Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
File:                     Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft (raw, json)
Hash identifier:          J0SYbKhMJKFrLU9UHsrWjr5wEIUjZSqASL0KD/SGXBw=
Subject key identifier:   38:F6:53:8B:33:66:57:9F:AB:C2:2E:BF:25:E2:59:54:28:49:67:0E
Authority key identifier: 59:AF:A0:C3:F2:81:13:AC:67:A1:E8:19:20:80:CD:E1:C3:58:30:F0
Certificate issuer:       /CN=59afa0c3f28113ac67a1e8192080cde1c35830f0
Certificate serial:       01A0FF7F1B7B6EF6980A7496EFC42DDDD077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
Manifest number:          0201
Signing time:             Sat 03 Oct 2026 02:01:55 +0000
Manifest this update:     Sat 03 Oct 2026 02:01:55 +0000
Manifest next update:     Sun 04 Oct 2026 02:01:55 +0000
Files and hashes:         1: Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl (hash: W+McXFNcPLgvqdDqFHnJo7gsc1eJnCoVelBUpWy1p/o=)
                          2: ypii_wNcb-AwsNun99iVhbi3Qn8.roa (hash: 8vPnAsYHQ7w1UcsG/vmQIGbDPUOOaSicezwJeTgu3gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:7f:1b:7b:6e:f6:98:0a:74:96:ef:c4:2d:dd:d0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59afa0c3f28113ac67a1e8192080cde1c35830f0
        Validity
            Not Before: Oct  3 02:01:55 2026 GMT
            Not After : Oct  4 02:01:55 2026 GMT
        Subject: CN=38f6538b3366579fabc22ebf25e259542849670e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:40:4c:61:49:e0:66:5f:d3:a0:08:8d:80:
                    27:cf:61:f7:40:37:48:a6:e1:ed:f0:65:3d:73:17:
                    77:40:b9:88:03:3d:ef:de:d1:b0:e8:00:ea:23:8d:
                    49:4a:49:99:95:35:5c:ef:35:d3:d6:23:1a:d4:87:
                    53:39:09:42:8e:94:51:d5:98:09:b3:e5:35:75:0c:
                    91:37:34:83:6b:7c:58:59:40:b9:78:1b:fc:a3:9e:
                    55:ec:05:e0:fa:95:eb:6b:0c:82:27:d9:82:af:92:
                    d3:cd:57:27:61:b0:1a:d6:05:14:c9:e8:2e:2b:57:
                    19:b7:d1:de:9d:b7:de:aa:db:51:20:b2:f8:1c:ae:
                    08:6c:b8:30:c4:45:42:ab:6b:6f:33:8f:b3:bd:97:
                    7b:56:2e:fa:52:b6:39:91:ab:24:8d:d1:f4:c4:a4:
                    c1:a1:ce:1d:ca:2c:f1:db:5d:df:e0:36:71:8b:90:
                    3b:1b:19:89:12:9b:59:c4:1c:c6:18:ce:19:9c:5b:
                    0d:39:ca:85:78:bf:06:42:e1:c6:75:68:4f:9f:9f:
                    63:43:54:d8:91:50:60:3c:88:ae:05:4e:ab:12:4e:
                    da:ce:41:93:20:67:de:17:06:f4:32:4e:e8:d1:08:
                    8e:4c:f3:7b:d6:d7:a9:c5:03:c9:99:77:e7:a6:04:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:53:8B:33:66:57:9F:AB:C2:2E:BF:25:E2:59:54:28:49:67:0E
            X509v3 Authority Key Identifier:
                keyid:59:AF:A0:C3:F2:81:13:AC:67:A1:E8:19:20:80:CD:E1:C3:58:30:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:5b:4b:a1:4e:75:db:76:94:b5:92:a6:5f:bf:3f:94:84:
         5a:a0:01:d5:a5:29:50:aa:e5:45:c9:ff:4c:05:6b:db:6f:3d:
         10:c2:7e:ae:86:1d:04:d6:f8:fd:ae:9b:b5:ac:d1:27:2f:78:
         26:00:ec:7c:1b:fb:44:8f:43:67:7d:3e:b8:b9:08:a8:77:3a:
         c3:02:9d:57:36:a9:19:f8:6e:8a:72:db:c2:7b:47:6c:ec:46:
         74:bb:38:12:2e:f0:1a:d1:3e:ea:db:b3:1d:e9:1c:40:42:74:
         3b:51:01:bd:2a:e8:db:14:05:5d:e1:48:f8:97:d6:26:8c:62:
         c2:16:29:ae:e0:cb:70:de:66:c5:cb:d7:ca:51:55:ae:ab:48:
         ed:cc:1d:cc:b2:9d:08:92:3a:20:db:d2:f9:91:74:7b:35:2e:
         56:25:de:7b:65:f1:d1:f3:f4:94:56:f1:5f:db:42:bd:f6:2d:
         27:43:24:79:2b:59:ae:df:71:61:1b:a0:a0:5d:86:2f:e3:f4:
         e1:14:2b:51:e0:5c:ef:69:95:1f:e3:f5:48:7e:e6:d5:75:24:
         2f:98:b5:51:ca:4e:8f:cb:2d:58:71:7a:86:a5:f4:af:49:45:
         86:0e:c3:12:69:ef:6e:81:63:f8:56:d2:a7:f5:b2:8c:22:2a:
         d7:de:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:13:15 2026 by rpki-client