Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File:                     1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier:          0KMa91Z+c/SuCuj85oh/R4fnPwlkAmx+rgezjIjQ+MI=
Subject key identifier:   C6:43:13:78:0F:34:E2:05:AD:F9:F8:98:D2:AA:CA:8C:F3:7A:BB:90
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer:       /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial:       01A129FAB7F42D182D7DB245D4907AEA08AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number:          05A8
Signing time:             Sun 11 Oct 2026 08:00:59 +0000
Manifest this update:     Sun 11 Oct 2026 08:00:59 +0000
Manifest next update:     Mon 12 Oct 2026 08:00:59 +0000
Files and hashes:         1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: dv3Z/YvqFpH0S2ZisvmywfEGIJ6KY33hJ+MEFTy5jMI=)
                          2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:fa:b7:f4:2d:18:2d:7d:b2:45:d4:90:7a:ea:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
        Validity
            Not Before: Oct 11 08:00:59 2026 GMT
            Not After : Oct 12 08:00:59 2026 GMT
        Subject: CN=c64313780f34e205adf9f898d2aaca8cf37abb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:e0:4f:36:d5:b6:ec:29:b8:7b:49:d1:98:
                    56:5f:26:91:89:32:b4:5b:b7:c1:25:86:e1:99:26:
                    19:c1:c0:75:ee:d0:1f:c5:dd:ca:a5:16:d9:33:10:
                    27:cc:66:db:2d:ad:0d:12:5e:bf:21:8d:a8:1f:15:
                    ed:e9:d0:d8:60:80:14:7c:11:9a:d6:2e:7f:3f:05:
                    ac:3a:8c:5f:59:98:52:1b:a9:54:3a:1f:b5:62:f2:
                    a5:79:23:b7:30:02:00:f8:a2:2a:78:33:4d:a7:1f:
                    23:ed:03:e3:24:b8:ff:ab:59:f6:97:c5:64:34:53:
                    85:cc:f2:2e:ef:40:63:f4:58:d0:d3:4d:a7:c2:b6:
                    75:d0:a1:52:14:b7:f6:e3:c5:9a:69:4c:f2:0c:ab:
                    48:39:15:09:4b:7c:e3:dd:c9:66:94:94:fe:62:e7:
                    e3:17:62:80:af:0f:3f:04:2f:1c:e2:2f:e3:e8:1f:
                    6b:7f:b4:f2:76:86:ca:cb:b5:f2:e0:24:63:06:44:
                    b0:70:ea:d0:1b:91:3c:32:01:db:e7:41:4e:6d:6a:
                    6f:e5:04:e0:05:c8:37:d8:41:ff:ea:ca:24:c0:3f:
                    41:32:19:62:92:74:e1:1f:10:cc:90:02:0a:0c:48:
                    a5:be:af:87:88:ea:9e:05:56:91:09:97:dc:48:3c:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:13:78:0F:34:E2:05:AD:F9:F8:98:D2:AA:CA:8C:F3:7A:BB:90
            X509v3 Authority Key Identifier:
                keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:14:64:ba:37:03:d1:24:eb:88:ed:2f:f2:ed:a9:26:41:
         b6:1f:84:b5:c3:d0:0f:91:21:6a:a7:a2:03:f9:f1:6f:96:10:
         03:21:62:29:0d:17:99:6f:85:08:71:53:f2:85:df:64:f1:97:
         93:ba:46:31:15:3e:95:da:67:dd:cd:b2:1a:7b:2f:7d:c3:4f:
         04:5a:c5:8d:f4:82:cc:4d:33:18:f7:27:c1:19:fc:0b:61:81:
         86:cc:fd:31:bd:4b:5a:9c:5e:2e:d5:73:52:ea:8d:43:81:96:
         04:85:22:87:15:72:62:f7:f4:43:92:64:3e:81:65:bd:55:76:
         2d:5a:e2:71:e4:70:4f:42:5c:88:5f:5d:ae:6b:3d:54:5c:d9:
         e2:6b:59:b6:08:59:a9:d0:3f:30:e8:e0:40:6e:f0:51:c5:b7:
         12:16:24:aa:55:9d:1a:38:53:14:68:ef:d4:4a:12:e1:10:c5:
         b1:9c:8c:bd:54:7f:7f:ec:9d:5d:c8:0e:b5:5d:d7:de:7e:c7:
         ec:db:c0:8f:e4:46:d6:9a:18:36:4a:97:5c:20:2e:ea:3c:b6:
         bb:51:6d:91:92:07:56:d2:0f:02:82:62:7a:5f:0d:a6:aa:3b:
         97:2f:b0:26:82:2b:48:bc:5d:a4:7f:c7:13:3c:0b:82:ad:7f:
         4c:9a:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:36:48 2026 by rpki-client