Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File:                     wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier:          IECbP7yGNnEypFHQxeFH9bbKAqGOOF/e6qntUBDk5rc=
Subject key identifier:   82:97:6D:C7:0B:76:9C:23:2E:34:FB:9D:97:30:DD:95:0A:5B:BD:26
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer:       /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial:       01A08A55A9200D186A7A10EA580CFE7125F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number:          185F
Signing time:             Thu 10 Sep 2026 08:01:04 +0000
Manifest this update:     Thu 10 Sep 2026 08:01:04 +0000
Manifest next update:     Fri 11 Sep 2026 08:01:04 +0000
Files and hashes:         1: 8o82eGnMQ9kdXbjLZCmd88Y3NYk.roa (hash: lQLIuazU2M1Mw2xConB6RbtwCMEC7BRrPajBXYv168c=)
                          2: RJaMcUy1HQkUAjmIoPgafvQ5B6Y.roa (hash: s5FHVSFxCeBSbP8NsMk3I+mCIJvgXgsbwsde/huwpmY=)
                          3: a3C7IbzkbaswXsbovboq2w9BwGQ.roa (hash: ZSzg7SMIqSibkb5Y6lnFSEbHePc9+LOJ33oGgEo573Q=)
                          4: sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa (hash: 0fsrSElISGl5fc2Oeen1Zkemgio3HCia7HQB3m6xfVc=)
                          5: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: Z5xgJz1LUvXS3e+4Am7CV3OQvyzAkECgwB3YCyAkDQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:a9:20:0d:18:6a:7a:10:ea:58:0c:fe:71:25:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
        Validity
            Not Before: Sep 10 08:01:04 2026 GMT
            Not After : Sep 11 08:01:04 2026 GMT
        Subject: CN=82976dc70b769c232e34fb9d9730dd950a5bbd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:3c:5e:98:b0:99:0c:e0:2c:d2:10:95:7e:
                    3e:12:e8:4f:5a:46:18:d8:bd:59:b2:ef:d8:20:20:
                    77:9a:06:02:6f:88:16:fa:20:9a:e9:57:40:80:1b:
                    40:47:dd:91:f0:b1:06:75:b0:93:97:e6:be:ff:6d:
                    10:ab:df:82:ef:3d:ba:54:8e:4c:9a:67:c7:a4:4e:
                    c9:e6:10:fd:cc:8f:4a:b8:6e:14:c6:a4:82:57:eb:
                    1c:08:17:4c:6b:5c:05:fa:4d:a6:00:22:27:3f:cf:
                    36:41:4a:52:cd:5b:c8:66:c9:aa:fb:d0:ce:96:32:
                    74:27:13:e1:cb:0a:4b:63:f9:f6:4b:da:fa:5b:5a:
                    41:38:72:64:cc:f1:5d:6e:4a:65:e4:4f:45:29:97:
                    69:23:7f:b7:e3:8e:21:ad:41:5b:a9:fb:cc:53:21:
                    2a:78:46:6d:86:86:70:0e:e8:10:07:84:c8:52:d0:
                    fb:22:d3:45:47:b6:b0:57:fd:ab:74:dc:d0:4f:c3:
                    c2:68:f8:89:c8:f9:99:16:61:82:0c:aa:3b:24:aa:
                    e9:12:1f:74:30:ba:bb:da:5b:61:14:91:81:c0:e4:
                    7d:56:8a:ad:50:64:d9:61:ee:d3:d1:2c:a2:de:a3:
                    4e:42:f9:55:e1:39:42:a6:f3:c0:27:99:56:6e:3f:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:6D:C7:0B:76:9C:23:2E:34:FB:9D:97:30:DD:95:0A:5B:BD:26
            X509v3 Authority Key Identifier:
                keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:32:4d:48:af:7f:6d:d4:c8:ab:2c:3d:b0:43:60:e8:70:4a:
         af:de:18:22:83:42:5b:b9:a5:9f:aa:61:e7:03:86:1f:12:e7:
         66:69:8d:6f:88:97:38:da:81:16:04:e1:3f:3f:48:69:2a:d4:
         ca:49:e9:50:52:2f:4a:71:2c:0f:19:02:c6:38:26:ec:8f:fc:
         11:f0:46:53:fa:43:3a:96:5a:1b:fa:a3:75:e2:4c:11:80:2c:
         81:96:49:cb:d8:9c:d7:5f:52:35:40:43:f8:bd:87:3d:da:1b:
         e0:a4:97:3e:2a:d0:1e:9d:d4:7e:0f:a7:6b:9b:73:88:a3:d2:
         39:62:a3:d3:4a:a0:13:62:a6:35:3b:b3:4d:fe:72:51:25:e5:
         31:cd:60:88:1b:72:fe:d5:9a:bb:8c:e7:79:58:04:fe:b6:d8:
         03:d4:2e:0a:76:6e:e2:ec:cd:37:0e:95:d0:ff:44:9e:d8:db:
         74:73:4e:1c:c2:df:aa:04:6a:74:d7:df:6c:ab:21:72:b5:8f:
         34:52:25:83:d2:f8:59:56:58:e7:cf:fd:83:09:cf:86:ec:aa:
         e5:ff:03:ab:5e:fa:e0:63:33:dc:91:dc:61:22:7b:12:97:b4:
         b5:1a:69:d9:37:b4:b8:1c:15:04:7a:63:b0:14:a4:fd:4b:f0:
         12:3f:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:26 2026 by rpki-client