Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File:                     wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier:          tJApPDMPuWMik1AGfAyvb/DySHBNU5l6/ZiCnVhb2ZE=
Subject key identifier:   B9:ED:4A:8A:E2:3C:74:23:B1:5D:64:50:BC:66:62:FD:EE:3F:20:88
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer:       /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial:       01A197A05AE1AC277E332EC7256A370570C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number:          1AD5
Signing time:             Sun 01 Nov 2026 15:00:30 +0000
Manifest this update:     Sun 01 Nov 2026 15:00:30 +0000
Manifest next update:     Mon 02 Nov 2026 15:00:30 +0000
Files and hashes:         1: vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa (hash: F8siYYIOWBqcJc18xZZBvTPob2dHLHgiU0/yM3ixtco=)
                          2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: G1ypvIeRSKvcwA222cl1c3Xzug8JQjyoNTlmZ6MS+o8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 13:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:97:a0:5a:e1:ac:27:7e:33:2e:c7:25:6a:37:05:70:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
        Validity
            Not Before: Nov  1 15:00:30 2026 GMT
            Not After : Nov  2 15:00:30 2026 GMT
        Subject: CN=b9ed4a8ae23c7423b15d6450bc6662fdee3f2088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:74:08:03:cd:67:07:c5:ec:ae:b4:f2:f8:e5:
                    61:46:69:b4:f8:4c:39:78:6a:36:43:fd:49:fa:51:
                    36:90:30:72:51:ff:7c:fc:dc:d0:13:1d:2a:b6:fb:
                    53:fd:5c:62:1f:90:93:18:f1:09:8e:f8:54:63:79:
                    6f:ae:09:53:f1:95:7c:e2:53:91:42:1c:de:5e:ab:
                    67:aa:9f:bf:ba:82:1a:19:18:b7:e3:a1:94:ea:83:
                    bc:1c:bd:29:f2:7e:b6:50:07:41:a0:7b:d3:e6:84:
                    22:5a:84:81:46:3c:d8:2b:ce:bb:3a:d9:8a:49:51:
                    1d:0a:86:75:64:4a:a2:c6:9c:6b:2d:2a:ee:a3:cb:
                    b6:f3:2a:01:6b:7a:7d:cf:5a:6c:e3:97:5d:cc:cc:
                    a3:e2:e2:10:54:cb:99:a1:d0:89:23:be:eb:cb:4e:
                    34:34:87:4a:32:7f:2d:f7:dc:a6:a7:d9:de:d9:15:
                    c3:ff:09:28:6b:83:22:33:65:54:22:08:31:91:d7:
                    44:f0:82:57:46:96:08:a7:70:b5:8b:5f:10:ee:8b:
                    b4:11:1a:84:e6:da:1f:8d:33:c4:19:14:7d:54:2c:
                    5c:32:15:25:80:37:1b:30:c6:5a:18:8a:bb:aa:f4:
                    37:d3:3d:46:e6:9b:cd:c3:ca:73:8a:d7:7f:bb:4c:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:4A:8A:E2:3C:74:23:B1:5D:64:50:BC:66:62:FD:EE:3F:20:88
            X509v3 Authority Key Identifier:
                keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:61:c3:99:ba:23:1f:68:5a:41:26:d8:83:26:e6:20:d0:
         c2:7a:28:ec:22:c8:37:cc:f3:d5:f7:a8:99:86:ec:a0:98:c3:
         a0:87:d2:6e:37:0e:03:ea:f4:a1:71:12:b0:bd:5a:f1:bf:f1:
         69:9d:b8:b4:f4:b8:09:59:11:a2:bc:48:92:5e:c5:68:24:60:
         4f:2a:2f:8a:3b:ff:e9:f5:73:66:d1:ba:b3:a2:93:fb:6c:d2:
         7b:cc:56:72:64:11:bf:80:4c:d2:ac:a5:2a:e0:11:2d:d7:1f:
         5b:c9:52:56:9d:ae:bb:f6:51:eb:3b:86:7a:7f:81:87:08:3f:
         27:5c:ce:0a:35:c2:5a:1d:85:ee:1f:c1:69:3b:b9:9f:9e:42:
         a9:9d:ce:fc:ab:aa:e1:a1:02:01:07:10:9e:12:2c:dd:4f:18:
         6d:4b:3e:df:eb:72:98:12:ec:71:44:22:f6:8b:15:25:cd:63:
         3d:da:e2:db:a6:ab:31:2a:97:3a:6e:b3:f6:42:9d:26:d8:4b:
         eb:11:66:c0:4c:97:e4:15:a0:c7:42:9f:fd:25:03:27:8d:42:
         3f:67:7e:ad:82:25:10:cc:93:81:fc:3c:85:b9:85:40:62:46:
         73:00:a3:da:3e:07:ba:69:ea:e4:d0:3d:20:54:b6:94:b4:3f:
         ca:b1:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:52:36 2026 by rpki-client