Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
File:                     wA_3yZHBXTi_3_s648uYg1ZSnsI.mft (raw, json)
Hash identifier:          kzHXSWAdO2DxB5cc9gnPnan4JuSZVt6FKMFVY0N+EyY=
Subject key identifier:   9D:D7:1C:69:AC:1E:6C:CA:E6:6B:D2:51:33:0C:BA:92:DC:5B:19:03
Authority key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Certificate issuer:       /CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Certificate serial:       01A08CB1C755878E584347ECDDE31CA500D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
Manifest number:          98
Signing time:             Thu 10 Sep 2026 19:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 19:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 19:00:56 +0000
Files and hashes:         1: tJdEpKTyQFiB6etKYnTD5TRM42I.roa (hash: fkYiQBu5Trdut7tZ/7hqit0Set+zAtJH4HGx3n50MEc=)
                          2: wA_3yZHBXTi_3_s648uYg1ZSnsI.crl (hash: k/iIxzfA2QyfZ6DFJn5wqCVchorz53cErAcjHDqUces=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:c7:55:87:8e:58:43:47:ec:dd:e3:1c:a5:00:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
        Validity
            Not Before: Sep 10 19:00:56 2026 GMT
            Not After : Sep 11 19:00:56 2026 GMT
        Subject: CN=9dd71c69ac1e6ccae66bd251330cba92dc5b1903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:56:c5:8a:76:b2:ac:91:69:d1:04:5b:52:
                    be:16:f8:d2:83:a5:af:b2:3f:22:5f:b3:18:71:bc:
                    5f:33:48:8f:c7:5a:25:22:c8:cf:20:fa:24:9a:96:
                    33:93:21:29:e4:34:26:5e:98:2c:76:12:5b:bc:f6:
                    59:36:08:30:c5:99:a5:bf:f7:b4:b2:b5:4f:f2:d1:
                    60:4c:b2:4f:66:0b:5b:67:44:8c:d6:dd:49:93:6e:
                    90:34:ca:29:47:af:04:bf:ae:92:77:25:a7:44:b9:
                    e4:3a:38:18:f0:59:4e:26:88:94:3b:48:1d:47:55:
                    2b:6c:c6:54:f8:1c:1a:64:5e:20:54:87:78:e3:ea:
                    2d:e1:8f:72:c0:d6:1b:4c:6b:95:7a:fb:3c:21:57:
                    f7:49:c0:fb:3b:26:56:b6:e9:88:20:be:5d:b1:6c:
                    00:7d:7f:45:53:91:2c:b8:2d:1f:27:1b:6c:a3:49:
                    27:2f:80:3f:fb:c0:77:cb:64:d6:ee:cd:9f:9f:50:
                    b4:91:8b:5e:d9:7b:2f:9a:be:95:14:9b:de:2d:4c:
                    43:75:6d:a7:92:e2:1c:c5:d9:5e:6e:94:84:1e:e3:
                    4c:93:62:14:ac:aa:02:2b:5c:46:b4:73:58:bd:cf:
                    d5:9a:9a:7e:a2:03:77:44:46:7e:f6:66:f3:40:6b:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:1C:69:AC:1E:6C:CA:E6:6B:D2:51:33:0C:BA:92:DC:5B:19:03
            X509v3 Authority Key Identifier:
                keyid:C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:c8:59:63:12:14:9a:0b:2a:d8:10:95:2a:62:e6:82:56:
         f8:da:7b:1a:fa:c0:6c:31:09:e7:06:76:a9:2e:5f:f2:6d:cb:
         b8:b5:12:27:d6:7e:93:48:9b:41:a4:f1:39:3a:a9:a5:f1:cf:
         dd:a3:8e:e7:db:6e:3d:e6:cc:09:8c:4a:57:d1:06:f8:e7:13:
         cf:a0:be:ce:d2:30:e8:11:60:0d:74:b1:28:fd:11:86:33:d2:
         ed:61:af:05:5a:f9:16:c0:c4:ca:50:4d:a5:36:d2:74:5a:45:
         bd:a2:4b:e9:82:48:be:ef:c9:94:a5:2e:51:56:c3:11:e6:45:
         49:5f:f2:d2:98:91:a7:36:15:f0:4f:72:a0:1e:84:02:5f:30:
         b1:f0:4c:42:1e:04:f8:c7:f3:04:86:eb:a9:7c:ae:39:38:4a:
         62:b6:02:9d:35:9f:f2:b7:60:8e:19:f7:be:5b:36:e5:8f:fc:
         f1:ab:c9:41:b4:39:79:0a:6e:f0:8a:bb:f6:f3:4b:3a:e4:6d:
         b9:e6:6b:1c:9e:b6:ef:de:ef:69:e6:7b:6c:85:14:5f:ae:ee:
         64:7f:7c:49:ea:1c:03:6a:a3:e2:f7:c3:e5:6d:be:4e:5c:d4:
         76:68:1e:44:1f:c3:06:47:55:a8:09:21:91:7b:12:6c:dc:38:
         99:e4:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:23:09 2026 by rpki-client