Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          v76/Qo5zHd29OrAazL22/o4SBbFYVM3Ii72A6gXvjv4=
Subject key identifier:   9B:A6:8A:85:8A:26:B9:F7:90:13:61:BE:3A:B2:02:3B:53:BC:14:69
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       01A08C0D20AC4C47F13D1F34ECA4D4E8DC2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 16:01:05 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:05 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:05 +0000
Files and hashes:         1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: CPMQoiBMJxo84H4j+3t5ZaX7oslfAS8ClYgfAqUV+OE=)
                          2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:20:ac:4c:47:f1:3d:1f:34:ec:a4:d4:e8:dc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Sep 10 16:01:05 2026 GMT
            Not After : Sep 11 16:01:05 2026 GMT
        Subject: CN=9ba68a858a26b9f7901361be3ab2023b53bc1469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:21:e8:97:61:98:b4:c8:7a:9b:4a:97:4b:
                    8f:4e:cf:ee:2d:27:d4:58:e8:4d:1f:93:49:4a:f8:
                    84:da:08:e1:5f:9c:c1:e0:bf:0b:ea:86:5a:1b:b2:
                    b3:49:84:5e:f0:0e:ed:5b:39:bc:6b:cf:0c:bd:a7:
                    b3:ac:fb:88:00:46:8f:96:73:6c:be:98:86:86:52:
                    21:6a:a0:61:47:fc:bb:13:97:02:c2:52:1f:f0:7f:
                    14:a7:d9:ff:19:9e:0a:2f:c3:58:c5:ef:b8:83:9c:
                    6a:b8:bc:d2:2d:c2:45:d6:6b:21:65:2a:e9:d8:d3:
                    e3:e4:1e:89:76:e5:e1:ce:5e:65:70:ba:ed:69:a6:
                    b2:3d:3b:5b:65:b4:dc:07:6f:ab:9d:29:d7:dd:d1:
                    24:9d:41:e4:12:fc:cd:a3:5e:fb:8a:6f:10:d9:f4:
                    b2:3c:c2:30:9e:5d:ee:3c:2c:80:6d:ad:a5:f3:97:
                    97:9a:7a:ba:0f:5e:b2:e3:93:65:51:9e:78:28:fe:
                    53:fc:98:0c:44:9a:c7:43:01:35:77:a3:8c:63:0a:
                    45:58:3f:9c:d3:71:91:29:01:52:89:6e:7a:96:f0:
                    dc:84:37:d4:32:e2:1d:95:41:7c:7c:fa:a3:cc:7c:
                    8c:fa:ef:6c:60:79:a0:c7:e0:1a:d8:6e:3a:35:df:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:8A:85:8A:26:B9:F7:90:13:61:BE:3A:B2:02:3B:53:BC:14:69
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:96:20:98:ac:11:1a:cc:44:ec:d8:b9:03:3c:ed:9a:b2:94:
         97:18:66:83:81:7e:fe:7f:a2:e1:57:b3:86:7c:0a:fa:b1:87:
         83:fd:b6:66:fe:d0:e9:15:43:f6:cf:d1:e0:e9:23:48:06:ca:
         0b:78:2f:7d:49:00:d8:bf:e5:7b:a5:07:f9:f3:17:7c:7f:f1:
         54:33:ac:63:41:24:1d:f0:bc:cd:12:f6:1f:c3:18:cf:df:d6:
         db:83:17:c8:58:69:46:e1:3b:d2:7a:d7:14:20:72:fe:0c:38:
         b0:66:10:ce:83:84:69:5d:d4:3f:a4:24:5e:f8:63:8f:b7:3f:
         1c:a0:eb:a8:66:01:98:85:bf:e3:98:33:9a:7a:af:36:ca:5c:
         9c:f8:8f:48:0c:0c:1f:a7:05:bd:a0:d8:a9:2a:6c:0b:63:e7:
         9d:18:ea:58:f2:0f:56:c1:d7:8e:50:97:9d:1b:2e:2b:4c:90:
         c1:68:95:06:d8:21:20:56:dd:86:39:58:6c:b9:af:85:bc:11:
         60:c8:24:8b:f5:ce:93:5d:9d:71:e8:2e:03:e9:d0:eb:cd:c8:
         f5:0a:06:8c:02:c8:62:36:0f:a4:ad:92:79:8d:db:1a:c0:62:
         e8:0c:ba:74:72:da:02:a5:03:bb:36:64:7c:5f:b7:7a:16:b6:
         41:ca:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:12:49 2026 by rpki-client