Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft
File:                     1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft (raw, json)
Hash identifier:          rz7zdQTKEhXzqHWiwsnIRxgU1turqIaC9rpHW87RtTk=
Subject key identifier:   EA:AE:B2:A0:27:D9:52:0C:61:22:56:E3:2C:F0:D3:6A:63:06:92:9B
Authority key identifier: F9:65:AC:00:6D:35:AC:2F:5E:2E:62:B5:3B:B0:AF:0F:D2:7E:3A:31
Certificate issuer:       /CN=f965ac006d35ac2f5e2e62b53bb0af0fd27e3a31
Certificate serial:       01A0DF178B93E7B24AEAF6EAAF607F1EE611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WWsAG01rC9eLmK1O7CvD9J-OjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft
Manifest number:          01A6
Signing time:             Sat 26 Sep 2026 19:00:57 +0000
Manifest this update:     Sat 26 Sep 2026 19:00:57 +0000
Manifest next update:     Sun 27 Sep 2026 19:00:57 +0000
Files and hashes:         1: 1-WWsAG01rC9eLmK1O7CvD9J-OjE.crl (hash: sInO2b0ka0kR0mk/Imt1W2ZK0O3jjifDnxuXIkwncV4=)
                          2: y95HZtf6ljFTlQS7GT9uqXnjJnI.roa (hash: 72ysblRdwkofAQYbkGbuUgIvvVzilyYh8p5im2o/LE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WWsAG01rC9eLmK1O7CvD9J-OjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:17:8b:93:e7:b2:4a:ea:f6:ea:af:60:7f:1e:e6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f965ac006d35ac2f5e2e62b53bb0af0fd27e3a31
        Validity
            Not Before: Sep 26 19:00:57 2026 GMT
            Not After : Sep 27 19:00:57 2026 GMT
        Subject: CN=eaaeb2a027d9520c612256e32cf0d36a6306929b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:36:5c:fc:2a:c7:88:e0:e6:81:e8:63:8d:
                    bc:f8:2e:3d:ce:df:9c:93:44:32:08:72:b2:ff:b5:
                    29:33:3b:d3:16:19:d6:2c:88:d9:18:4d:b4:55:5c:
                    4d:df:ef:f0:84:bb:9a:ce:61:2d:90:06:f6:79:b7:
                    ea:96:d1:8b:2d:1b:fd:14:06:a9:43:d3:61:0a:42:
                    ef:57:d8:b9:62:3e:f6:07:e0:60:74:95:58:ce:e3:
                    e8:c9:48:05:22:89:f3:59:56:73:20:b8:80:db:69:
                    49:2d:d0:c2:38:95:b0:39:78:da:f6:62:71:fa:a2:
                    c1:c6:79:b5:82:50:24:59:bf:9a:ce:36:4f:20:0c:
                    cb:ec:ce:56:c4:73:0b:fd:73:b9:3f:90:e0:b6:de:
                    69:95:8d:04:ed:a1:ab:7a:0c:35:5c:4c:61:7c:39:
                    1d:43:c6:32:7d:7b:3c:08:c3:c1:b7:14:7f:d7:3e:
                    9a:a4:78:c7:e1:e6:96:0d:a5:84:24:f3:36:f2:16:
                    f2:3f:d0:9f:0d:69:a0:fa:8d:2e:52:5f:d3:e3:bf:
                    dc:1b:56:c9:d3:97:61:5c:32:08:dd:fc:1b:44:6e:
                    61:1e:ca:e3:a9:14:40:fe:e2:7e:94:5d:59:1e:93:
                    89:5e:70:d6:ef:01:4e:fd:de:1c:dc:fe:f6:b2:23:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AE:B2:A0:27:D9:52:0C:61:22:56:E3:2C:F0:D3:6A:63:06:92:9B
            X509v3 Authority Key Identifier:
                keyid:F9:65:AC:00:6D:35:AC:2F:5E:2E:62:B5:3B:B0:AF:0F:D2:7E:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WWsAG01rC9eLmK1O7CvD9J-OjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cb:c3:10:53:05:1a:65:e6:06:28:4e:f3:50:1c:c0:db:b7:
         9a:d4:1a:8f:7a:a0:d8:6c:a9:f9:8f:7d:d8:96:32:02:b1:e9:
         aa:1e:07:83:8a:25:f4:d4:59:7a:2e:50:d2:d6:b9:ac:d8:53:
         8c:a4:91:c7:29:34:b3:02:96:4a:a5:f4:c4:b8:d3:11:4c:ea:
         7a:21:e0:61:3c:37:a0:bf:4b:a3:13:09:96:f1:2b:ab:85:f0:
         ab:92:57:27:8a:b6:d7:40:97:02:a0:1e:63:22:48:5f:9b:75:
         24:99:ee:b1:d2:4c:34:33:bb:41:58:bd:ef:fb:1f:32:a2:fc:
         7a:82:37:60:e1:29:47:8a:25:72:f0:04:57:22:f2:cb:51:aa:
         c5:55:7a:49:3d:93:00:10:f8:f6:11:16:58:2f:3c:70:bb:86:
         1c:ee:4d:89:f5:e7:b8:55:6d:e8:81:82:cf:ad:45:cb:4a:a0:
         77:f0:f5:6c:70:f1:b2:5e:76:25:af:5b:22:fb:9f:88:05:ab:
         98:7c:ce:2a:84:09:1f:a5:7f:d6:c8:6e:25:0b:8e:e6:b0:96:
         42:4c:4c:a4:58:ce:32:12:e9:f7:53:e4:29:84:d8:84:f0:a4:
         4a:07:29:e2:11:97:a1:c7:bb:d2:65:04:47:8a:5e:51:6c:e1:
         21:70:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:32 2026 by rpki-client