Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File:                     wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier:          G9TVCy58kKy6Sc50vrm5XInQdfThMJaguxNFfBlp3fM=
Subject key identifier:   E6:69:CA:4E:00:51:D2:4F:5F:C2:8D:BD:B8:B8:5C:5E:E0:53:EB:68
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       01A1795F0D613088561F20FDE3FE462F563D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number:          1AC5
Signing time:             Mon 26 Oct 2026 18:00:34 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:34 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:34 +0000
Files and hashes:         1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
                          2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: KmCiOhOgXqTSpCX1XaW6TiZjeEt0wPV/hbdf5yZSh5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5f:0d:61:30:88:56:1f:20:fd:e3:fe:46:2f:56:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: Oct 26 18:00:34 2026 GMT
            Not After : Oct 27 18:00:34 2026 GMT
        Subject: CN=e669ca4e0051d24f5fc28dbdb8b85c5ee053eb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:b3:72:3a:30:f1:42:e5:98:8f:af:92:db:
                    fe:1d:46:ab:98:b5:27:91:db:18:da:0e:ac:8b:21:
                    b8:32:f6:7e:cc:2a:e8:c5:58:23:32:f0:d0:fb:07:
                    41:11:69:56:17:69:b1:28:37:1c:ac:8e:d1:76:47:
                    55:f7:7f:d5:dc:06:6e:0a:f0:c6:d9:e3:93:f3:32:
                    03:c7:bf:3e:92:8b:9c:ff:85:25:ff:59:67:df:0c:
                    a2:e5:c2:c8:a9:16:9d:30:b3:de:9c:73:01:46:74:
                    16:6a:43:b4:b5:a5:98:32:38:48:03:e7:69:7b:42:
                    55:ef:be:b0:6a:2c:0c:e7:96:29:9b:ac:88:e6:62:
                    df:d3:b6:c7:9c:13:d0:e3:db:0a:02:8b:4e:62:ac:
                    f2:1e:bd:75:ec:1a:68:d8:5f:fe:6f:84:71:ac:25:
                    70:93:4a:81:39:47:51:e7:8e:ba:ad:39:29:16:c0:
                    5a:83:b2:a0:fa:7f:52:91:8a:6a:d7:bb:b4:ad:a1:
                    f6:e9:79:4e:8e:13:10:d6:b7:a3:1f:7b:95:9f:0c:
                    7e:50:31:83:b1:16:bd:ac:66:5f:04:15:dc:c5:23:
                    0d:9d:f5:1d:e9:e0:5f:f1:a8:8d:bf:92:f4:6e:de:
                    cc:51:75:88:ee:a2:05:ad:c6:63:b9:54:6d:c6:31:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:CA:4E:00:51:D2:4F:5F:C2:8D:BD:B8:B8:5C:5E:E0:53:EB:68
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:b9:8c:91:6b:51:52:7c:04:80:8e:a9:5c:41:fe:10:e4:
         46:77:72:e1:55:64:42:d3:ef:e1:71:a1:30:68:3b:0e:c1:8b:
         2c:ed:c2:34:41:0a:f8:47:35:cd:d4:2a:d5:3f:fb:ee:54:21:
         48:c0:c7:6d:5b:88:b2:9c:3f:d7:5a:e7:74:67:28:bb:4f:b5:
         c0:8c:5b:f5:6f:bf:88:eb:f2:38:70:4e:b6:3f:ea:0e:9e:95:
         2a:ad:6e:f7:f1:ca:f0:35:17:d6:be:47:6e:96:ff:ae:9e:c8:
         5e:9d:01:d7:18:8a:a0:19:3c:ea:c3:6d:d9:b3:13:6b:cc:b7:
         58:ba:41:0e:69:69:92:d7:5b:e9:5b:af:89:0d:cd:5d:48:28:
         4a:f4:c8:f0:bf:52:10:16:74:f0:e2:72:70:1a:fc:25:f5:54:
         4b:c0:3d:61:1d:2a:c8:3f:f4:da:72:70:56:6d:02:aa:23:d2:
         5c:71:20:e5:6b:08:2e:ca:41:f8:a5:95:d4:e8:95:13:02:19:
         8e:b4:58:c4:80:37:d9:31:22:d9:ad:0e:05:3e:dd:f9:74:7a:
         11:19:c0:d3:2e:8b:27:4a:2a:a7:65:2d:31:2b:06:92:06:a7:
         aa:2a:40:42:ee:0f:df:a6:88:72:44:34:1e:b6:17:35:53:08:
         72:33:95:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5Xw1hMIhWHyD94/5GL1Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTY2ZTIxNmMzNjBjMzZlMGY3NWIwZDM5MTIzZGJhZDQy
MjY0ZTkwHhcNMjYxMDI2MTgwMDM0WhcNMjYxMDI3MTgwMDM0WjAzMTEwLwYDVQQD
EyhlNjY5Y2E0ZTAwNTFkMjRmNWZjMjhkYmRiOGI4NWM1ZWUwNTNlYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Szcjow8ULlmI+vktv+HUarmLUn
kdsY2g6siyG4MvZ+zCroxVgjMvDQ+wdBEWlWF2mxKDccrI7RdkdV93/V3AZuCvDG
2eOT8zIDx78+kouc/4Ul/1ln3wyi5cLIqRadMLPenHMBRnQWakO0taWYMjhIA+dp
e0JV776waiwM55Ypm6yI5mLf07bHnBPQ49sKAotOYqzyHr117Bpo2F/+b4RxrCVw
k0qBOUdR5466rTkpFsBag7Kg+n9SkYpq17u0raH26XlOjhMQ1rejH3uVnwx+UDGD
sRa9rGZfBBXcxSMNnfUd6eBf8aiNv5L0bt7MUXWI7qIFrcZjuVRtxjGB7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZpyk4AUdJPX8KNvbi4XF7gU+toMB8GA1UdIwQY
MBaAFMAWbiFsNgw24PdbDTkSPbrUImTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYt
ZmNjZTE0N2MzMjdhLzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYtZmNjZTE0N2MzMjdh
LzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvi5jJFr
UVJ8BICOqVxB/hDkRndy4VVkQtPv4XGhMGg7DsGLLO3CNEEK+Ec1zdQq1T/77lQh
SMDHbVuIspw/11rndGcou0+1wIxb9W+/iOvyOHBOtj/qDp6VKq1u9/HK8DUX1r5H
bpb/rp7IXp0B1xiKoBk86sNt2bMTa8y3WLpBDmlpktdb6VuviQ3NXUgoSvTI8L9S
EBZ08OJycBr8JfVUS8A9YR0qyD/02nJwVm0CqiPSXHEg5WsILspB+KWV1OiVEwIZ
jrRYxIA32TEi2a0OBT7d+XR6ERnA0y6LJ0oqp2UtMSsGkganqipAQu4P36aIckQ0
HrYXNVMIcjOV4A==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:19:42 2026 by rpki-client