiMk/L5zAUPDNP+9B+NkKevDu6/E=
Subject key identifier:   A4:84:9C:00:F3:1A:46:87:18:27:9B:07:C5:BE:18:89:54:52:EB:64
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer:       /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial:       01A08B9F579C9806B3FDC71CB6411F280D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number:          088A
Signing time:             Thu 10 Sep 2026 14:01:10 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:10 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:10 +0000
Files and hashes:         1: cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa (hash: AIiSdddDnEI2m5R7XY5zbokXJZOOTj517t6eCwoUwtY=)
                          2: cWok4mUxGOzfb6X_Ih_xWHzxHzE.asa (hash: FK9I5rimcLzHZdpfkaUGYs6IrGmTI38YsRySON+jkaM=)
                          3: ma1O2DltnndXpH9aWxYN2FdTRIE.roa (hash: y57vLDkssL86NAU7EWD13+ZBmcV21SBi3gDMpAVaAnQ=)
                          4: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: lovJEJo24D5uKfBLabakRgx+24i2gIRwPPLspzSD3+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:57:9c:98:06:b3:fd:c7:1c:b6:41:1f:28:0d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
        Validity
            Not Before: Sep 10 14:01:10 2026 GMT
            Not After : Sep 11 14:01:10 2026 GMT
        Subject: CN=a4849c00f31a468718279b07c5be18895452eb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:be:26:dc:4c:ca:1b:ef:f5:c9:d7:fe:a8:
                    82:0e:82:22:fb:74:a7:03:1a:6f:cb:0c:e2:1d:b8:
                    1e:76:99:fe:b9:26:53:64:4c:62:59:6a:dc:39:1a:
                    a9:a1:b5:89:ce:a9:1e:43:ee:a2:0b:c3:8a:c9:9d:
                    78:f4:98:96:d5:af:e2:a4:e2:e2:d2:e0:d5:c7:ad:
                    87:d8:91:c7:a3:0c:70:d5:ac:3e:73:e4:23:c1:5c:
                    3b:13:23:19:6b:c8:64:ff:05:68:86:70:7e:06:df:
                    c9:fa:51:6c:03:53:76:a1:9a:e8:75:72:c1:93:20:
                    38:90:37:1d:32:4d:26:88:dc:79:65:d4:a0:21:4a:
                    d1:35:ca:35:1f:8f:a4:91:a6:de:ce:73:d7:12:14:
                    a8:5f:ff:0c:0c:75:9f:77:9b:30:3b:bb:59:6d:4d:
                    ca:e1:cb:bd:e8:fe:8e:98:d1:88:04:c4:2a:9c:ea:
                    14:92:cb:ce:c5:49:33:91:51:39:c3:34:12:55:42:
                    de:76:75:0c:0c:5c:a9:c5:d1:66:98:ed:43:f5:1e:
                    8e:48:94:06:a4:47:32:6d:1f:0d:d2:81:1e:f4:25:
                    92:70:63:af:44:6a:d0:90:8d:16:29:55:af:f3:cd:
                    50:2f:2d:55:89:56:bf:52:d0:fb:f0:82:af:c8:77:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:84:9C:00:F3:1A:46:87:18:27:9B:07:C5:BE:18:89:54:52:EB:64
            X509v3 Authority Key Identifier:
                keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:12:e8:06:3a:f9:ff:91:a1:08:89:48:2d:4b:a1:49:74:
         e3:9a:f5:be:f7:a0:4a:e3:20:6d:1c:58:12:a9:a5:41:fc:c4:
         e2:39:e6:10:c3:fe:b4:28:54:26:ad:bf:14:f4:0a:55:cd:32:
         43:9b:2f:1f:92:ba:c3:f8:67:93:53:3f:ef:9b:27:77:8d:e7:
         3b:07:eb:df:89:93:de:af:60:3a:b7:d5:9b:59:90:3e:2c:20:
         3a:22:a0:fe:86:cb:c8:22:6e:ce:0f:ea:7c:ce:cd:c3:7a:55:
         c6:8d:a6:e1:d4:46:49:98:e5:b4:0f:8e:75:ec:49:2d:46:77:
         7c:9e:79:9b:f2:50:fe:de:c4:1f:ea:73:17:62:1c:3b:b7:10:
         df:95:41:59:24:e8:09:1b:57:52:1a:37:f1:1b:6c:8c:40:e5:
         d3:a9:d3:72:ad:cf:af:ca:92:d0:7e:66:0c:bb:5d:56:89:77:
         46:0d:6a:86:9a:19:95:7b:63:55:50:ad:22:b6:02:d1:bc:58:
         1e:b4:7f:65:45:8a:46:7e:d0:e1:04:ba:a7:aa:0d:e3:e3:13:
         d0:c5:4e:c8:8e:d6:71:ab:eb:37:39:5b:91:66:0c:22:77:fd:
         0c:85:10:2e:73:ff:50:10:8f:ad:a7:76:20:94:fc:6b:33:70:
         42:ef:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:17 2026 by rpki-client