Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File:                     wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier:          InErhl5U7cpLmVTu3OuWM6lo3yVbet9tPqSXdAxmozU=
Subject key identifier:   DC:F4:BF:66:D2:67:4B:A5:93:13:04:B9:53:82:0B:89:D6:C5:36:42
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer:       /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial:       01A17B4D3DA485E96A0CA0F3F3101A384FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number:          07A8
Signing time:             Tue 27 Oct 2026 03:00:21 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:21 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:21 +0000
Files and hashes:         1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
                          2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: yXPpGQeGc/X57/4/0jvwy6YTGEdZwUkvtTwthfAt38s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:3d:a4:85:e9:6a:0c:a0:f3:f3:10:1a:38:4f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
        Validity
            Not Before: Oct 27 03:00:21 2026 GMT
            Not After : Oct 28 03:00:21 2026 GMT
        Subject: CN=dcf4bf66d2674ba5931304b953820b89d6c53642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:ee:c1:3e:70:ee:4d:55:1b:1d:f4:73:e4:
                    f4:b4:94:94:85:2b:a4:09:fe:be:b5:d2:0c:58:6f:
                    25:ea:c3:88:c5:c8:3d:a4:86:c0:32:42:14:16:2c:
                    da:d7:b7:c1:2e:ea:69:bf:4f:f5:5d:1c:2a:3b:28:
                    18:bb:90:d3:84:d4:60:16:60:b3:5e:ea:c9:83:aa:
                    63:39:5b:28:27:df:a2:3e:47:19:96:56:3b:3e:ed:
                    13:ac:d2:17:5f:db:ca:80:ff:66:7e:04:8a:55:18:
                    f0:af:f1:cf:78:4d:81:52:4a:58:ce:6f:02:71:23:
                    68:9c:9c:1a:12:31:78:4a:df:7c:df:75:17:02:79:
                    ce:7b:75:e5:ce:31:1a:fb:d1:4a:13:76:10:ab:6c:
                    96:8b:f0:b2:0e:48:f6:4d:17:15:3b:76:e0:a9:d7:
                    66:5f:ae:0b:3b:d9:bb:5c:41:ec:22:b2:2e:83:04:
                    17:1d:2c:be:b9:fc:ff:36:4d:ff:cf:bb:43:bb:32:
                    54:6d:6e:e2:6b:c4:bf:51:3d:7a:f4:61:ae:a4:35:
                    ae:d7:a3:38:6a:44:16:9a:13:9e:33:77:9d:d0:a7:
                    89:be:13:5b:d6:8f:e7:66:f5:4d:f9:53:e0:2a:78:
                    d2:98:ad:a5:ef:7d:71:57:81:4b:81:79:15:b1:2f:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:BF:66:D2:67:4B:A5:93:13:04:B9:53:82:0B:89:D6:C5:36:42
            X509v3 Authority Key Identifier:
                keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:38:37:d3:58:f9:28:18:99:e2:78:6b:2f:d0:99:ea:72:14:
         7e:fc:01:26:5c:cb:3e:72:cf:ec:e2:1b:e5:b0:fb:02:c1:67:
         56:70:fe:25:ac:31:34:ad:c1:bd:d5:f2:ef:cb:a8:0d:9f:b5:
         d0:a6:8d:39:71:1a:6d:3b:a0:f1:56:66:89:41:4d:59:c1:8f:
         11:a6:ad:ec:8d:a7:7f:bc:81:e9:c5:c6:9e:0e:18:e8:66:60:
         f1:7e:0b:7f:c7:df:0f:66:81:64:d6:b1:ca:e5:20:1b:a5:19:
         c5:cc:f9:54:38:32:55:29:f3:b5:e8:83:10:24:df:bb:19:1e:
         54:3e:dc:78:17:48:02:f7:11:65:c2:1b:fe:4f:1c:f1:34:1c:
         ba:95:61:ce:e4:d4:8d:6f:73:16:13:45:ee:28:82:07:6e:cf:
         89:66:e3:0a:84:22:be:5e:70:fc:e4:1b:77:5c:6e:1b:8a:ae:
         0e:ef:bf:e1:8b:cf:25:08:71:e6:9d:50:64:c1:27:2f:88:6c:
         eb:c5:46:ff:20:b7:f5:bf:cd:79:88:35:0a:93:65:80:f6:19:
         04:e1:fe:56:9e:fd:fa:25:ef:23:8f:7f:8e:d1:f6:62:4c:c8:
         1c:15:b4:6e:51:44:67:63:4c:82:d7:a8:e5:1d:af:20:4f:f9:
         c8:dd:e3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TT2khelqDKDz8xAaOE/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2
ZGQ4MWYwHhcNMjYxMDI3MDMwMDIxWhcNMjYxMDI4MDMwMDIxWjAzMTEwLwYDVQQD
EyhkY2Y0YmY2NmQyNjc0YmE1OTMxMzA0Yjk1MzgyMGI4OWQ2YzUzNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1fuwT5w7k1VGx30c+T0tJSUhSuk
Cf6+tdIMWG8l6sOIxcg9pIbAMkIUFiza17fBLuppv0/1XRwqOygYu5DThNRgFmCz
XurJg6pjOVsoJ9+iPkcZllY7Pu0TrNIXX9vKgP9mfgSKVRjwr/HPeE2BUkpYzm8C
cSNonJwaEjF4St9833UXAnnOe3XlzjEa+9FKE3YQq2yWi/CyDkj2TRcVO3bgqddm
X64LO9m7XEHsIrIugwQXHSy+ufz/Nk3/z7tDuzJUbW7ia8S/UT169GGupDWu16M4
akQWmhOeM3ed0KeJvhNb1o/nZvVN+VPgKnjSmK2l731xV4FLgXkVsS/HQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz0v2bSZ0ulkxMEuVOCC4nWxTZCMB8GA1UdIwQY
MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt
MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh
LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTg301j5
KBiZ4nhrL9CZ6nIUfvwBJlzLPnLP7OIb5bD7AsFnVnD+JawxNK3BvdXy78uoDZ+1
0KaNOXEabTug8VZmiUFNWcGPEaat7I2nf7yB6cXGng4Y6GZg8X4Lf8ffD2aBZNax
yuUgG6UZxcz5VDgyVSnzteiDECTfuxkeVD7ceBdIAvcRZcIb/k8c8TQcupVhzuTU
jW9zFhNF7iiCB27PiWbjCoQivl5w/OQbd1xuG4quDu+/4YvPJQhx5p1QZMEnL4hs
68VG/yC39b/NeYg1CpNlgPYZBOH+Vp79+iXvI49/jtH2YkzIHBW0blFEZ2NMgteo
5R2vIE/5yN3jFw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:26 2026 by rpki-client