Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
File:                     WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft (raw, json)
Hash identifier:          VYkvu8fz9u67ne8Ygp9H+Hx7VhgkdwRLGWev9S2F6J0=
Subject key identifier:   09:CD:5B:81:89:2B:B3:96:33:35:FE:23:D9:7A:36:94:C4:21:66:DE
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Certificate issuer:       /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial:       01A0F29EE413DAE0EB1FB2F00E6184CAD81F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
Manifest number:          0D07
Signing time:             Wed 30 Sep 2026 14:01:34 +0000
Manifest this update:     Wed 30 Sep 2026 14:01:34 +0000
Manifest next update:     Thu 01 Oct 2026 14:01:34 +0000
Files and hashes:         1: 3vvkYggg9yd7bG-fFHqOzoZIhMI.roa (hash: Jrh7+DbyRftfJWMehnZ2UWj84adngEe9IfNQWMntaWY=)
                          2: KtwjJxqN8UH08FldgJvcpESkUzQ.roa (hash: VQpQKrducwAP8Rpog43Qsa4SpXdFqCQ1EvVdnE9AdDY=)
                          3: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl (hash: nya+37V8rEzZcq+HBhEqGTyTVgq0a5NPiaJ+dYzHdGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 14:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:9e:e4:13:da:e0:eb:1f:b2:f0:0e:61:84:ca:d8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
        Validity
            Not Before: Sep 30 14:01:34 2026 GMT
            Not After : Oct  1 14:01:34 2026 GMT
        Subject: CN=09cd5b81892bb3963335fe23d97a3694c42166de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:40:1d:6c:b1:fd:3b:66:12:26:c9:08:18:05:
                    e3:2c:47:5e:78:33:73:67:fc:c7:e2:f4:ac:c9:11:
                    00:6f:3d:fa:87:a2:d9:ea:17:a1:c7:bf:56:b6:c8:
                    e9:31:e9:6f:58:83:1f:82:65:0a:ec:a5:36:8b:67:
                    c1:27:36:2a:c0:b5:a8:21:19:33:fe:32:7a:1d:8e:
                    ec:0f:76:f8:36:a3:be:40:c2:2b:55:b9:a8:2c:e3:
                    2f:71:d4:7c:ad:b2:de:95:e5:61:3a:fa:1d:90:7e:
                    2e:78:9d:59:30:1b:c2:db:f3:e4:ca:80:81:08:5d:
                    50:69:94:a2:42:8f:66:53:b2:d8:98:6b:ec:59:ca:
                    7d:82:1f:e8:4b:42:9a:ff:0c:e0:70:c3:0c:d3:e0:
                    15:eb:ca:65:ff:d6:3c:78:f5:5d:ef:ba:fb:84:98:
                    26:07:f5:a1:b9:ec:f6:ca:73:16:4d:31:be:ad:da:
                    18:0e:25:5a:35:28:da:0c:68:fe:c6:66:13:e8:38:
                    16:1b:2e:67:8f:59:de:27:bb:f1:7c:86:40:cc:67:
                    e3:ed:36:2c:ee:23:2a:15:e3:27:7c:bf:48:27:cd:
                    26:bf:e7:86:ad:55:8a:d4:05:36:e1:4f:79:e6:d4:
                    23:cb:64:17:8a:3d:35:e7:ce:a0:f1:81:4b:b3:5a:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CD:5B:81:89:2B:B3:96:33:35:FE:23:D9:7A:36:94:C4:21:66:DE
            X509v3 Authority Key Identifier:
                keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:82:a7:70:69:4f:3c:9e:bc:11:ca:37:7e:d4:36:b7:7f:2d:
         8a:66:a5:5d:ce:47:02:7e:d9:5d:5c:3c:c3:ea:a6:2b:46:b6:
         45:aa:ea:d6:96:ff:ee:91:1a:df:74:a0:74:10:7d:e7:74:3f:
         01:13:c0:29:23:c1:97:98:b5:ec:4c:dd:54:33:a2:05:71:f2:
         ae:05:09:64:cb:a1:48:b4:d8:6d:6e:bb:26:05:5b:6c:b3:bf:
         23:3f:84:00:fb:09:83:33:88:fe:eb:65:ab:e0:dc:94:c4:c5:
         f6:d1:24:dc:18:73:b4:d3:78:e0:83:aa:9c:5b:10:99:0d:ea:
         fd:70:b2:2f:99:c8:d5:72:3b:ad:b9:7f:c8:25:6b:fc:01:17:
         ea:f4:f7:fc:f0:3e:8e:ba:7e:e8:da:b0:75:ee:e9:1e:62:7b:
         af:75:7f:34:63:21:e0:e9:0c:2f:c3:c5:05:8e:13:cd:fc:e3:
         35:fc:e2:50:31:c4:8b:d5:5a:0c:f8:1b:f4:7d:ab:1c:2f:80:
         43:4b:38:cd:8b:36:f6:f2:25:75:a4:08:b1:53:ac:36:1d:69:
         5b:18:03:61:90:20:8d:9e:72:bc:89:da:df:28:df:47:c6:18:
         8a:72:6a:29:32:1d:90:2e:2c:56:52:71:b2:8c:54:da:ec:d6:
         a7:63:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 09:10:18 2026 by rpki-client