Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File:                     1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier:          WV6ky4ebCIBCHxjovr1AOc4tp8ZUAzUQjhXumuB9Tqw=
Subject key identifier:   7D:CE:D8:EF:BE:83:E1:EB:E1:A8:CA:AF:AD:9E:08:01:01:00:93:23
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer:       /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial:       019E1D59176A3303E0950D75137629E355DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number:          02A5
Signing time:             Tue 12 May 2026 18:00:38 +0000
Manifest this update:     Tue 12 May 2026 18:00:38 +0000
Manifest next update:     Wed 13 May 2026 18:00:38 +0000
Files and hashes:         1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: TcdUoGZwkeDOnQevlilxKr6aTSQZ+B2lOD+d33nA/58=)
                          2: fGmytEtcKCBxP_COaX3EzxixmEo.roa (hash: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:17:6a:33:03:e0:95:0d:75:13:76:29:e3:55:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
        Validity
            Not Before: May 12 18:00:38 2026 GMT
            Not After : May 13 18:00:38 2026 GMT
        Subject: CN=7dced8efbe83e1ebe1a8caafad9e080101009323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:77:bb:13:4d:4f:18:c4:7a:fb:e3:b9:ec:
                    da:64:9f:d0:36:f7:55:4c:69:ba:64:68:98:86:66:
                    e4:7e:1a:f6:ec:af:83:49:9e:13:59:f8:ba:49:0a:
                    5e:40:d6:f3:1a:92:b2:55:20:cd:fa:5c:63:31:b3:
                    3e:46:75:56:25:37:1b:ad:00:d9:4e:df:bf:7f:30:
                    1d:35:79:49:c2:53:d5:eb:8f:d6:d5:de:06:6b:ef:
                    bf:1a:f1:24:21:e5:a9:93:9f:f0:da:95:d7:65:b4:
                    e0:0a:e6:2e:93:a4:fa:ec:6a:5d:b6:e4:6b:04:96:
                    d2:57:52:a5:3a:e0:3d:44:f6:f6:c9:dc:fb:c9:ff:
                    48:79:53:73:52:1d:08:39:60:86:1d:56:fe:f6:1c:
                    63:78:4b:9d:e5:37:7e:8e:89:75:6b:f2:91:7e:51:
                    2d:5b:73:6a:40:22:13:d2:03:52:17:75:64:19:21:
                    1d:9b:b5:2b:62:a2:8a:58:e8:a6:77:b2:93:18:44:
                    c0:7d:dc:34:8b:74:ee:50:52:ab:cf:52:ed:8e:58:
                    40:64:8f:a9:df:a1:3e:38:6d:b9:b3:52:ab:32:e2:
                    99:31:f6:c7:a5:fa:b4:ce:8b:89:e4:94:2d:a3:f4:
                    25:6f:67:29:80:7a:58:91:6b:f2:d9:35:0e:50:57:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:D8:EF:BE:83:E1:EB:E1:A8:CA:AF:AD:9E:08:01:01:00:93:23
            X509v3 Authority Key Identifier:
                keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:43:cb:1c:ce:44:79:a8:c8:48:1a:fc:44:7a:f7:a1:87:76:
         1a:f1:e9:89:6e:31:69:13:36:5c:69:fa:0b:71:e6:74:9a:90:
         ff:a1:79:a7:a6:b2:e0:82:25:ef:79:11:29:bd:d9:fe:da:af:
         59:61:43:8f:2e:1c:67:9a:9e:8f:95:d6:7c:41:92:89:e0:a1:
         03:cf:e6:b0:7b:bf:4a:96:55:a0:18:08:87:ba:4e:9c:69:64:
         62:f5:c8:47:08:7f:61:c0:93:8e:3a:08:a1:58:c9:83:e4:81:
         20:5a:be:37:16:ad:d9:01:57:c3:7c:68:c1:4c:8c:4a:76:ba:
         bb:ec:41:80:b5:3a:b9:d7:42:e6:28:c4:a2:11:66:02:3a:fd:
         89:19:ac:de:a8:be:a1:51:9c:5f:b9:17:d2:13:95:19:c4:c8:
         05:b4:a8:f1:e7:41:22:d3:eb:f3:18:a1:6b:96:75:b1:2f:ed:
         5d:58:36:d5:31:a5:6c:65:c3:4a:54:46:f2:59:7d:1e:48:55:
         7f:85:cb:4d:3a:e4:c7:ac:61:0c:8f:cc:0f:a2:51:99:81:ed:
         86:df:a4:c1:48:fe:c6:86:48:e8:50:8c:83:2b:e7:9d:ad:05:
         45:55:16:1c:56:af:c8:36:8f:56:be:52:75:20:9a:a5:72:96:
         42:83:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:45 2026 by rpki-client