Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File:                     wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier:          Ldyjnp1uL1UgWswGeBQXzwBvMxp9DXWeujExe+DfxNU=
Subject key identifier:   00:2B:0B:A0:00:5F:E5:32:DB:49:B4:72:D4:8B:97:51:96:09:63:D9
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer:       /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial:       01A16BDAC6FDEDEED08FB2D518414BE47899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number:          0DD8
Signing time:             Sat 24 Oct 2026 03:01:02 +0000
Manifest this update:     Sat 24 Oct 2026 03:01:02 +0000
Manifest next update:     Sun 25 Oct 2026 03:01:02 +0000
Files and hashes:         1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=)
                          2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: d/RZg5rp8ZaPV+7lisfpq7txETW9QwDZZ0k81nHLDfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6b:da:c6:fd:ed:ee:d0:8f:b2:d5:18:41:4b:e4:78:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
        Validity
            Not Before: Oct 24 03:01:02 2026 GMT
            Not After : Oct 25 03:01:02 2026 GMT
        Subject: CN=002b0ba0005fe532db49b472d48b9751960963d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:1f:b8:49:61:96:22:ef:6a:cd:40:fc:e0:
                    92:55:64:04:db:eb:10:33:51:fe:f7:b1:47:0d:00:
                    7a:d8:a0:96:cc:a4:da:db:82:3a:46:61:3f:60:27:
                    f9:03:0b:6c:af:70:fe:ff:f5:10:da:90:e5:01:86:
                    41:d8:62:86:d5:06:ee:70:8f:7a:db:ad:76:58:24:
                    87:38:e3:a1:80:20:ca:c5:bc:d8:21:bd:b8:62:31:
                    ef:43:e1:d2:37:9c:ea:39:e8:72:76:01:a3:cf:19:
                    a4:b0:5e:db:25:71:67:85:bf:b5:34:cd:4f:7a:8c:
                    27:2a:78:b7:4a:ef:48:da:2d:2d:5e:80:c1:e1:7f:
                    32:c5:6e:63:da:6a:b9:63:14:c5:21:b6:93:de:bd:
                    d7:10:c9:4f:4a:d3:77:8c:29:22:c2:ab:53:34:7c:
                    5a:e7:5d:9f:0a:95:df:6d:31:4d:74:33:e4:36:13:
                    d4:19:54:48:d3:56:ae:de:be:cd:78:c0:1f:7a:22:
                    6d:53:aa:dd:8a:44:3b:8e:40:90:7a:fd:13:b4:56:
                    c5:72:d5:9e:3b:4b:dd:e0:c8:3c:7d:65:06:79:1c:
                    de:e2:30:f9:6d:4a:f0:e6:af:80:0b:38:23:0c:32:
                    6a:f6:b9:64:9a:1e:e0:db:9f:30:c9:e3:b8:33:c9:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:0B:A0:00:5F:E5:32:DB:49:B4:72:D4:8B:97:51:96:09:63:D9
            X509v3 Authority Key Identifier:
                keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:45:74:62:c5:88:50:9a:d2:a9:92:47:18:bf:7e:c8:59:b3:
         7e:65:e7:c4:87:78:fa:f6:db:c0:32:3f:f7:c8:10:29:9c:01:
         56:23:7d:f3:86:63:32:c7:9c:f3:10:87:62:15:52:02:9f:7a:
         9a:40:f1:d2:b3:f6:f0:8e:d7:69:e6:56:b4:fb:54:56:a3:b9:
         ea:c6:e0:b5:5e:43:80:10:f0:c3:30:b1:8c:b5:4c:62:e0:a4:
         d4:e0:2c:33:62:8d:2c:32:0c:c7:f4:92:f4:14:4d:cf:71:d2:
         ca:47:79:53:1e:d8:45:c3:78:19:b4:48:92:ef:1f:53:b8:80:
         57:40:1f:94:f0:44:5d:fa:83:41:1f:49:2f:99:f6:84:e8:ed:
         ed:43:90:bc:4a:ad:74:ac:bf:d6:6f:e2:07:46:62:63:b1:54:
         52:a8:ae:b0:93:67:96:15:6c:b5:fe:40:a7:a9:9e:52:63:f1:
         d5:c4:9c:2c:b7:10:bc:73:af:36:05:10:e5:06:45:33:4f:32:
         42:20:98:5f:00:0e:09:ca:74:05:e7:31:8f:55:a3:c7:45:db:
         23:25:13:a4:99:30:40:ec:2f:fc:65:dc:2c:7d:f4:60:5f:a6:
         98:a2:c5:61:4a:2e:00:5e:65:4b:26:b9:4a:46:09:03:e7:8c:
         f0:b6:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:35 2026 by rpki-client