Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File:                     DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier:          OG0PLbBM0ktjNBs3zJKz6qt6IGzZRj/LZh/XHj9cYeU=
Subject key identifier:   C5:CA:F7:CC:F1:D0:84:A7:1E:31:E6:B1:DE:F6:31:E6:A4:D3:BA:58
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer:       /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial:       01A17C975DBE25F5915BF5E8BF1355A9175C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number:          1AC5
Signing time:             Tue 27 Oct 2026 09:00:57 +0000
Manifest this update:     Tue 27 Oct 2026 09:00:57 +0000
Manifest next update:     Wed 28 Oct 2026 09:00:57 +0000
Files and hashes:         1: 70uwjS23ojWYkHOJF-QA_XGJ95c.roa (hash: CvnO7mT1jduzqhCIW8qOqSz+l6S7AQzxDDVic7aHm4s=)
                          2: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: 3mnLg7Wk/IxbrMPSkjyeZ0coQblTGDdky/e9hnz1RCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:5d:be:25:f5:91:5b:f5:e8:bf:13:55:a9:17:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
        Validity
            Not Before: Oct 27 09:00:57 2026 GMT
            Not After : Oct 28 09:00:57 2026 GMT
        Subject: CN=c5caf7ccf1d084a71e31e6b1def631e6a4d3ba58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:3b:4f:43:f6:13:3b:10:15:ec:40:06:55:
                    ff:a9:31:b3:8d:de:1a:80:ae:b8:d1:6f:4c:e6:74:
                    f2:2d:6b:2d:be:06:7c:f9:08:d0:fa:0c:e1:6c:93:
                    ff:aa:96:45:97:70:38:4b:b9:0e:d0:af:6b:bd:7a:
                    64:09:49:b0:e9:32:48:86:4a:89:97:78:d6:46:ef:
                    a6:c8:d9:8e:e8:e6:94:80:89:37:98:b5:f3:84:7f:
                    cf:dc:dd:49:ae:c0:6b:ee:34:16:65:23:20:3d:b5:
                    ff:cb:e9:a6:47:8f:73:21:6a:d3:46:de:52:bb:db:
                    e2:71:ff:10:14:2d:62:10:0d:8d:ab:3b:54:73:2a:
                    df:f0:30:59:10:fb:e6:c9:7f:95:5c:fa:72:c0:f4:
                    fa:db:09:b7:44:f3:d1:4d:f5:92:c9:ad:d7:07:57:
                    0a:25:a7:53:e4:03:6c:e7:8d:a2:63:0f:09:0c:22:
                    43:43:5e:34:37:4e:5b:fd:45:e6:bc:f0:42:b0:a2:
                    91:39:c3:85:e1:3c:99:e7:b1:01:32:86:9d:b8:f6:
                    e8:f0:27:9e:a9:8d:56:d6:b2:76:3c:41:1f:d1:ae:
                    e5:1c:1a:1c:63:a0:6a:9e:99:ec:35:83:ba:66:91:
                    5f:c4:f0:88:42:21:3f:fb:03:f7:b5:6b:6b:28:57:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CA:F7:CC:F1:D0:84:A7:1E:31:E6:B1:DE:F6:31:E6:A4:D3:BA:58
            X509v3 Authority Key Identifier:
                keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:fe:7a:7e:7d:73:a3:67:bc:34:47:fc:9e:6f:ff:e4:6c:
         45:3f:ed:b9:ac:9b:40:b8:40:f7:cc:60:87:2f:f7:fd:8f:9e:
         61:13:92:97:9e:92:c5:01:46:06:46:38:e7:11:e0:fa:6e:de:
         02:ac:67:a2:8b:05:96:b9:b1:f3:65:ec:7a:37:ec:7c:b5:7a:
         97:7b:d0:c3:1a:c7:35:7a:bb:e9:a7:8e:41:0b:e3:68:cc:15:
         06:ca:68:c1:0d:02:5d:f9:62:8e:5b:34:34:19:e6:bf:f6:12:
         a1:fc:e7:46:c2:90:f3:2b:32:11:6f:b5:80:1b:6f:9b:fb:68:
         75:fa:07:fb:6a:e4:95:23:09:41:ca:34:75:34:45:22:8a:38:
         24:11:5b:64:eb:a8:00:53:5f:bd:a7:3c:4e:fe:77:09:94:8d:
         6e:51:18:58:2d:f9:af:8a:be:71:16:3f:dc:c0:e3:a9:67:02:
         36:b7:47:37:aa:f3:57:00:31:59:90:2b:bc:84:44:30:1f:c8:
         f2:1f:1c:29:ac:c4:5a:1b:18:36:77:62:15:40:1d:04:b3:eb:
         eb:1a:da:14:32:fc:c6:e6:33:f1:32:e4:23:65:4c:a5:c8:ff:
         54:34:07:fa:42:04:09:8a:bb:a6:fb:ce:c1:f6:c4:e6:4e:20:
         96:c5:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:18:36 2026 by rpki-client