Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e932cd-be0c-4017-b114-fe83b9c2ad7a/1/wWqfOUavdkiys-niLLgI1jZ_uQ8.mft
File:                     wWqfOUavdkiys-niLLgI1jZ_uQ8.mft (raw, json)
Hash identifier:          Zsm+mpRE8H4ZAzqcm89jcFNBOXwDDBeHHZQXRLTeC/k=
Subject key identifier:   F3:FF:85:DD:83:AB:0D:11:5C:B5:D2:E2:FD:66:6F:92:47:56:8E:A8
Authority key identifier: C1:6A:9F:39:46:AF:76:48:B2:B3:E9:E2:2C:B8:08:D6:36:7F:B9:0F
Certificate issuer:       /CN=c16a9f3946af7648b2b3e9e22cb808d6367fb90f
Certificate serial:       01A0F0B10837D6D579FFC96212FA9EC912B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWqfOUavdkiys-niLLgI1jZ_uQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e932cd-be0c-4017-b114-fe83b9c2ad7a/1/wWqfOUavdkiys-niLLgI1jZ_uQ8.mft
Manifest number:          0209
Signing time:             Wed 30 Sep 2026 05:02:08 +0000
Manifest this update:     Wed 30 Sep 2026 05:02:08 +0000
Manifest next update:     Thu 01 Oct 2026 05:02:08 +0000
Files and hashes:         1: J30Uy6gqwHaFt6wmeXIH9IzCZrM.roa (hash: 2dDwKwUupmkxJSwCisq+lWow/CZtDHfp1eWe22XuURw=)
                          2: wWqfOUavdkiys-niLLgI1jZ_uQ8.crl (hash: 61pjuppZKM1nfj1grs/k6Eiw8Pto/9KfgJqFIdYTigE=)
                          3: xwTLJFTQ6CuHoiAi135kZeuhlJw.roa (hash: B8YdyHZTI9jYuU8vhg74kPr9IghkXzWJaz6RTbx7EVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e932cd-be0c-4017-b114-fe83b9c2ad7a/1/wWqfOUavdkiys-niLLgI1jZ_uQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e932cd-be0c-4017-b114-fe83b9c2ad7a/1/wWqfOUavdkiys-niLLgI1jZ_uQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWqfOUavdkiys-niLLgI1jZ_uQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:b1:08:37:d6:d5:79:ff:c9:62:12:fa:9e:c9:12:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16a9f3946af7648b2b3e9e22cb808d6367fb90f
        Validity
            Not Before: Sep 30 05:02:08 2026 GMT
            Not After : Oct  1 05:02:08 2026 GMT
        Subject: CN=f3ff85dd83ab0d115cb5d2e2fd666f9247568ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:b7:81:d7:cc:f2:78:4d:0d:cd:96:d8:bd:
                    c7:3b:3b:ee:c7:07:93:c5:fc:53:d2:39:00:5e:8a:
                    1d:c2:fe:d1:a6:3a:a6:73:a8:7f:d8:55:ec:23:63:
                    67:0f:5a:b5:1f:65:08:4a:a4:37:65:d0:40:74:07:
                    51:4c:11:f1:88:02:48:65:21:db:81:37:e7:28:71:
                    73:31:dc:20:b4:20:04:85:5b:fc:8f:bb:b6:33:f0:
                    d7:ce:d1:86:fb:c0:70:10:c9:85:9b:aa:4f:b2:d9:
                    d4:20:33:0c:bd:d1:06:09:46:52:d1:fb:0e:96:3f:
                    8b:a5:95:bb:06:ca:ea:d4:3b:e2:4c:85:6c:4a:42:
                    63:a9:8a:82:4c:f2:ac:24:57:5b:60:05:4a:26:1e:
                    6a:7d:0a:f5:dd:c2:2e:63:ed:48:d3:f7:ca:a2:c7:
                    f4:cf:d5:60:75:95:78:97:f1:d0:40:a8:d8:0c:46:
                    1c:90:a9:24:c7:d7:d0:5f:67:e3:8d:2c:05:37:d1:
                    6e:69:40:94:29:f6:b0:fc:1b:e2:dc:85:ec:8f:e4:
                    d4:24:bb:22:e8:5e:58:b7:da:f6:66:42:0c:81:7b:
                    06:8a:d1:06:d9:df:f1:a8:ae:22:a0:64:ed:47:9c:
                    8c:bd:04:f3:96:02:9c:91:0e:32:77:e1:50:65:c2:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:85:DD:83:AB:0D:11:5C:B5:D2:E2:FD:66:6F:92:47:56:8E:A8
            X509v3 Authority Key Identifier:
                keyid:C1:6A:9F:39:46:AF:76:48:B2:B3:E9:E2:2C:B8:08:D6:36:7F:B9:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWqfOUavdkiys-niLLgI1jZ_uQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e932cd-be0c-4017-b114-fe83b9c2ad7a/1/wWqfOUavdkiys-niLLgI1jZ_uQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e932cd-be0c-4017-b114-fe83b9c2ad7a/1/wWqfOUavdkiys-niLLgI1jZ_uQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:13:c8:dd:e2:03:36:84:b5:cc:33:e3:49:ee:9c:13:04:
         18:48:2b:7c:ba:ba:75:bf:3a:6a:01:6f:1f:8e:e9:c1:89:de:
         7d:5a:25:22:6f:ee:87:b7:64:84:a4:c7:ac:e7:36:2b:3f:fe:
         7f:c0:91:8c:61:dc:69:a1:8a:43:51:b2:98:fa:17:d3:fc:22:
         59:5f:11:d1:9c:19:c4:49:ce:5b:c6:21:79:ac:4d:bb:2d:d9:
         1d:17:47:bb:39:26:64:c4:1f:61:cb:6c:90:58:73:dc:f7:85:
         59:73:57:a0:bb:bb:d0:2a:8f:8c:11:1f:62:ab:87:98:b7:88:
         72:67:e5:79:28:6a:b6:56:e4:c7:0a:5f:09:87:22:64:bf:5b:
         f8:08:f1:d5:00:12:35:76:6d:05:2b:8e:47:ee:ee:0d:03:ab:
         99:7f:7f:a0:9f:56:18:e7:30:0b:65:cb:20:61:31:e4:66:00:
         5a:9c:2b:fe:06:ee:65:dd:ca:a4:a3:c3:d7:b0:66:e0:1b:7a:
         55:c9:de:19:9c:ae:8d:9a:33:34:fd:00:07:2a:37:d4:68:24:
         ac:ae:64:10:7d:68:ea:89:a6:18:f0:75:59:9c:bc:71:e3:61:
         da:b4:ec:e4:0f:fa:96:d7:0a:16:ca:6c:e5:76:48:a1:9a:f7:
         3a:85:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:02 2026 by rpki-client