Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File:                     WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier:          WiyAJF0AYiwWaloiwuWmOhckgKvHppgQid+6YThlT+g=
Subject key identifier:   91:79:FA:25:7A:9C:BD:03:62:2F:B1:B6:70:25:40:0A:31:05:9E:18
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer:       /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial:       01A0890BED8D191A1B3148FC907F8D31A292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number:          11E6
Signing time:             Thu 10 Sep 2026 02:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 02:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 02:00:55 +0000
Files and hashes:         1: G7RZoTOwTcKPekHKI4U7pubMxTo.roa (hash: hkFq7H3atVzzygJHfrNdoE+NINNolqqepS5P7kn64YA=)
                          2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: UXpa03zIxYyHdXqwS5QrWWzn0IIM7m0jgO6KzSFrf+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0b:ed:8d:19:1a:1b:31:48:fc:90:7f:8d:31:a2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
        Validity
            Not Before: Sep 10 02:00:55 2026 GMT
            Not After : Sep 11 02:00:55 2026 GMT
        Subject: CN=9179fa257a9cbd03622fb1b67025400a31059e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:ab:f4:5b:b7:62:4b:0e:0f:c1:ce:33:13:
                    0d:39:ae:0e:f1:fd:43:18:43:6e:eb:23:47:c1:f7:
                    8a:21:de:a9:80:2b:7e:f0:37:95:1a:3f:36:a5:2b:
                    4d:db:24:d3:cb:4e:17:13:22:7c:f0:97:5e:7e:48:
                    73:ac:65:03:26:1c:9c:e1:f1:db:73:73:77:82:bd:
                    bd:c0:5d:69:80:2e:59:1b:1d:d5:a9:b3:88:46:91:
                    f4:77:9d:00:f2:78:bf:dc:54:78:03:9a:3a:d6:72:
                    ca:36:7a:18:3e:93:a7:b5:8d:09:0a:a4:bc:5f:05:
                    db:aa:1e:00:2b:49:fe:8c:29:2f:37:11:78:00:44:
                    7f:54:0a:b3:db:8e:69:13:51:25:1a:9b:2f:8a:2a:
                    92:87:dc:db:0b:21:41:fb:65:12:72:39:30:85:a9:
                    16:85:35:a7:e6:9b:ff:77:e1:f0:9f:d0:dc:59:ba:
                    53:25:ed:72:2b:6d:c4:7c:e7:27:ea:15:f2:b4:b6:
                    3b:ff:83:c0:e6:f6:ed:ba:a2:75:c7:ea:a1:fb:6f:
                    dd:db:19:a6:6e:6c:64:a9:51:09:6a:90:f2:31:c5:
                    5c:d6:ee:eb:d0:c8:64:18:15:74:d4:6e:8f:24:87:
                    63:90:ef:ee:8c:e8:b3:7c:6a:db:6b:02:8c:97:92:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:FA:25:7A:9C:BD:03:62:2F:B1:B6:70:25:40:0A:31:05:9E:18
            X509v3 Authority Key Identifier:
                keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a9:65:18:1b:0f:1d:38:7f:5b:6d:f1:84:eb:c9:9a:b6:f0:
         c7:e3:74:f0:91:f5:89:b1:18:f4:90:d2:3e:73:96:56:4d:f1:
         45:88:54:8a:24:52:68:17:f6:93:13:33:e4:ea:2d:2a:1b:7c:
         85:a2:fa:5b:8a:50:89:db:4f:8b:30:85:8a:fc:1a:50:1f:5b:
         77:ec:cc:d9:e2:52:da:66:ad:bb:74:4d:32:59:79:51:0d:d7:
         ff:4d:4a:81:1a:eb:73:d3:4d:46:9e:80:6b:c0:64:69:f0:76:
         e7:70:e0:a2:72:f7:a6:df:da:a4:1a:2c:54:37:33:68:7c:5f:
         62:f3:30:23:71:27:4b:58:21:7d:1f:de:e1:ff:aa:7b:d9:8d:
         36:13:dc:53:2e:c7:e8:37:df:09:8d:8a:aa:09:4b:87:65:8b:
         4c:9a:d8:2f:57:c7:31:a0:bb:23:1a:6b:b3:b8:15:cd:70:ba:
         13:49:5e:ed:64:e0:7d:9d:4f:4f:a7:01:85:e8:82:a8:10:5b:
         cf:4e:cd:f5:bc:45:e6:65:26:b7:09:ed:d8:f6:e4:37:92:88:
         10:0b:a3:af:53:7a:cf:4a:18:91:2c:c4:37:44:74:30:a9:a9:
         e5:13:60:65:96:ca:f8:52:ea:79:33:cd:7a:c9:4f:1a:64:ba:
         87:26:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:53:03 2026 by rpki-client