Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          18Fb0b+WAGM70UHqin4m6pp8xcKE36G8KBuMGouSl1w=
Subject key identifier:   3A:31:ED:07:8E:37:0C:A5:1F:50:04:AD:CB:06:D3:2B:08:6C:50:E9
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       01A08942A5CEE496B6B171D5CC20B364955F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          072D
Signing time:             Thu 10 Sep 2026 03:00:41 +0000
Manifest this update:     Thu 10 Sep 2026 03:00:41 +0000
Manifest next update:     Fri 11 Sep 2026 03:00:41 +0000
Files and hashes:         1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: 7H4ibvaoz9hEm4sn4T0yTWYgrSQGcdJbJ2vSz/G7wbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:42:a5:ce:e4:96:b6:b1:71:d5:cc:20:b3:64:95:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Sep 10 03:00:41 2026 GMT
            Not After : Sep 11 03:00:41 2026 GMT
        Subject: CN=3a31ed078e370ca51f5004adcb06d32b086c50e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:27:a4:1d:66:f1:aa:4f:e8:35:69:c1:24:
                    d0:97:29:4b:bf:8b:34:66:d8:ba:37:53:de:11:78:
                    47:af:aa:25:48:57:ff:8a:5f:30:2f:ba:d5:71:d2:
                    2c:42:ec:0a:a9:35:9b:07:b6:61:93:09:d0:f8:97:
                    8d:0f:05:11:ce:81:b9:a5:09:7d:6b:8b:19:95:6d:
                    73:b5:f9:0f:cf:72:48:e6:eb:32:45:a3:cb:80:81:
                    4d:16:2a:1e:1d:26:e3:36:9e:7c:71:b4:ec:7b:b4:
                    cc:52:52:0e:e4:7e:16:0e:1a:ec:e9:1a:51:9b:cd:
                    4a:4e:93:5a:22:6e:c3:22:6b:1b:28:f3:6d:8f:8a:
                    f8:b9:82:9a:3c:6f:7c:32:eb:82:b0:18:7a:cd:3a:
                    eb:f4:d3:c6:76:95:64:d0:5d:ec:6d:d2:f2:64:8e:
                    07:ac:f7:3c:0e:09:1b:d9:b3:f3:4f:d1:26:c6:77:
                    44:9f:77:89:f8:5d:ba:13:18:26:1c:a6:b8:4d:12:
                    ff:5c:8f:ba:a3:7c:71:ed:6d:8a:1c:2c:49:f8:5f:
                    84:24:40:89:1d:11:14:bf:6e:50:7a:96:c3:d0:ae:
                    59:cb:e4:31:ad:e3:04:d2:c6:eb:64:6f:b6:c0:de:
                    5f:67:90:33:7d:b6:1d:50:6f:80:6b:8b:63:97:5b:
                    4b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:31:ED:07:8E:37:0C:A5:1F:50:04:AD:CB:06:D3:2B:08:6C:50:E9
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:e0:ce:19:95:dc:42:8b:9a:cc:ed:fb:49:11:b9:6a:cd:
         d0:48:05:e2:74:ac:38:09:f2:5e:45:51:10:e7:52:07:3a:15:
         df:8d:a1:29:c6:42:05:80:17:f0:67:67:d0:b7:eb:72:4a:4f:
         15:04:3e:29:08:15:ab:0e:9d:4f:a1:a3:14:95:fd:e2:10:37:
         8f:66:81:b7:07:fa:72:33:5d:39:2e:27:61:3c:99:61:d7:a0:
         9c:75:1f:35:93:02:9b:3d:5e:4f:60:43:0e:df:47:3d:39:37:
         a2:42:df:c1:25:09:ec:f8:a4:3f:41:03:3f:1c:8b:87:91:f3:
         f0:3a:11:a4:07:d6:78:a9:86:77:20:b9:bd:e1:dd:5e:e0:9e:
         18:17:02:bd:66:f9:bd:d9:fa:33:26:a2:78:d9:d1:0f:4a:e3:
         ab:50:30:ba:42:49:fa:24:41:aa:06:ca:f9:ed:97:3e:b5:dd:
         24:4f:3b:d0:28:8f:9d:aa:63:75:76:db:03:5a:08:f7:f7:58:
         a2:93:b4:f7:f3:f0:89:fb:04:b4:a9:fa:c3:90:68:49:68:6c:
         f2:d0:77:c9:d2:30:b5:ef:5c:c4:3e:55:d0:c6:c1:4f:c2:c0:
         7f:0d:58:ac:07:5d:de:ad:21:e0:2c:b6:5c:53:a2:c7:0c:f1:
         ab:23:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:42:31 2026 by rpki-client