Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          8TPrInaZTEg/8s/QD8MAT8FX1kLZ+r6Z7ZnXipk4BdU=
Subject key identifier:   66:32:B0:45:B4:5B:6E:78:80:96:47:98:0D:1B:70:CD:D2:9E:78:B8
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       01A08AC3C9802D20D0F3209B27FC513F6A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1A5D
Signing time:             Thu 10 Sep 2026 10:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:21 +0000
Files and hashes:         1: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
                          2: MV0PEtEAVz8oWit9PFrLe1hLSck.roa (hash: Di1VZRsfDQtFnrr5bv1XXI0tFLJXBe+C/kKalWG3jf8=)
                          3: TUjQx-SCeFceGAtPQxFXJNzqxpo.roa (hash: gK+ZRgHX462dQbtKVmO0TKz0Zq0HpGa0egijOyBQn+c=)
                          4: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
                          5: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
                          6: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (hash: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=)
                          7: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
                          8: fN8blsar4uk3CFDp_6xMSmC4GZ4.roa (hash: Se9bMqfGOKgf+Jc52q2agg90/5A68AwV65YDYKowZso=)
                          9: g2E1f-BxBAur9lYreK_DDpQmlrA.roa (hash: B5+1L111o4GgfrlNcBbCeeD8BCchToJhANvD28KbrqA=)
                          10: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
                          11: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: q0ZEgdd4mTFOVv5xJOraYSGOyyvV1c6dXYfEWf4HwJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:c9:80:2d:20:d0:f3:20:9b:27:fc:51:3f:6a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Sep 10 10:01:21 2026 GMT
            Not After : Sep 11 10:01:21 2026 GMT
        Subject: CN=6632b045b45b6e78809647980d1b70cdd29e78b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:c8:fd:f6:b0:78:ce:a3:cd:5c:a3:ec:38:
                    9f:85:99:64:c7:27:e8:7b:63:45:61:4a:46:bc:b3:
                    7d:05:c6:5d:23:0b:a2:af:56:27:86:2b:d5:85:e3:
                    cf:bf:ed:6c:28:fb:9b:8d:d6:1f:b6:af:c0:91:28:
                    86:6a:c4:3d:ad:9e:a4:1a:e0:2a:d2:6c:9a:1d:e4:
                    c5:a0:56:4c:06:6b:0a:ef:96:a5:71:5f:29:f6:5b:
                    40:aa:f2:fc:a3:8c:22:96:60:9b:09:e2:71:83:d7:
                    98:1e:72:82:e1:b5:e1:90:83:6d:23:74:e1:ff:77:
                    1d:05:10:a2:3c:6f:79:be:d3:b4:dc:4b:a3:da:27:
                    6f:f6:87:ef:ab:53:61:a3:b1:b9:33:88:99:7e:1a:
                    dc:72:e0:f7:a7:29:2c:4e:11:cb:d0:1d:3b:6c:92:
                    bf:7b:e2:57:13:5e:35:bf:21:a6:04:03:f5:a6:e8:
                    93:87:8d:69:ef:af:1b:5e:e2:38:e8:5a:41:5c:40:
                    55:3f:80:36:eb:cd:f3:53:47:3f:d1:3a:87:96:b6:
                    e3:3d:00:a9:4d:90:7e:99:2f:63:e5:40:ab:ef:b9:
                    d5:fb:db:b1:3a:41:9c:ea:14:f5:c3:67:82:b0:b5:
                    a4:30:e8:ff:ef:02:72:43:a5:5d:9e:63:23:75:7e:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:32:B0:45:B4:5B:6E:78:80:96:47:98:0D:1B:70:CD:D2:9E:78:B8
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:33:3c:05:64:c6:cb:b7:41:9d:8e:23:eb:2a:56:0a:f1:
         3e:8e:06:f0:35:0a:1e:3d:34:21:04:ad:8e:68:85:ab:1a:00:
         49:e3:c7:e5:a1:4d:74:25:c4:07:a1:7e:f2:8f:49:b3:75:83:
         e3:1d:c1:57:33:4e:3e:26:66:30:42:80:46:93:09:16:f0:f5:
         10:e3:49:ee:31:9d:78:85:95:4c:d7:6e:25:73:56:d6:54:0e:
         60:e3:5e:ff:00:77:6b:e1:60:8c:fc:7f:b6:82:2f:a6:6e:d8:
         aa:9d:50:13:54:5a:92:66:bd:8b:23:d4:8c:c1:fd:41:a7:10:
         86:35:34:a8:00:05:f2:3f:03:72:1d:e4:58:c7:dc:9e:db:1c:
         c0:8b:7b:c5:59:3c:f9:1b:e2:5f:bf:94:71:e7:39:60:61:e7:
         e8:3c:39:d7:9b:59:1a:71:6e:21:6e:a6:40:65:52:01:59:92:
         19:b5:87:72:29:15:93:b3:88:1d:56:d6:70:03:f8:14:d6:3c:
         80:4c:4e:2d:53:73:4e:b9:5e:82:3e:3c:40:fe:11:ed:2f:47:
         7c:96:f4:f7:ac:6e:f9:61:91:91:22:de:c8:16:7e:38:3b:dc:
         c6:4b:f1:c9:f6:18:45:87:52:92:19:41:ec:65:24:09:f4:1f:
         6b:ac:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:37:34 2026 by rpki-client