Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
File:                     Wc72wcLU1dfibqWTTOGDspjym_w.mft (raw, json)
Hash identifier:          8jUpGHW47m15hrDuYf3n6GkSlG4O9z+XVl8oAfExNvM=
Subject key identifier:   70:40:19:11:E6:C3:00:E8:CE:50:61:3E:50:4F:4E:E3:EC:82:B1:4B
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Certificate issuer:       /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial:       01A10FCDC315E291C3C1D846A6926E9D0D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
Manifest number:          0106
Signing time:             Tue 06 Oct 2026 06:01:45 +0000
Manifest this update:     Tue 06 Oct 2026 06:01:45 +0000
Manifest next update:     Wed 07 Oct 2026 06:01:45 +0000
Files and hashes:         1: 8h9N0o1DP4cTa1joJkvtjZ69cPY.roa (hash: QzvwZtMRPLOwFSrMXC5EMOKl6ZFJXjd+NvjDqLCoAws=)
                          2: BuMsAfkHa-6AI8ccw7-eBpf0J6M.roa (hash: yP4C6TlJul/KiVGvD+UG3KhXgh+OIWp2I4u/TGi0zQ8=)
                          3: ISP_LRUi3H-qUiROKRLTXG0ZCSg.roa (hash: nVGzjeuQbZBgx3j88p/HXhsvqoQ3LPEn12/DTiOeylY=)
                          4: Wc72wcLU1dfibqWTTOGDspjym_w.crl (hash: 4awSDuJb7KaiGlh+qjdKSTcmOoUxZCMtoReUZQuTMuU=)
                          5: WnYMq2XpRB6QDhSzZM8aF3MzCrs.roa (hash: GmfV7EEWhKbI0gi0zpi283vs2OrNBsy92kA7RhKK+MI=)
                          6: gyJT59mv6KBVG_Zo9tx_hnZpJKY.roa (hash: EGF+yWuAT2mFnT93FBKX6jU9cu5gZF1RyLSjHRTOPb4=)
                          7: iecDijbzGFi52XpQIrqVxDTqq5o.roa (hash: yUELKL1Lfwx+qeED8Re9HELksNh5w6uJDDVbVgczPpM=)
                          8: j9H05ICBG6NeKqBUo0QOZbr1ebc.roa (hash: COAJnvgwdstpYOrS53924468t7JF7s5mFBTU++mc60A=)
                          9: rF8hKKPYi1_6uvshddsJC7FpHcU.roa (hash: gfmH90XdvGauAKsUY5JnJuPZCvFmZV8GXH8tq56hdGk=)
                          10: tPIdoj3UUYmUkRkD66gzASs_7lw.roa (hash: yc1VdGTD+R18zDVV1b+Z+1bYQb+Hr0FGdKkZS6ve5QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 06:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:cd:c3:15:e2:91:c3:c1:d8:46:a6:92:6e:9d:0d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
        Validity
            Not Before: Oct  6 06:01:45 2026 GMT
            Not After : Oct  7 06:01:45 2026 GMT
        Subject: CN=70401911e6c300e8ce50613e504f4ee3ec82b14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:a3:50:65:6c:53:93:c9:4e:84:77:ef:28:
                    56:fe:2c:a7:ee:db:8c:b8:c6:88:29:d8:75:d2:10:
                    12:5b:3a:32:cf:c6:13:64:51:47:ac:fe:42:71:fe:
                    0c:12:8d:a5:10:3a:a7:78:7c:c3:ee:b0:aa:a1:6b:
                    3d:60:aa:94:c3:dd:8c:88:ec:ac:32:30:84:a7:d3:
                    03:5e:73:21:6b:d1:5b:8d:02:66:92:bc:d6:cb:67:
                    ae:19:78:a6:a3:04:0d:a1:d6:89:31:cd:05:3a:43:
                    eb:1d:04:ad:da:0b:c5:f7:75:51:eb:b5:48:5b:e3:
                    91:42:65:e5:b1:9f:23:60:ff:39:b1:4b:55:16:8f:
                    ed:d1:0e:c1:cb:58:e6:6c:e2:92:5f:78:2a:6a:dc:
                    bb:6a:64:2c:9c:c7:68:e8:12:0e:39:7f:13:ec:56:
