Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
File:                     wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json)
Hash identifier:          bbfcaJumwcaH1umceT/awf78OXq72cyfKqMGWx0+7nA=
Subject key identifier:   31:92:51:C9:11:45:2E:FF:21:4E:DA:67:A9:B7:EF:99:70:CC:8A:91
Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
Certificate issuer:       /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Certificate serial:       01A17D73E65FFD5046FDF27A68F511FD0860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
Manifest number:          02E8
Signing time:             Tue 27 Oct 2026 13:01:49 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:49 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:49 +0000
Files and hashes:         1: b68wUGWBseMkcjS44Gr7jhy5Jqo.asa (hash: +m+tsXbOZCdRGi1rCes1IS9Kt7hkM0KJcsusakEBgHY=)
                          2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: Ob7eHuJngjOQhpuonFKe1d9PxGhlSgcSLRFN6jYOSQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:e6:5f:fd:50:46:fd:f2:7a:68:f5:11:fd:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
        Validity
            Not Before: Oct 27 13:01:49 2026 GMT
            Not After : Oct 28 13:01:49 2026 GMT
        Subject: CN=319251c911452eff214eda67a9b7ef9970cc8a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:2d:8e:f3:b5:c9:f0:28:51:26:46:2c:7b:
                    91:5c:0e:4f:f9:07:bc:03:75:20:4c:05:4d:14:ff:
                    02:73:7d:89:00:30:40:79:03:57:89:b5:d1:c2:ec:
                    74:63:25:ec:9e:a8:a6:2b:f7:9d:4d:3d:bc:20:5c:
                    03:19:9a:a2:6b:02:b2:47:d5:e6:a5:91:d2:b4:7c:
                    df:ab:74:42:b1:a1:ed:37:ef:ca:e2:f8:84:ae:53:
                    40:46:1a:84:63:d0:e7:90:79:09:a7:73:e2:37:ce:
                    00:14:1d:b7:6f:43:0a:b1:94:3a:54:2b:81:14:8f:
                    3e:29:a6:6c:b8:1c:21:56:c7:2b:d9:f7:2c:93:56:
                    6f:d4:74:f7:92:48:06:bb:a6:c7:d6:56:3d:01:b4:
                    35:05:d3:a5:54:04:41:ce:91:e7:4c:44:84:6b:1c:
                    39:ac:10:63:86:7d:bd:e5:2b:39:c1:df:48:5f:ff:
                    34:87:6f:3e:16:a1:3c:d2:b2:14:ae:dc:0a:b1:e1:
                    26:a6:d6:db:b0:f8:00:e0:42:3c:2c:4d:aa:e7:3f:
                    c5:ce:d8:16:b7:e2:df:a1:77:e4:d3:86:7e:6b:e4:
                    58:7a:a5:0e:1d:aa:5a:36:ae:d2:8e:b0:e7:36:c2:
                    53:6d:b7:f3:11:91:52:fe:66:dd:4b:b8:3a:d6:4e:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:92:51:C9:11:45:2E:FF:21:4E:DA:67:A9:B7:EF:99:70:CC:8A:91
            X509v3 Authority Key Identifier:
                keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:46:06:df:98:81:a6:f3:25:50:6b:ab:d4:b6:bb:b0:35:71:
         36:99:a5:a9:3d:10:16:21:3e:48:98:de:86:4c:6b:a4:be:10:
         3c:8e:ab:d4:d1:6d:dc:fc:18:18:a8:f5:13:08:ce:8f:06:35:
         7b:6a:f1:39:66:b2:81:fa:92:d8:d9:10:ff:50:99:b9:e2:e8:
         b5:ff:88:b0:28:5b:c0:b4:19:5c:54:72:0a:5c:8e:28:17:4f:
         9d:ff:3d:75:3c:cc:5b:6c:8f:ac:27:93:cf:dc:b4:86:26:10:
         6f:74:41:d9:d0:0f:2f:2e:25:c8:61:b5:e1:12:0e:a2:95:53:
         f1:05:91:86:2e:09:4e:bd:ad:ae:34:9d:b7:01:a3:18:1e:ec:
         7b:9c:f9:19:d6:49:28:4a:c9:fc:50:96:3f:a8:76:fb:bd:5c:
         ce:0d:fc:84:c5:97:05:ce:a2:92:3e:17:4e:7f:4c:a9:97:aa:
         b8:ab:dd:79:f8:9b:bf:ee:ac:45:58:86:5b:3f:6c:b0:80:37:
         7b:0d:da:51:b8:38:2c:0a:c2:c7:f9:a0:ad:34:60:62:09:96:
         2f:a5:90:f5:c6:c4:a1:3b:57:64:62:02:45:6c:62:2a:e2:6f:
         ec:13:67:ea:3c:96:86:5d:9d:3e:ef:85:05:fc:6d:94:20:e9:
         8b:0f:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:22:09 2026 by rpki-client