Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File:                     wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier:          wwCYzVbn2Kh8OLW31luLFdRbPL4uCn8k5TEqKGhBLA0=
Subject key identifier:   84:6A:88:65:57:D1:17:C0:54:8E:B9:05:FF:4B:8B:D0:B1:FB:DD:80
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer:       /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial:       01A1758256E0D6B248D6844809FDAEF18B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number:          0DE4
Signing time:             Mon 26 Oct 2026 00:00:38 +0000
Manifest this update:     Mon 26 Oct 2026 00:00:38 +0000
Manifest next update:     Tue 27 Oct 2026 00:00:38 +0000
Files and hashes:         1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
                          2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: mPYNoOKQ3k0ugIC5MspCy8hEMQWJpINBxBxbBN2DA/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:82:56:e0:d6:b2:48:d6:84:48:09:fd:ae:f1:8b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
        Validity
            Not Before: Oct 26 00:00:38 2026 GMT
            Not After : Oct 27 00:00:38 2026 GMT
        Subject: CN=846a886557d117c0548eb905ff4b8bd0b1fbdd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:64:44:d2:22:99:49:96:ff:94:50:60:6e:
                    f8:91:70:63:b2:fe:b7:3d:08:5d:e3:ca:d9:38:c4:
                    43:68:15:39:59:c6:a1:f6:f5:9f:54:6c:f0:73:d2:
                    c8:3a:01:27:d5:02:e1:c8:20:3c:a0:76:03:26:27:
                    dd:23:7a:47:88:b4:80:81:9f:ac:a4:ea:2f:0f:f2:
                    37:de:cf:cd:a4:6f:0e:f4:b2:80:61:a0:7d:c7:ce:
                    ed:ec:13:1d:4e:cd:1d:c9:ee:cf:ce:d2:12:5b:24:
                    6a:c8:69:5e:6d:26:d8:c2:bd:4b:3a:ab:06:11:49:
                    9d:bc:cf:ce:e1:fc:3c:27:66:f3:89:ed:b4:58:9b:
                    dd:7c:23:4c:2e:b0:ba:20:02:a7:fd:27:a0:d4:f5:
                    13:db:0e:47:87:0e:4a:7a:41:ad:44:9b:49:79:56:
                    d0:f0:13:ed:2e:2a:39:58:a0:19:2d:31:80:28:f1:
                    be:80:af:a7:6e:66:74:8a:a2:b5:11:c3:79:4c:b5:
                    d9:81:2d:58:0f:7a:bc:1f:14:23:fe:a2:78:ec:1f:
                    38:aa:c0:ef:33:de:f1:96:8a:7d:e7:1e:d0:cc:81:
                    17:ad:12:e2:81:ae:4d:b5:f1:02:38:65:59:a4:3f:
                    02:0a:60:9f:21:c4:4c:4e:9d:ad:69:09:8b:25:44:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6A:88:65:57:D1:17:C0:54:8E:B9:05:FF:4B:8B:D0:B1:FB:DD:80
            X509v3 Authority Key Identifier:
                keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:32:66:25:d3:40:bb:0e:71:6d:40:aa:a3:4a:98:7f:fa:
         12:50:53:30:5b:e1:ba:75:1a:e1:93:4a:01:92:66:c1:85:e6:
         88:5a:6a:8b:03:b4:ba:e3:b2:bc:f6:14:c8:2d:fb:c9:cc:fc:
         c0:ee:29:95:52:49:1d:3a:95:38:61:39:11:d5:de:70:af:71:
         09:5d:ee:0c:d5:e7:79:53:69:03:f2:70:76:66:c8:76:63:84:
         ff:23:89:2f:d4:43:a7:5c:88:9e:6e:66:46:75:51:8f:76:05:
         f1:5b:a0:cc:ce:d9:08:15:b8:c8:de:9b:68:94:20:b9:cc:a9:
         fc:da:43:fc:48:83:5c:84:14:d9:7b:ed:4c:37:c8:5a:dd:cf:
         4f:9e:4c:bf:9d:06:6f:56:f7:da:72:c3:f4:d6:63:85:8e:41:
         eb:df:c6:53:bf:81:74:da:fb:0f:fe:84:fa:9d:ae:70:c2:30:
         24:35:1c:d6:b5:ae:26:16:a5:c6:26:8d:b9:f2:fb:90:67:08:
         8a:dc:72:46:38:16:5a:bf:8f:3a:6a:e6:55:90:43:4d:a0:35:
         91:14:09:0a:fe:2f:22:c4:28:b5:10:d8:08:e9:66:a7:66:7f:
         b8:56:4e:83:9d:89:f6:c1:27:3f:1d:b2:0c:a6:db:29:87:93:
         2c:47:41:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1glbg1rJI1oRICf2u8YtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3
MWRlMWMwHhcNMjYxMDI2MDAwMDM4WhcNMjYxMDI3MDAwMDM4WjAzMTEwLwYDVQQD
Eyg4NDZhODg2NTU3ZDExN2MwNTQ4ZWI5MDVmZjRiOGJkMGIxZmJkZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8BkRNIimUmW/5RQYG74kXBjsv63
PQhd48rZOMRDaBU5Wcah9vWfVGzwc9LIOgEn1QLhyCA8oHYDJifdI3pHiLSAgZ+s
pOovD/I33s/NpG8O9LKAYaB9x87t7BMdTs0dye7PztISWyRqyGlebSbYwr1LOqsG
EUmdvM/O4fw8J2bzie20WJvdfCNMLrC6IAKn/Seg1PUT2w5Hhw5KekGtRJtJeVbQ
8BPtLio5WKAZLTGAKPG+gK+nbmZ0iqK1EcN5TLXZgS1YD3q8HxQj/qJ47B84qsDv
M97xlop95x7QzIEXrRLiga5NtfECOGVZpD8CCmCfIcRMTp2taQmLJUROoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRqiGVX0RfAVI65Bf9Li9Cx+92AMB8GA1UdIwQY
MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt
MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi
LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZT8yZiXT
QLsOcW1AqqNKmH/6ElBTMFvhunUa4ZNKAZJmwYXmiFpqiwO0uuOyvPYUyC37ycz8
wO4plVJJHTqVOGE5EdXecK9xCV3uDNXneVNpA/JwdmbIdmOE/yOJL9RDp1yInm5m
RnVRj3YF8VugzM7ZCBW4yN6baJQgucyp/NpD/EiDXIQU2XvtTDfIWt3PT55Mv50G
b1b32nLD9NZjhY5B69/GU7+BdNr7D/6E+p2ucMIwJDUc1rWuJhalxiaNufL7kGcI
itxyRjgWWr+POmrmVZBDTaA1kRQJCv4vIsQotRDYCOlmp2Z/uFZOg52J9sEnPx2y
DKbbKYeTLEdBrA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:21 2026 by rpki-client