Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          8+4v0y8MH+r7iqu4GZnkh9ae28QxGPX4Tr5H614Tyxs=
Subject key identifier:   84:EB:6B:C3:43:9D:08:0D:39:40:99:0F:6E:1C:12:21:AA:97:BB:C4
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       01A180065460E415DE241EC0150AD008A8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1ADC
Signing time:             Wed 28 Oct 2026 01:01:00 +0000
Manifest this update:     Wed 28 Oct 2026 01:01:00 +0000
Manifest next update:     Thu 29 Oct 2026 01:01:00 +0000
Files and hashes:         1: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
                          2: MV0PEtEAVz8oWit9PFrLe1hLSck.roa (hash: Di1VZRsfDQtFnrr5bv1XXI0tFLJXBe+C/kKalWG3jf8=)
                          3: TUjQx-SCeFceGAtPQxFXJNzqxpo.roa (hash: gK+ZRgHX462dQbtKVmO0TKz0Zq0HpGa0egijOyBQn+c=)
                          4: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
                          5: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
                          6: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (hash: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=)
                          7: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
                          8: fN8blsar4uk3CFDp_6xMSmC4GZ4.roa (hash: Se9bMqfGOKgf+Jc52q2agg90/5A68AwV65YDYKowZso=)
                          9: g2E1f-BxBAur9lYreK_DDpQmlrA.roa (hash: B5+1L111o4GgfrlNcBbCeeD8BCchToJhANvD28KbrqA=)
                          10: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
                          11: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: X6/cyd7mEbJp4kzGy+rnkO4zc41cFlcdv5ydIFGQqX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:54:60:e4:15:de:24:1e:c0:15:0a:d0:08:a8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Oct 28 01:01:00 2026 GMT
            Not After : Oct 29 01:01:00 2026 GMT
        Subject: CN=84eb6bc3439d080d3940990f6e1c1221aa97bbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:83:d6:e5:b0:21:12:1e:3d:7b:36:2f:6b:
                    83:66:5d:7d:e1:f6:8d:2b:94:bd:f2:d7:c2:cf:28:
                    a7:ef:23:e0:5b:32:91:9f:9f:54:d6:d9:9c:24:e5:
                    87:be:48:1b:24:25:16:61:c7:3f:80:f1:50:e6:b8:
                    3e:65:2e:22:b8:33:e6:48:a3:6f:8d:41:c4:ca:36:
                    db:68:1e:88:d4:ea:77:8c:67:97:52:9d:3f:48:bd:
                    20:cc:74:c2:d6:64:1f:01:a9:28:c9:41:fb:80:19:
                    11:db:44:72:16:9c:71:99:7d:0e:d5:34:8f:a4:06:
                    5b:e2:b9:47:ec:a6:af:1d:68:fc:17:1e:37:40:79:
                    72:f7:d5:a5:dc:ec:27:5e:e7:23:6e:e7:97:68:4f:
                    1e:2d:06:6b:ca:a9:86:53:6c:6b:68:d7:bf:d2:bb:
                    52:14:7d:a4:4a:9d:40:aa:03:cc:60:0e:fb:8e:88:
                    5f:3b:83:a0:67:ef:a9:4c:20:69:a7:90:04:04:38:
                    9e:b0:06:38:47:0e:9d:61:bb:ae:3c:ce:15:ff:8f:
                    88:d4:c9:0b:af:f0:c0:54:13:48:ec:de:3c:2d:64:
                    2f:97:76:24:67:69:23:d3:6f:6c:ca:94:20:ee:5f:
                    3a:2b:1c:45:69:2d:07:dc:85:a5:04:f0:b3:16:39:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:6B:C3:43:9D:08:0D:39:40:99:0F:6E:1C:12:21:AA:97:BB:C4
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:28:48:58:fe:fe:3b:51:80:23:79:0f:03:66:8e:ba:1e:
         4d:62:f5:ec:49:07:e4:2c:a6:db:0a:c7:f2:ef:22:9c:87:1e:
         67:31:9d:10:1d:7a:47:5f:cb:36:c8:9e:fe:19:5a:7e:57:73:
         cf:05:63:b5:8f:8d:b9:59:2c:81:e6:9f:3a:4b:43:89:72:b1:
         e2:ec:3e:8f:d0:0e:a3:9d:bf:ae:3f:53:65:12:69:e9:72:09:
         fc:27:28:61:71:f2:55:3a:b6:83:32:2a:7e:30:55:b1:62:72:
         f5:e8:e4:6f:e2:0c:03:3d:76:69:88:51:b8:99:2f:9a:08:4e:
         1e:14:cb:79:d7:73:78:39:7d:e9:58:f9:ed:c6:25:c9:ba:8d:
         5b:ab:b7:e2:64:dd:39:af:26:43:2d:ad:0a:27:b4:88:44:15:
         02:dd:53:39:c6:3a:55:fb:80:a5:cb:3d:c7:df:39:ff:9b:07:
         91:30:bb:20:6d:cd:30:cb:22:34:41:e8:01:8a:50:4e:37:15:
         2a:14:c2:57:55:0b:b2:45:91:bf:81:fb:ff:68:00:d9:d9:dd:
         6a:c6:96:9a:3c:88:b8:5e:4b:c6:92:27:91:be:14:89:08:5f:
         08:c8:e0:e6:27:fd:3d:c8:54:90:f8:fe:59:4b:18:40:94:b5:
         cd:09:a5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGABlRg5BXeJB7AFQrQCKilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjYxMDI4MDEwMTAwWhcNMjYxMDI5MDEwMTAwWjAzMTEwLwYDVQQD
Eyg4NGViNmJjMzQzOWQwODBkMzk0MDk5MGY2ZTFjMTIyMWFhOTdiYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFyD1uWwIRIePXs2L2uDZl194faN
K5S98tfCzyin7yPgWzKRn59U1tmcJOWHvkgbJCUWYcc/gPFQ5rg+ZS4iuDPmSKNv
jUHEyjbbaB6I1Op3jGeXUp0/SL0gzHTC1mQfAakoyUH7gBkR20RyFpxxmX0O1TSP
pAZb4rlH7KavHWj8Fx43QHly99Wl3OwnXucjbueXaE8eLQZryqmGU2xraNe/0rtS
FH2kSp1AqgPMYA77johfO4OgZ++pTCBpp5AEBDiesAY4Rw6dYbuuPM4V/4+I1MkL
r/DAVBNI7N48LWQvl3YkZ2kj029sypQg7l86KxxFaS0H3IWlBPCzFjnckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITra8NDnQgNOUCZD24cEiGql7vEMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEsoSFj+
/jtRgCN5DwNmjroeTWL17EkH5Cym2wrH8u8inIceZzGdEB16R1/LNsie/hlafldz
zwVjtY+NuVksgeafOktDiXKx4uw+j9AOo52/rj9TZRJp6XIJ/CcoYXHyVTq2gzIq
fjBVsWJy9ejkb+IMAz12aYhRuJkvmghOHhTLeddzeDl96Vj57cYlybqNW6u34mTd
Oa8mQy2tCie0iEQVAt1TOcY6VfuApcs9x985/5sHkTC7IG3NMMsiNEHoAYpQTjcV
KhTCV1ULskWRv4H7/2gA2dndasaWmjyIuF5LxpInkb4UiQhfCMjg5if9PchUkPj+
WUsYQJS1zQmlOg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:47:45 2026 by rpki-client