Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File:                     WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier:          zO9vpcRYb5aaoaFJpVLAWQQN1ErhRXTSei8sGU+Wgow=
Subject key identifier:   C6:0E:8E:06:9A:E9:C9:84:3E:A1:C8:D8:FC:20:5B:1B:40:ED:FA:24
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer:       /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial:       01A16F807F8A3892792D1E38CDCC83D788D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number:          152C
Signing time:             Sat 24 Oct 2026 20:00:54 +0000
Manifest this update:     Sat 24 Oct 2026 20:00:54 +0000
Manifest next update:     Sun 25 Oct 2026 20:00:54 +0000
Files and hashes:         1: DghlG5g8kh3BeIC870myqIarxAw.roa (hash: jDUL776SurMFsX7IAknzdET8gzAlypgO2s6eGi65foY=)
                          2: RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa (hash: IWGFsdcNHT1pJQgqJ040THMUt7oZlhEWCHXEnZys69k=)
                          3: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: n49qvYtmGHwyzOfxrQVgNOhwqUTtAKM0yJdOY1ixV3Q=)
                          4: um-Lorhk6tusr5ZZhejZsnrGt8I.roa (hash: DrlD6P/FnEJtBBpWVV2J3o/4TxhGlcEWI7wpBpxOr+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:80:7f:8a:38:92:79:2d:1e:38:cd:cc:83:d7:88:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
        Validity
            Not Before: Oct 24 20:00:54 2026 GMT
            Not After : Oct 25 20:00:54 2026 GMT
        Subject: CN=c60e8e069ae9c9843ea1c8d8fc205b1b40edfa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:9e:d2:ec:47:c7:4b:70:60:d5:74:e0:14:
                    84:1a:ee:1a:68:5f:49:6d:f6:96:77:0c:23:7a:5a:
                    3b:8c:db:6a:e8:95:ea:9b:7f:82:e9:d4:9c:cc:3a:
                    bb:9c:e4:e2:c1:64:db:8b:55:3d:9c:50:c9:05:5e:
                    25:7d:85:e1:7c:d6:0c:9d:72:96:45:f4:ee:90:fa:
                    96:e3:38:46:6b:5b:db:04:12:19:42:6e:e8:6d:5a:
                    e9:d3:1b:0c:66:33:7a:36:e5:1d:5b:bc:95:f9:94:
                    5a:fd:47:7b:aa:78:ce:f6:4e:39:50:fb:e7:1b:93:
                    de:c2:18:f8:5d:44:fd:b3:64:8c:9e:5e:ee:b7:3b:
                    01:d7:01:41:b2:25:62:fa:11:47:ed:5d:3f:7f:1c:
                    1f:98:8b:b5:78:7f:aa:40:a8:df:6e:76:7f:cc:2d:
                    3d:22:89:dc:6a:6c:a2:7f:65:c7:f2:7b:67:1b:5e:
                    11:8e:2c:84:4c:bd:72:cd:e8:fa:3e:1f:ce:db:b7:
                    56:7b:61:77:ac:18:92:60:e5:38:55:73:01:24:9f:
                    17:f3:74:22:7d:f5:fc:b8:62:cd:7b:9f:85:cf:d1:
                    53:cd:26:f5:f1:51:eb:91:a3:50:e5:74:46:a7:ac:
                    09:5e:f6:5e:8b:41:17:c1:1a:64:bf:8c:9b:26:f6:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:8E:06:9A:E9:C9:84:3E:A1:C8:D8:FC:20:5B:1B:40:ED:FA:24
            X509v3 Authority Key Identifier:
                keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:0b:6a:fd:7d:3b:69:8f:40:fc:8a:93:27:58:95:03:26:
         88:18:37:e4:a5:98:ec:09:cf:a6:0a:67:bc:dd:a5:37:57:ac:
         30:f6:08:4e:dc:3a:de:cf:82:65:f5:90:47:ae:94:55:e0:64:
         8d:44:b8:5c:cd:40:a0:ed:82:6f:a4:52:64:8e:4b:4a:bf:34:
         16:48:79:44:72:bd:94:76:3b:36:86:f5:38:8b:a7:fa:16:e8:
         17:7a:3c:fe:c2:63:1d:8f:b6:4f:a2:cf:d8:56:9e:6a:c3:1d:
         10:29:c9:8d:00:73:f5:cf:a1:a5:4b:9f:0a:37:dc:51:6e:3a:
         13:65:58:ff:f3:b9:4b:c2:4a:ce:70:32:4e:0f:4e:fa:d7:50:
         7d:4d:bd:27:b6:42:06:a1:68:66:2f:53:c5:c9:b7:af:96:86:
         1f:af:bc:b9:ef:ab:3e:fb:b8:fe:ee:cb:ca:a9:aa:cb:51:f5:
         68:e8:89:94:77:20:3e:5e:b1:5c:a0:fe:f1:36:71:87:c0:a4:
         b1:30:40:11:9a:f5:38:56:e7:41:f8:44:4c:d2:9b:18:3c:83:
         1f:fc:fe:3f:56:df:c9:17:c8:b7:67:26:df:e9:95:92:51:0f:
         dc:64:42:da:e2:b0:01:ec:27:54:f3:bf:4a:b3:ca:1e:f6:c8:
         9d:5e:a4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:34:23 2026 by rpki-client