Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.mft
File:                     wfoDJbtvzvLdhGwZuvCVTbQ3TJM.mft (raw, json)
Hash identifier:          M/ROXVguzaYfWjwFvxNq3bRIe9vXwwNxknFXof+mBmk=
Subject key identifier:   30:83:72:00:A2:81:70:E3:85:34:F7:2F:C0:F8:22:BE:C5:8B:BA:C9
Authority key identifier: C1:FA:03:25:BB:6F:CE:F2:DD:84:6C:19:BA:F0:95:4D:B4:37:4C:93
Certificate issuer:       /CN=c1fa0325bb6fcef2dd846c19baf0954db4374c93
Certificate serial:       01A14D99D767C4254743775119FCEBA9FBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.mft
Manifest number:          0126
Signing time:             Sun 18 Oct 2026 06:01:30 +0000
Manifest this update:     Sun 18 Oct 2026 06:01:30 +0000
Manifest next update:     Mon 19 Oct 2026 06:01:30 +0000
Files and hashes:         1: tZD_F1-p522CY9TijejStZ2PRpM.roa (hash: r18D1jjbDYKACcGJSmptgORNsLKzRuwujhn82PU7nPY=)
                          2: wfoDJbtvzvLdhGwZuvCVTbQ3TJM.crl (hash: iJ18WgWQGqMcP4DVl0J+BJPIq8bYl2ry3z27yMyFYNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:99:d7:67:c4:25:47:43:77:51:19:fc:eb:a9:fb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1fa0325bb6fcef2dd846c19baf0954db4374c93
        Validity
            Not Before: Oct 18 06:01:30 2026 GMT
            Not After : Oct 19 06:01:30 2026 GMT
        Subject: CN=30837200a28170e38534f72fc0f822bec58bbac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:88:d3:c3:77:23:94:db:5b:a4:89:df:80:
                    b9:15:0c:e1:4e:28:6e:27:55:42:e8:ae:ea:38:0a:
                    05:53:76:d2:72:69:fb:36:80:49:7e:54:88:ca:79:
                    2a:64:25:94:a7:ae:06:3b:75:73:3d:a8:38:bc:ac:
                    1f:97:a7:fc:76:c6:8e:35:6f:59:13:d3:d1:55:0a:
                    29:7b:b5:83:61:87:cb:55:f0:8a:6f:a2:dc:ee:bb:
                    54:11:0c:e6:70:f8:a7:1e:ee:c7:5b:5c:98:35:f2:
                    c1:9a:df:59:b7:35:b8:3a:7b:a7:90:b1:9f:14:62:
                    67:6a:12:23:2f:56:a4:08:8a:da:94:14:45:b3:ea:
                    a3:12:26:58:2f:c4:94:64:36:0c:cd:40:d0:96:49:
                    ab:b0:3a:ec:6e:33:0e:67:b9:7c:a2:bd:9e:2d:22:
                    17:94:93:2a:ab:f6:ed:f0:5a:bb:3c:1b:ad:7d:46:
                    26:2b:9c:75:59:86:bb:e8:1d:e2:2a:cb:83:d3:f1:
                    57:d7:45:90:19:3b:74:0d:51:4c:62:d6:a2:8d:00:
                    a2:e5:a1:21:da:e4:58:90:58:ef:91:08:0e:5d:8d:
                    be:81:93:5e:e3:47:77:6f:f8:db:cc:7c:ae:f8:fe:
                    b2:6e:67:e3:10:22:2a:b8:1c:10:72:72:09:f3:35:
                    4f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:72:00:A2:81:70:E3:85:34:F7:2F:C0:F8:22:BE:C5:8B:BA:C9
            X509v3 Authority Key Identifier:
                keyid:C1:FA:03:25:BB:6F:CE:F2:DD:84:6C:19:BA:F0:95:4D:B4:37:4C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:e4:c0:84:89:df:84:14:5a:44:80:55:dd:fe:44:34:21:
         b3:8e:54:bc:80:5b:0c:41:2a:55:32:98:7c:e7:b8:01:92:a3:
         55:cd:32:c9:3e:15:b0:27:78:fc:0b:88:c2:60:ae:e2:b8:22:
         58:b3:a4:44:23:68:91:d6:7d:5c:2a:3c:2e:72:7f:0e:c2:48:
         e2:28:18:1a:31:85:6a:bc:34:57:4f:67:1c:a4:ad:44:71:ea:
         a9:c0:66:7a:5e:fe:96:97:69:93:3f:7f:b7:a7:a5:df:33:01:
         51:a7:87:4a:d6:74:8a:39:a9:3d:7f:a4:a3:7a:42:18:96:49:
         02:3c:49:73:e2:2b:8b:31:13:94:39:82:f8:ad:e6:a0:46:ff:
         5b:f1:96:ed:e2:6a:f5:c1:46:9e:c2:8c:8f:92:38:eb:9d:8f:
         a6:82:a0:4f:61:03:ae:d5:1c:5a:07:8d:09:e0:79:29:8e:b6:
         42:9b:8b:59:d7:4b:40:22:13:4f:e1:63:f8:eb:57:a2:c0:08:
         d5:29:db:cf:8b:e2:b8:a3:61:58:83:23:60:e6:6a:ef:71:45:
         6d:f0:7a:39:20:42:7d:26:82:2e:6c:9e:7c:47:a0:07:1d:38:
         4a:8c:38:4d:b8:42:2f:43:09:05:9e:45:b0:99:1a:44:2a:ee:
         78:56:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:20:22 2026 by rpki-client