                    22:5d:c1:8a:96:a3:08:f1:f4:12:91:92:94:ee:5b:
                    44:14:5c:46:5a:6b:56:5e:76:bf:6a:bc:05:37:f3:
                    37:2f:61:1f:c8:01:49:6f:1c:8d:59:9b:9f:2c:2a:
                    70:60:ef:c0:fd:5b:34:b9:94:1e:a4:58:40:2e:81:
                    6e:78:7c:79:59:b5:1b:ce:8d:4a:70:a8:e6:74:5e:
                    55:3a:a9:68:4b:4b:29:bb:57:a6:15:e5:b9:1c:77:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:19:11:E6:C3:00:E8:CE:50:61:3E:50:4F:4E:E3:EC:82:B1:4B
            X509v3 Authority Key Identifier:
                keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:21:eb:d3:7a:d5:c7:15:67:15:94:a4:a3:b5:f7:1d:25:
         df:8c:d2:bd:56:30:d9:df:dd:5c:85:eb:a4:a5:9a:45:10:c4:
         23:a6:80:a1:78:60:5f:6e:28:ea:f4:8f:1f:02:d9:ad:5b:85:
         a6:97:af:dd:b8:83:87:06:cc:3c:66:0b:4f:4d:37:fe:2e:81:
         c5:e3:e6:d2:2b:f3:77:64:fe:b7:3a:da:a4:54:b0:61:2d:e5:
         85:c5:b0:fd:c3:c4:b0:f5:de:28:c2:72:17:0c:37:bb:cb:42:
         ad:0a:2b:9d:f1:9e:4d:72:aa:d4:81:5e:8c:f9:2a:72:54:61:
         05:2e:39:d9:bf:ed:46:ad:7a:33:d9:06:ea:a7:6a:c0:da:bc:
         4e:52:14:ad:52:8e:9d:8d:fd:2c:63:2a:8a:c9:4a:e4:44:1a:
         f7:b4:62:84:d9:57:f2:44:6a:1f:8d:9c:79:a7:35:c0:cd:f5:
         50:22:d3:bd:58:2b:12:a2:b2:f0:b1:3c:1b:36:3d:48:46:ba:
         c4:f4:9b:d4:5d:77:a3:c2:d7:33:27:0a:fc:79:46:5b:7c:1b:
         fe:7f:4c:b2:05:aa:36:a6:2d:3f:1a:19:db:7d:48:92:8f:33:
         7e:37:b6:f9:bb:9c:ba:87:c0:12:fc:85:b0:6f:8a:fb:43:dd:
         8f:57:0e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPzcMV4pHDwdhGppJunQ09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Y2VmNmMxYzJkNGQ1ZDdlMjZlYTU5MzRjZTE4M2IyOThm
MjliZmMwHhcNMjYxMDA2MDYwMTQ1WhcNMjYxMDA3MDYwMTQ1WjAzMTEwLwYDVQQD
Eyg3MDQwMTkxMWU2YzMwMGU4Y2U1MDYxM2U1MDRmNGVlM2VjODJiMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHijUGVsU5PJToR37yhW/iyn7tuM
uMaIKdh10hASWzoyz8YTZFFHrP5Ccf4MEo2lEDqneHzD7rCqoWs9YKqUw92MiOys
MjCEp9MDXnMha9FbjQJmkrzWy2euGXimowQNodaJMc0FOkPrHQSt2gvF93VR67VI
W+ORQmXlsZ8jYP85sUtVFo/t0Q7By1jmbOKSX3gqaty7amQsnMdo6BIOOX8T7FYi
XcGKlqMI8fQSkZKU7ltEFFxGWmtWXna/arwFN/M3L2EfyAFJbxyNWZufLCpwYO/A
/Vs0uZQepFhALoFueHx5WbUbzo1KcKjmdF5VOqloS0spu1emFeW5HHfhawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBAGRHmwwDozlBhPlBPTuPsgrFLMB8GA1UdIwQY
MBaAFFnO9sHC1NXX4m6lk0zhg7KY8pv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt
Zjk4OGQ0OGU1MWU4LzEvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4
LzEvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACawh69N6
1ccVZxWUpKO19x0l34zSvVYw2d/dXIXrpKWaRRDEI6aAoXhgX24o6vSPHwLZrVuF
ppev3biDhwbMPGYLT003/i6BxePm0ivzd2T+tzrapFSwYS3lhcWw/cPEsPXeKMJy
Fww3u8tCrQornfGeTXKq1IFejPkqclRhBS452b/tRq16M9kG6qdqwNq8TlIUrVKO
nY39LGMqislK5EQa97RihNlX8kRqH42ceac1wM31UCLTvVgrEqKy8LE8GzY9SEa6
xPSb1F13o8LXMycK/HlGW3wb/n9MsgWqNqYtPxoZ231Iko8zfje2+bucuofAEvyF
sG+K+0Pdj1cOHA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:58:01 2026 by rpki-client