Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File:                     wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier:          MU4chw1PTxJQwDXtTnSZy0Mxf+GSEsXQ43jj2j79jOw=
Subject key identifier:   93:F2:53:E3:F6:3F:FB:B9:C4:75:D1:B1:83:D4:9D:3D:2F:6F:5A:8F
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer:       /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial:       01A06EDE60DA36DF2B1EA7365550E64FF7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number:          0D5C
Signing time:             Sat 05 Sep 2026 00:01:02 +0000
Manifest this update:     Sat 05 Sep 2026 00:01:02 +0000
Manifest next update:     Sun 06 Sep 2026 00:01:02 +0000
Files and hashes:         1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
                          2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: UAfbIDFn2ZOZ083/IusuIe2+E+UQThKpimQo2Ub97DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:60:da:36:df:2b:1e:a7:36:55:50:e6:4f:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
        Validity
            Not Before: Sep  5 00:01:02 2026 GMT
            Not After : Sep  6 00:01:02 2026 GMT
        Subject: CN=93f253e3f63ffbb9c475d1b183d49d3d2f6f5a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:2a:f7:eb:d8:d0:e9:c4:96:f8:9b:03:97:
                    f9:e4:48:92:57:f8:8d:b4:14:a0:e2:2c:fb:71:0d:
                    21:d1:50:8f:fb:ea:89:2b:b7:3d:4c:59:da:a8:4f:
                    17:11:f7:1d:e5:1c:45:2a:64:4f:d3:5a:2c:b9:be:
                    ef:89:89:4a:88:72:14:a2:9c:a0:50:10:b3:de:30:
                    19:7a:da:54:47:92:3e:50:8e:e9:83:8a:d8:72:d6:
                    e8:20:7b:41:39:ae:5b:5a:31:c2:6b:0a:6e:d0:b8:
                    fd:d1:24:d7:32:79:4b:0f:8a:58:17:76:07:51:d6:
                    da:26:4f:56:4f:69:1c:c7:bf:3f:a6:80:34:33:da:
                    6e:b6:43:0b:a4:eb:e3:ae:8c:f5:2b:4b:64:94:77:
                    80:53:6e:66:42:fd:7b:a6:50:cc:eb:96:19:d4:4c:
                    42:af:bb:f3:9b:94:95:45:75:5e:55:24:26:15:8f:
                    c3:1d:c6:77:7a:f1:d4:04:a7:36:1d:98:59:4d:c1:
                    1e:fe:c3:d5:17:3b:d1:53:5e:e3:b4:5d:95:03:ca:
                    d4:8d:d9:4c:49:97:4a:67:7a:93:ee:6b:bd:d5:9d:
                    37:72:a7:b8:c0:fc:4a:21:14:ae:19:e6:d3:1b:3b:
                    78:7b:6d:5f:47:f3:37:ae:b4:c0:ba:fa:d7:5a:14:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F2:53:E3:F6:3F:FB:B9:C4:75:D1:B1:83:D4:9D:3D:2F:6F:5A:8F
            X509v3 Authority Key Identifier:
                keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:32:10:f2:ad:b9:7d:e3:6e:71:4e:00:5d:15:94:62:97:6a:
         f9:59:af:bc:bf:e2:bc:16:4f:82:4b:28:fb:e4:2b:ba:9b:a4:
         b7:07:83:aa:26:89:a8:88:26:b8:9c:fc:5f:3a:7e:eb:01:1d:
         94:fe:55:98:cb:57:94:f2:ed:3f:27:82:93:25:ae:29:fe:e9:
         95:c5:1d:cb:2c:3e:15:bf:75:39:41:ef:06:3f:49:2c:69:d2:
         45:53:9f:2b:ec:c8:a2:65:c9:d9:ac:04:b4:da:04:45:ad:c4:
         2a:56:52:4f:a6:d8:c0:25:bb:58:fc:6a:ba:03:36:df:87:e4:
         1a:1b:1d:49:dc:95:b6:99:bc:43:01:cf:e7:f6:8c:14:36:a9:
         6c:da:3b:17:76:74:b7:58:59:fb:f7:c5:a0:ff:2c:4f:46:56:
         56:44:ca:29:9a:e6:c3:b8:02:91:c5:78:6d:63:76:fe:cf:88:
         24:e7:df:a2:4c:ea:c3:27:38:13:05:57:87:a4:c2:50:c6:53:
         cb:9a:d3:0b:c9:a9:1f:5d:cc:1c:8d:a9:48:07:a2:3d:c2:e4:
         f3:96:9f:bc:de:cb:dd:97:de:f8:09:04:44:47:a2:bf:7a:b9:
         da:8c:9f:cc:cb:fa:dc:4e:fa:97:5d:4c:07:bf:6e:e5:b4:e0:
         a9:fa:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:57 2026 by rpki-client