Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          flADyOMQ5JLN3cKLecluYPNybXap8ZARlcb9/JKAJKI=
Subject key identifier:   96:54:C0:0C:C8:74:E0:A5:C5:61:DB:1A:EF:B8:50:08:02:1A:1F:83
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       01A0B576E773DF951A37462F11705D0C9332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          0E46
Signing time:             Fri 18 Sep 2026 17:01:03 +0000
Manifest this update:     Fri 18 Sep 2026 17:01:03 +0000
Manifest next update:     Sat 19 Sep 2026 17:01:03 +0000
Files and hashes:         1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: Q3PRY2GGYlQOkqI+3RLxgK3U/8RvgDGAQ0gBoIkQHJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:76:e7:73:df:95:1a:37:46:2f:11:70:5d:0c:93:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Sep 18 17:01:03 2026 GMT
            Not After : Sep 19 17:01:03 2026 GMT
        Subject: CN=9654c00cc874e0a5c561db1aefb85008021a1f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:2b:9c:db:37:49:71:65:56:a3:f3:e8:52:
                    b2:68:37:8f:00:14:fd:d4:87:69:6d:ce:6f:ed:ca:
                    3f:af:b7:07:8f:89:cd:00:f9:0f:18:8b:00:2a:b5:
                    17:8d:5d:0f:1e:57:bc:4b:e1:47:7d:18:b5:8f:87:
                    12:ba:a7:24:39:c3:6a:23:16:f3:c5:01:87:ac:c5:
                    1e:f5:79:78:61:7c:9e:f4:e5:84:0e:8e:53:c8:8e:
                    0b:7f:11:59:5c:96:82:92:3d:14:ff:c2:8a:de:c4:
                    e0:ec:10:ca:35:60:6f:df:2e:de:32:5d:ad:52:b5:
                    09:6d:27:d4:2c:9f:e4:6c:1b:f4:a2:70:3e:23:0e:
                    57:f6:89:83:f2:04:f3:40:03:79:27:e5:d0:bb:a2:
                    92:14:70:5c:ba:37:43:26:59:81:db:ff:38:8e:de:
                    00:5d:f4:e4:18:0a:4b:ad:64:f0:2d:a7:83:ad:09:
                    84:46:72:eb:70:d0:3d:a8:48:8b:d8:a0:8f:40:73:
                    82:14:e1:82:f9:4a:ca:16:c0:d6:9b:8f:0d:d0:bb:
                    39:da:ac:f7:f1:0d:35:90:ff:e3:23:be:68:6a:9e:
                    51:f3:1e:ad:2d:2a:c7:60:f9:a4:7c:e5:60:76:e8:
                    d2:75:25:19:8b:83:0b:6f:88:45:4d:0a:91:51:3a:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:C0:0C:C8:74:E0:A5:C5:61:DB:1A:EF:B8:50:08:02:1A:1F:83
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:47:93:ae:74:1f:03:88:6e:dd:5b:ac:80:30:fe:27:d7:
         ee:4b:eb:80:bc:6e:f5:4d:60:3d:a4:40:b8:99:30:6d:0b:81:
         98:c6:27:ec:af:2d:ea:c0:d2:38:5c:4e:13:73:34:46:f6:57:
         74:7d:db:83:d3:1b:12:b9:8f:c0:3d:8a:01:ea:7d:0f:cf:15:
         16:b9:31:66:77:63:df:ba:85:42:f7:64:9c:b3:46:13:b8:13:
         97:12:e3:dc:e5:52:d2:85:6a:69:ed:af:b7:79:1f:ec:0f:fd:
         0b:c4:e0:e8:ec:02:38:6e:09:fb:a4:eb:3b:45:5c:75:a2:f2:
         af:a9:9f:12:69:35:c4:fc:05:05:df:6c:97:82:70:c5:5c:d0:
         11:75:3e:82:8d:7e:d9:dd:23:ab:6b:bc:24:17:82:64:63:47:
         65:01:d9:2d:a0:c8:a9:46:62:33:83:7f:fe:5f:65:6e:b4:e1:
         c2:14:81:4e:6f:d8:2b:56:4f:47:58:5c:7d:7b:56:c2:f8:b9:
         52:82:3f:8f:4e:97:6b:ab:3b:be:5b:b4:eb:f5:dd:1a:e2:c9:
         43:2e:f8:74:09:ec:ff:75:b5:a9:38:91:09:5b:ab:3f:47:6d:
         44:25:2f:d8:ad:7e:42:dd:ee:47:ee:90:cd:4c:20:71:05:5e:
         97:ac:71:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1dudz35UaN0YvEXBdDJMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm
MDNjYmMwHhcNMjYwOTE4MTcwMTAzWhcNMjYwOTE5MTcwMTAzWjAzMTEwLwYDVQQD
Eyg5NjU0YzAwY2M4NzRlMGE1YzU2MWRiMWFlZmI4NTAwODAyMWExZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKMrnNs3SXFlVqPz6FKyaDePABT9
1Idpbc5v7co/r7cHj4nNAPkPGIsAKrUXjV0PHle8S+FHfRi1j4cSuqckOcNqIxbz
xQGHrMUe9Xl4YXye9OWEDo5TyI4LfxFZXJaCkj0U/8KK3sTg7BDKNWBv3y7eMl2t
UrUJbSfULJ/kbBv0onA+Iw5X9omD8gTzQAN5J+XQu6KSFHBcujdDJlmB2/84jt4A
XfTkGApLrWTwLaeDrQmERnLrcNA9qEiL2KCPQHOCFOGC+UrKFsDWm48N0Ls52qz3
8Q01kP/jI75oap5R8x6tLSrHYPmkfOVgdujSdSUZi4MLb4hFTQqRUTq8/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZUwAzIdOClxWHbGu+4UAgCGh+DMB8GA1UdIwQY
MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et
OTY2NmVkZWVlMWUzLzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz
LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmRHk650
HwOIbt1brIAw/ifX7kvrgLxu9U1gPaRAuJkwbQuBmMYn7K8t6sDSOFxOE3M0RvZX
dH3bg9MbErmPwD2KAep9D88VFrkxZndj37qFQvdknLNGE7gTlxLj3OVS0oVqae2v
t3kf7A/9C8Tg6OwCOG4J+6TrO0VcdaLyr6mfEmk1xPwFBd9sl4JwxVzQEXU+go1+
2d0jq2u8JBeCZGNHZQHZLaDIqUZiM4N//l9lbrThwhSBTm/YK1ZPR1hcfXtWwvi5
UoI/j06Xa6s7vlu06/XdGuLJQy74dAns/3W1qTiRCVurP0dtRCUv2K1+Qt3uR+6Q
zUwgcQVel6xxkg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:10:49 2026 by rpki-client