Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File:                     Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier:          nknqVNjGkLwYiIkhinb04lL46RTWTNF25BHN+2vwGAs=
Subject key identifier:   27:75:54:97:C4:21:C0:73:EC:D2:89:3F:CF:E9:65:AC:20:44:1A:41
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer:       /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial:       01A17C60B5F8580D07096DBED38196C94048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number:          0F06
Signing time:             Tue 27 Oct 2026 08:01:14 +0000
Manifest this update:     Tue 27 Oct 2026 08:01:14 +0000
Manifest next update:     Wed 28 Oct 2026 08:01:14 +0000
Files and hashes:         1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: CZPiz03SN+t1LxKFlFS2VCW5pfVplPyLhg484SS338A=)
                          2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:60:b5:f8:58:0d:07:09:6d:be:d3:81:96:c9:40:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
        Validity
            Not Before: Oct 27 08:01:14 2026 GMT
            Not After : Oct 28 08:01:14 2026 GMT
        Subject: CN=27755497c421c073ecd2893fcfe965ac20441a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:7b:82:8c:40:b7:5b:23:fe:93:ec:e6:07:
                    48:9c:cc:4b:8d:e6:71:f9:fe:0b:ad:06:f6:5f:29:
                    58:2a:bc:3f:04:b0:ed:48:79:ca:49:7f:b5:9a:03:
                    56:d5:58:a3:47:8c:41:68:2c:5b:69:4b:67:55:2d:
                    0c:b2:6b:c2:27:1b:af:22:11:59:75:e8:bd:98:a1:
                    0f:9b:4e:78:b6:2a:e7:a4:d3:56:09:3f:78:e2:41:
                    ab:3c:5d:8f:81:13:91:04:6a:12:32:ea:6f:05:a7:
                    8a:55:51:49:c3:4a:08:01:db:6c:44:0f:ff:26:63:
                    55:eb:64:d4:53:08:14:39:ae:6a:6b:13:bb:6a:cb:
                    1f:6c:89:6c:a9:44:f6:23:dd:0d:4e:79:a7:10:a8:
                    d1:40:c2:2d:23:c3:19:ec:22:9e:b3:c1:fa:2b:73:
                    1e:b9:a0:0b:a8:38:2a:c8:e9:65:00:e2:5d:4f:e5:
                    81:82:dc:84:2e:64:63:25:55:a1:08:bd:ae:85:3c:
                    90:e3:aa:df:dd:6b:6b:86:4b:89:54:d2:f2:e0:6b:
                    5d:e6:c4:29:71:3f:ce:10:00:71:a8:05:57:62:80:
                    da:70:94:5b:e7:d3:92:1b:6a:75:63:c3:ec:29:7f:
                    d7:17:6a:b9:56:1d:d3:2f:f1:c4:da:2e:6b:3d:58:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:54:97:C4:21:C0:73:EC:D2:89:3F:CF:E9:65:AC:20:44:1A:41
            X509v3 Authority Key Identifier:
                keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:65:26:f9:ec:87:d1:65:83:88:f8:9b:e2:1a:c7:60:d3:
         54:c9:3e:d8:7e:34:0f:84:37:d9:71:1d:74:73:c6:71:8b:be:
         11:b9:84:44:b7:e1:a5:50:63:87:da:49:fc:7c:3d:2e:be:d4:
         ae:90:fa:9f:4c:34:0a:43:1b:0d:16:44:5c:19:90:d3:d7:4e:
         26:cc:e0:d1:cc:e7:2a:03:99:38:d4:72:1e:f3:fa:f7:66:76:
         b8:47:85:28:f1:d8:00:47:ae:21:01:a8:b4:d5:9c:9c:b5:b3:
         79:f4:99:4e:00:94:9f:b6:b1:af:ec:7e:41:3d:95:af:80:71:
         85:38:53:d9:50:86:92:d0:8b:76:62:c5:32:71:df:b2:b0:da:
         8d:05:82:bd:0c:f3:2e:80:4b:8c:be:08:17:2f:95:8d:13:94:
         53:c1:cf:e8:c4:c2:36:b8:23:58:25:c2:49:84:df:f4:97:73:
         cd:0c:bb:6a:68:d2:da:45:ca:18:6f:01:4d:7c:2a:e6:27:f3:
         16:92:18:ae:72:fe:8d:d3:c4:b2:df:44:a4:86:dd:54:b4:ed:
         6f:19:16:9c:08:c6:49:7a:89:69:90:80:f5:79:f8:9a:46:c0:
         c4:e0:98:79:58:87:f8:bc:6a:04:99:4e:8c:8c:99:bc:b3:9c:
         8d:51:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:28 2026 by rpki-client