Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          RGghk3nywwarjRXtGtiYiRqZq5w2LxGF55XAm6ID9IM=
Subject key identifier:   45:86:C8:42:38:F5:EE:65:25:6B:A6:CD:0E:D0:81:BD:CE:CC:FB:7C
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       01A160E8FC7BB92FBB03DF5105AC424F8DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          0779
Signing time:             Thu 22 Oct 2026 00:00:44 +0000
Manifest this update:     Thu 22 Oct 2026 00:00:44 +0000
Manifest next update:     Fri 23 Oct 2026 00:00:44 +0000
Files and hashes:         1: B-ORof5U5KffpAVQvuFpkPz0N4c.roa (hash: 7Bdce+7dVfpsrP9CGNTqOXrt+QvlnjsVsauoFzbSuFo=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: FXIFZXMj3i3ACrIefAuYVLJhXYI6WJKYrpYxTZgxdoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:e8:fc:7b:b9:2f:bb:03:df:51:05:ac:42:4f:8d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Oct 22 00:00:44 2026 GMT
            Not After : Oct 23 00:00:44 2026 GMT
        Subject: CN=4586c84238f5ee65256ba6cd0ed081bdceccfb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:37:52:54:49:b3:61:b2:16:ae:0c:cd:1a:
                    8e:db:2b:33:ff:18:c5:a3:c4:86:7d:a8:45:99:b8:
                    99:80:09:fb:b3:be:92:d3:cd:ac:92:04:13:20:5f:
                    8a:95:70:30:4b:a9:44:72:20:58:b2:5e:39:ed:9e:
                    5f:75:55:b6:c4:23:41:f7:be:99:4d:00:43:8a:58:
                    c0:ef:90:ed:ce:24:c1:30:c0:cb:fd:8a:27:83:ca:
                    98:5f:e9:ef:79:4b:d3:0f:0c:c0:06:db:7d:7c:4b:
                    85:ee:b5:df:8a:a5:c5:e8:e5:97:50:d8:84:89:82:
                    34:6f:62:03:ac:6a:16:c0:c6:5e:9e:d5:1e:45:24:
                    23:d3:81:6c:2c:5c:90:31:10:7a:0b:3c:51:78:8b:
                    34:0e:ae:30:67:fb:2b:d2:67:39:4f:a0:2a:5c:ce:
                    ae:57:23:67:bb:7f:97:2d:76:bc:2b:c0:98:64:22:
                    40:a5:4f:d6:ba:69:39:06:de:84:93:66:65:a3:e8:
                    32:9e:8c:9d:0c:f6:e8:8a:5e:15:83:7b:83:00:0b:
                    e6:cd:67:77:91:23:ff:76:ae:86:82:11:40:17:be:
                    d6:de:27:1c:e6:6b:fa:d4:16:71:28:38:47:2e:91:
                    ec:47:72:da:46:b9:d8:75:42:10:39:e6:9e:37:a2:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:C8:42:38:F5:EE:65:25:6B:A6:CD:0E:D0:81:BD:CE:CC:FB:7C
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:10:ce:bd:75:0d:6c:7f:c4:75:6c:0a:18:d0:b1:50:c8:
         96:16:b2:11:ec:15:2f:75:52:16:4f:af:99:db:f1:ad:32:72:
         1c:cd:00:1b:4a:36:2c:95:aa:0d:9e:97:98:2b:c9:c6:96:a0:
         f0:2c:18:aa:7e:63:93:05:e5:b7:d8:1c:7a:7b:d8:2e:05:17:
         e8:10:86:15:aa:68:78:8c:a5:11:9c:97:20:0a:a4:b6:c5:17:
         17:97:81:39:2c:a8:87:0f:a6:4a:b7:2a:67:74:63:15:8b:a2:
         61:9d:e0:6d:4a:f5:9b:75:80:9a:0c:68:cd:6a:fe:ff:02:78:
         c7:da:fe:6c:ab:68:95:f5:a3:e5:0d:3f:79:ac:a0:4c:2b:6b:
         ed:d5:e4:bc:06:f9:97:a7:d8:27:e7:96:b2:39:46:59:cb:e5:
         1c:c2:8f:a9:e6:17:b6:cb:4f:2e:83:cc:94:7a:7d:0e:4d:7d:
         48:57:c5:e6:4e:88:ef:e2:0b:59:e4:61:98:e2:58:2d:c7:af:
         9e:28:1f:bb:df:f6:66:f8:38:8b:86:97:66:e4:e4:ad:d4:36:
         31:fc:b9:09:f2:41:c0:d4:c6:60:36:4f:ec:29:03:fe:c9:ea:
         ce:e3:1d:ed:4a:60:52:b3:71:6a:9f:66:39:8e:be:f0:b8:03:
         0e:87:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:51:22 2026 by rpki-client