Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File:                     w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier:          tbgFLZYd17Fx0g6jURs0LOsUYF8StB0IPrUHa9ZwvDg=
Subject key identifier:   C6:7D:36:7A:EE:F9:ED:21:33:CA:EB:FB:0D:6F:39:90:4E:C2:03:63
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer:       /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial:       01A17C979465FB92254CDEAD2BA0F4950709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number:          0733
Signing time:             Tue 27 Oct 2026 09:01:11 +0000
Manifest this update:     Tue 27 Oct 2026 09:01:11 +0000
Manifest next update:     Wed 28 Oct 2026 09:01:11 +0000
Files and hashes:         1: QAwwrbxhwHqZob00Jsa5Cjy2Lhk.roa (hash: qU0LPfBSzfyFQh7WeA13rtQNW4XzMc/LZcEBe2o1shw=)
                          2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: hRQmkWG8xB+wqgMtKfgkP1tDlZLROXTHwaUb579r8uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:94:65:fb:92:25:4c:de:ad:2b:a0:f4:95:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
        Validity
            Not Before: Oct 27 09:01:11 2026 GMT
            Not After : Oct 28 09:01:11 2026 GMT
        Subject: CN=c67d367aeef9ed2133caebfb0d6f39904ec20363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:5c:ff:ed:7c:31:4f:6e:98:40:c6:31:4f:
                    88:15:cd:04:a7:a5:e1:21:9a:26:cb:c7:e8:99:6b:
                    02:63:58:2e:8e:7d:2b:8b:1c:9f:b0:f0:29:ad:b8:
                    0b:60:fd:1e:5a:ce:c7:f0:a7:1f:1d:7a:76:d8:2e:
                    7f:f4:66:f4:72:e8:e7:42:1a:69:c0:3b:4c:ba:f9:
                    14:6f:ad:d2:ae:29:6e:b6:0a:70:ea:dc:8d:31:04:
                    47:a4:8a:d2:c9:d3:01:31:69:e8:21:84:f5:98:bc:
                    e2:04:64:dd:41:31:91:00:23:da:18:46:3f:7b:e7:
                    34:06:b5:fd:c3:60:94:01:0b:22:26:fb:80:ea:a0:
                    34:22:e6:9f:67:d3:2a:ea:47:69:ee:45:73:50:fd:
                    79:dd:ab:51:79:81:7d:94:ca:89:90:1a:dc:75:d0:
                    b1:10:1a:29:71:ad:b1:19:f9:e9:55:9d:5f:8a:29:
                    e1:c6:42:74:ff:5c:17:56:ef:69:3a:bc:19:91:3c:
                    18:5b:32:fe:58:ca:a5:4e:cb:f3:69:ca:ea:51:d9:
                    0d:46:5f:86:64:c7:cf:c1:a6:60:24:a2:7f:eb:07:
                    14:24:29:d6:c9:8e:43:4d:92:d5:74:48:b7:37:fb:
                    ef:a6:be:ac:a0:30:99:60:1a:1b:01:bc:cd:5e:fe:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7D:36:7A:EE:F9:ED:21:33:CA:EB:FB:0D:6F:39:90:4E:C2:03:63
            X509v3 Authority Key Identifier:
                keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:e0:86:59:c1:68:90:2d:0d:45:71:41:6e:f2:88:4c:bf:
         69:db:f3:d4:3c:28:7f:03:52:89:af:b6:55:08:e5:0b:cb:f5:
         b6:b5:a2:e3:bd:32:00:4c:81:79:64:8c:bc:db:7d:a3:fa:81:
         39:07:17:59:d9:0f:b1:a0:ca:c5:26:cb:16:f3:60:22:c9:b5:
         9d:eb:f7:cd:23:2b:cf:b4:ef:1e:8a:8a:ad:a8:70:e3:71:ca:
         a0:dc:cc:a4:fb:d9:07:d8:d4:fe:a0:54:0b:ea:01:00:52:f1:
         82:cb:10:be:4d:4b:dc:6d:44:67:14:d7:50:1b:9c:9d:c0:62:
         2d:08:08:eb:9c:d0:57:3d:b8:14:38:45:40:67:5d:7a:74:64:
         17:6f:21:94:e6:49:03:49:8d:2b:23:3b:54:f6:8c:4f:3c:be:
         20:6b:2b:d6:76:16:4c:c8:3e:28:3a:93:9a:c3:50:74:d3:26:
         e0:d7:82:98:28:cd:6d:54:2f:bf:0f:18:03:8f:17:9c:9b:c0:
         74:84:ba:d0:aa:29:92:b2:7e:5e:ab:0d:53:f2:f1:33:98:bf:
         2b:df:dd:d5:7e:0c:99:88:b3:83:da:c7:81:7d:4c:e8:f7:e7:
         17:fb:9d:82:bf:64:d2:e9:ed:cc:31:6d:e1:d4:6f:c0:71:41:
         5c:5a:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:37:47 2026 by rpki-client