Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          6bnfu/ClKtGPe4XZfclstY77iU+Vdy2ibTd687ETFI8=
Subject key identifier:   48:03:67:C4:1F:AE:1C:85:9E:FE:E2:F7:6A:66:43:CF:2E:3A:26:3C
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       01A0D07F706DCC8211CC0BF6A27E14DD0491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          0A25
Signing time:             Wed 23 Sep 2026 23:00:07 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:07 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:07 +0000
Files and hashes:         1: QjOXLGjz8ds-7sCauorJ8W8aVN4.roa (hash: BmFWBCryjEjKWhVriCT0YrDHfiFmLKZXY1G064wUhCw=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: N0ofz53TWOVRWrPlMqDEyho5v7mvkGqJdXJ+UEmXv3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:70:6d:cc:82:11:cc:0b:f6:a2:7e:14:dd:04:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Sep 23 23:00:07 2026 GMT
            Not After : Sep 24 23:00:07 2026 GMT
        Subject: CN=480367c41fae1c859efee2f76a6643cf2e3a263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:17:65:ea:ab:48:cc:c1:ad:c2:c8:f5:e7:
                    38:9e:43:4f:75:a2:72:78:b7:ee:68:04:00:9a:ff:
                    c1:92:ec:6c:96:2f:e9:f4:8f:9f:eb:e7:4e:dc:22:
                    25:99:4c:20:49:a5:81:c5:c6:a6:4d:10:01:a2:0d:
                    a2:18:1f:39:60:fb:29:39:2a:d3:ba:6b:52:1a:92:
                    3d:58:79:87:ba:03:f9:79:70:01:14:d1:ef:8b:e8:
                    f8:40:58:60:d9:b3:1b:be:1d:7b:89:f2:45:0f:f8:
                    9c:42:dd:a9:f4:48:51:3f:7b:73:53:a8:7a:b6:6a:
                    d7:fe:ee:ea:22:0b:bd:ba:3c:b4:9a:60:47:6f:9b:
                    f7:51:9d:5b:07:5b:05:f4:1f:72:24:1f:3f:47:ef:
                    51:7f:49:8d:85:63:8a:42:02:cf:3d:79:cb:80:72:
                    0c:d7:71:12:e9:27:6a:87:52:13:6b:94:ea:bd:3d:
                    cb:b2:78:1c:ad:a5:cd:b6:54:ea:1e:3c:b2:b0:c3:
                    68:2f:76:d5:02:81:ea:0f:b1:6d:69:b7:40:ce:0f:
                    4e:ba:2b:2f:54:9e:9e:a3:81:97:4c:d1:cc:13:a3:
                    47:bc:00:32:2c:37:8d:6d:c2:34:4c:aa:94:8f:06:
                    f0:c8:81:43:eb:c3:16:60:15:05:75:e8:c6:65:44:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:67:C4:1F:AE:1C:85:9E:FE:E2:F7:6A:66:43:CF:2E:3A:26:3C
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:c5:1e:df:26:16:8c:ad:ff:b3:08:4a:c2:c3:71:c7:ea:
         e7:8a:02:56:37:ab:b9:28:90:82:ca:65:2c:c5:38:0b:57:eb:
         ef:57:e5:a5:1e:7b:20:a8:2b:b5:7b:8c:09:a4:25:c1:67:63:
         84:c8:81:b8:f5:57:8e:4c:8d:52:8f:61:fb:84:1a:31:5e:d0:
         9f:5c:b6:a9:2e:af:de:a2:b1:40:bc:0f:f4:00:ad:62:b1:49:
         77:eb:89:d6:46:89:08:2b:2e:69:21:aa:3d:12:70:74:4d:aa:
         5a:48:2c:cd:43:8f:32:52:d4:39:d8:99:26:da:04:c8:a1:5a:
         de:c0:4a:6d:0d:7f:50:08:88:55:d2:18:6f:46:15:60:cb:d8:
         7a:8a:6b:36:87:64:20:f8:bb:f1:cf:3d:11:ba:a5:8e:d4:32:
         38:92:66:79:bf:97:4a:ca:50:7b:72:82:91:df:e3:ee:19:5a:
         09:9f:81:b4:fa:4c:86:ef:59:92:2e:50:bb:27:5e:1d:bc:79:
         b7:4c:89:03:33:56:a0:00:60:b0:b1:d4:4f:fd:2a:a4:55:0d:
         7d:33:ad:a9:80:f9:52:ba:be:97:03:50:bc:5d:7f:74:c0:67:
         f8:3d:e5:b0:ab:85:a9:4b:da:2c:29:0d:7f:e9:c3:ee:13:dc:
         92:0f:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:33 2026 by rpki-client