Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.mft
File:                     wUptTHoHt-72CiDcsLNTB43TV_w.mft (raw, json)
Hash identifier:          CH52SkfA7A4ArRYAhSVLcHZSROio2WiW5MMNNv9qxOM=
Subject key identifier:   27:49:CE:D0:4A:DA:CB:B5:72:B0:E8:8A:DD:05:97:75:AB:CD:5D:32
Authority key identifier: C1:4A:6D:4C:7A:07:B7:EE:F6:0A:20:DC:B0:B3:53:07:8D:D3:57:FC
Certificate issuer:       /CN=c14a6d4c7a07b7eef60a20dcb0b353078dd357fc
Certificate serial:       01A181BE65FB58CA790D19EAF4E81157F2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUptTHoHt-72CiDcsLNTB43TV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.mft
Manifest number:          014D
Signing time:             Wed 28 Oct 2026 09:01:41 +0000
Manifest this update:     Wed 28 Oct 2026 09:01:41 +0000
Manifest next update:     Thu 29 Oct 2026 09:01:41 +0000
Files and hashes:         1: 1-PDD8xkziZ4_NQ-shdCD4vo9NtQ.asa (hash: dXPDd1olq75Zvm+v8ZWsEhpVMz56J1HUlANLfWl969A=)
                          2: wUptTHoHt-72CiDcsLNTB43TV_w.crl (hash: ShFZ0xAA+3jRkZ29l2h+VOEi+FTWj0YSBZIEe//Z2kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUptTHoHt-72CiDcsLNTB43TV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:be:65:fb:58:ca:79:0d:19:ea:f4:e8:11:57:f2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14a6d4c7a07b7eef60a20dcb0b353078dd357fc
        Validity
            Not Before: Oct 28 09:01:41 2026 GMT
            Not After : Oct 29 09:01:41 2026 GMT
        Subject: CN=2749ced04adacbb572b0e88add059775abcd5d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:3f:b6:de:3b:6f:4d:a4:d8:61:e4:68:bd:
                    81:9c:2a:14:3f:d8:9c:96:4a:27:6a:6c:44:95:e8:
                    04:80:26:68:94:f3:20:bc:3a:61:16:05:63:8b:3f:
                    61:be:8e:67:b2:47:20:b5:c0:c4:c6:c9:9d:11:0f:
                    52:a0:02:a0:04:e1:72:38:3b:44:3a:f5:f2:94:eb:
                    62:da:e6:a5:64:93:fb:61:90:66:18:16:0f:ca:6d:
                    7b:96:9f:1c:5b:27:54:60:ee:13:9d:1c:4d:49:70:
                    bd:df:8f:29:20:a0:36:b3:da:e3:1f:9d:0d:c2:41:
                    fb:80:5f:04:12:16:84:43:98:e5:4f:6c:92:d0:7a:
                    b2:06:61:97:9f:1e:36:b4:c8:d3:3b:0f:d0:e0:1d:
                    cd:ac:74:93:29:e8:40:3c:c2:a9:fc:36:e2:31:b5:
                    bd:4a:64:81:b6:c9:f9:e3:2e:f1:09:4d:14:fc:3c:
                    9e:14:a1:25:c4:cc:12:0b:04:23:c7:43:6a:97:02:
                    96:c2:83:2e:c0:04:4c:d2:8a:18:3b:1e:07:2b:5b:
                    79:22:ac:af:ae:ed:a3:8e:ca:7d:c6:9d:0b:f7:7d:
                    bc:f0:a8:4a:02:ac:69:43:23:b4:08:cf:78:71:d7:
                    68:8d:cc:d6:97:76:68:14:62:12:cd:dd:49:a9:71:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:CE:D0:4A:DA:CB:B5:72:B0:E8:8A:DD:05:97:75:AB:CD:5D:32
            X509v3 Authority Key Identifier:
                keyid:C1:4A:6D:4C:7A:07:B7:EE:F6:0A:20:DC:B0:B3:53:07:8D:D3:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUptTHoHt-72CiDcsLNTB43TV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:a6:e8:49:f9:9d:27:64:62:8e:27:13:bf:1c:7b:fb:21:
         e7:a9:9e:3c:7d:93:09:52:b3:f1:a2:9a:cb:47:bd:54:a5:c4:
         5b:e2:f5:59:e7:e2:9e:45:34:14:b8:b4:de:7c:7b:7c:4e:39:
         13:78:86:27:a5:84:33:a4:ec:3a:2f:e4:d0:09:11:a9:ff:72:
         e1:98:fd:fe:ea:b8:68:c3:d5:47:af:b5:17:57:86:36:08:74:
         3d:4b:d0:ca:57:c4:7e:65:6a:29:54:e1:54:f2:aa:ed:7b:9b:
         28:2b:76:05:a9:a0:f2:20:2a:8d:f5:c8:98:5b:07:32:96:6f:
         2f:cd:d1:76:eb:97:60:9a:a3:92:5a:a9:69:1d:ad:a6:a8:17:
         81:2a:10:eb:32:6d:73:dd:59:e8:79:df:2d:a6:44:3c:d3:41:
         5f:2c:e8:50:c9:2e:2c:d5:21:26:c8:ef:cb:79:fc:3b:64:00:
         0f:df:53:7b:5a:50:e7:ba:0a:8a:44:a4:44:3c:e2:6a:0b:6d:
         23:a5:57:6b:bc:ea:5f:02:ac:da:cf:e6:03:a0:21:79:df:bd:
         52:b5:2b:76:ea:12:f4:47:53:10:06:da:12:2b:ac:fe:a8:59:
         6a:55:1b:c2:fc:32:bd:aa:45:9e:6c:6d:e1:64:7f:79:eb:ec:
         6a:95:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:14 2026 by rpki-client