Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File:                     wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier:          5BXOm6Kxgw+QQpxQ8u0aECT/MfTUV/rtxztEK2HcZf4=
Subject key identifier:   EB:17:76:E2:1C:20:C3:90:35:CB:3C:D0:24:54:31:12:90:B4:5B:16
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer:       /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial:       01A1754B6965FA4EC612CBF20CDB4D59A51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number:          1520
Signing time:             Sun 25 Oct 2026 23:00:38 +0000
Manifest this update:     Sun 25 Oct 2026 23:00:38 +0000
Manifest next update:     Mon 26 Oct 2026 23:00:38 +0000
Files and hashes:         1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
                          2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
                          3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: Cmy9Ee6Jrh3R9B7QOY91VY4VV94F42TcYAM07p2zb1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:4b:69:65:fa:4e:c6:12:cb:f2:0c:db:4d:59:a5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
        Validity
            Not Before: Oct 25 23:00:38 2026 GMT
            Not After : Oct 26 23:00:38 2026 GMT
        Subject: CN=eb1776e21c20c39035cb3cd02454311290b45b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:12:32:39:b3:13:df:32:25:77:20:09:0b:
                    69:34:09:d2:11:8d:3a:2b:ca:e1:80:e3:5d:bc:67:
                    72:c4:bf:e9:43:ca:c8:a0:44:e0:f6:59:bb:cb:bb:
                    b6:5a:ae:fc:29:f6:87:ed:d1:58:d6:e4:30:3d:b3:
                    62:fa:cc:28:8c:51:4d:d1:81:07:d8:d1:bf:e4:4f:
                    0c:02:20:c8:72:20:de:97:a4:db:cb:5c:76:e6:b2:
                    21:53:48:d8:f5:5d:b4:94:d8:19:d1:df:cc:21:1e:
                    ea:3d:40:10:03:bb:39:19:0c:8e:a3:78:f7:c7:b2:
                    01:d3:51:47:e3:7b:43:ed:07:ce:ee:6f:e6:e6:3d:
                    f6:b7:13:c3:f5:3b:2f:74:7a:a7:3f:bd:f4:b3:46:
                    d6:10:82:a1:14:eb:c9:4d:97:d0:bf:70:8c:ae:c0:
                    34:1c:e0:64:0c:54:b2:c3:8e:d4:30:6e:7b:59:b1:
                    8c:47:68:bd:6d:f3:99:a1:6b:80:a7:d9:81:7a:1b:
                    0f:75:2c:a3:cc:78:0a:be:25:29:b6:94:ae:74:ae:
                    be:48:37:df:70:36:40:c0:b2:32:d6:05:68:a7:b2:
                    1a:28:06:bd:33:0d:3f:e5:c1:ad:c0:6c:a9:c8:3b:
                    b2:64:e1:92:79:e6:2f:f6:98:e0:ae:e1:13:b7:79:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:17:76:E2:1C:20:C3:90:35:CB:3C:D0:24:54:31:12:90:B4:5B:16
            X509v3 Authority Key Identifier:
                keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:28:3f:e3:b3:35:74:a6:17:38:61:fb:a4:77:3e:0b:8b:
         be:88:22:da:83:cb:4d:21:ee:2c:32:b6:f9:56:7b:8d:15:96:
         02:8f:ff:46:4c:a4:30:2c:e8:ff:b7:00:b9:13:54:34:1c:86:
         29:8b:dc:c8:a0:b1:ce:b0:31:88:6b:7d:1c:51:e5:da:4d:83:
         bf:5d:43:22:4d:d3:a0:b7:87:9c:ca:1e:f0:b9:c1:b4:6e:83:
         0f:ab:65:53:d3:83:b4:3f:cb:ac:3b:e6:3b:ba:79:b5:b3:4c:
         e3:1e:a5:7b:60:d2:c1:c7:39:1f:ea:dd:1d:ca:52:7e:40:f7:
         88:2b:f2:4f:52:33:24:c0:de:29:78:d1:b4:c2:e3:35:79:95:
         a8:79:75:c1:2b:53:6f:d7:ae:be:74:04:64:a7:38:5b:43:7c:
         e5:07:b7:08:92:be:4d:1b:20:ec:93:ac:89:88:29:51:11:26:
         75:c0:5f:1b:8a:e4:59:1e:db:d4:4a:0a:c7:d3:29:53:b7:fa:
         eb:4d:12:93:0c:56:38:52:42:3b:5d:54:b4:71:65:6b:09:84:
         7f:52:5c:fb:27:bf:63:78:6e:05:8c:4f:8f:cd:44:7c:79:a3:
         4e:75:6c:73:e2:d0:8d:a2:4a:6f:32:50:28:c6:9c:87:c8:14:
         37:67:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:44:42 2026 by rpki-client