Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
File:                     WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json)
Hash identifier:          1s1ycSUgrqPo+bqJKNavTlxekyxJiue/mfNxr2Pousg=
Subject key identifier:   13:0A:46:87:28:CB:60:14:6F:23:28:A0:9F:6F:59:37:4C:8D:19:1C
Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
Certificate issuer:       /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Certificate serial:       01A102492AF395D7487661967110BE305E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
Manifest number:          0AEA
Signing time:             Sat 03 Oct 2026 15:01:51 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:51 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:51 +0000
Files and hashes:         1: LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa (hash: R6ey8Uqth1/igLWVfN/TR2Eu26hppMIiB0ByyHlPk3A=)
                          2: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: v7hOtFaOcJRCEmwdPGbCjON5LQDRXjgrcMGA9e6KXf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:49:2a:f3:95:d7:48:76:61:96:71:10:be:30:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
        Validity
            Not Before: Oct  3 15:01:51 2026 GMT
            Not After : Oct  4 15:01:51 2026 GMT
        Subject: CN=130a468728cb60146f2328a09f6f59374c8d191c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:06:33:ab:b3:22:dd:e0:0a:4b:63:31:17:
                    16:23:0b:64:65:18:1c:5b:fb:9b:4a:46:81:9b:db:
                    13:ea:75:2c:64:b8:79:0c:ac:ed:a6:48:ac:6e:ac:
                    ac:85:1d:f5:a5:e3:10:1d:34:85:66:e4:38:9f:db:
                    ff:3d:22:61:e9:e9:b6:d2:d3:fc:b8:8b:6d:b8:c9:
                    cb:dc:2e:27:4c:48:36:ca:69:37:f3:0f:4f:52:8b:
                    f5:6d:2e:6a:89:9e:00:2c:73:75:7f:01:89:ff:95:
                    04:cc:2c:b9:1e:1f:fd:4b:d9:3e:53:16:08:0c:2f:
                    6a:c3:16:9b:82:72:12:c6:65:45:21:1a:34:11:3e:
                    b1:42:a8:f8:72:85:59:41:8d:de:4e:a6:db:61:81:
                    f9:ca:6c:f1:6c:a7:d4:d7:b6:ad:4d:5b:5c:40:89:
                    0f:32:84:6b:94:6b:b2:dd:3e:8b:9a:bd:eb:49:94:
                    a6:4d:84:74:41:a0:f0:48:be:b5:86:3e:bc:50:55:
                    77:86:7f:23:87:c9:fb:94:08:ff:ad:f3:7c:05:e2:
                    e8:a2:10:37:63:4b:61:0a:c3:4c:44:a4:1e:58:8b:
                    8b:af:dd:f1:85:a5:6b:b6:97:6e:b4:de:4c:e4:09:
                    a0:a7:7e:bf:33:6b:a0:61:eb:00:5a:71:a4:db:3e:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0A:46:87:28:CB:60:14:6F:23:28:A0:9F:6F:59:37:4C:8D:19:1C
            X509v3 Authority Key Identifier:
                keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:57:7d:47:5a:6e:13:47:1d:30:a5:25:d4:95:ac:db:41:
         81:46:ce:9e:64:17:c6:18:22:73:53:03:01:3e:8f:92:a0:61:
         41:ce:fe:a4:63:91:51:96:87:e2:ee:f4:9d:8d:50:c0:d3:cd:
         69:38:95:0e:c1:a3:60:d5:af:5c:c7:15:62:c5:58:60:83:56:
         b3:03:8f:2e:77:f1:95:39:37:1d:a7:36:2d:07:55:11:a9:a0:
         6b:92:ba:7d:2b:95:93:90:0f:31:ed:39:aa:32:d6:cb:5e:d2:
         e6:8f:dd:1e:91:43:45:a5:89:13:cd:3c:9f:49:33:bc:d4:f1:
         07:51:c6:37:f4:8b:42:c9:0b:5f:97:a3:d8:74:f9:dd:57:06:
         82:6b:3c:33:8a:78:1e:91:f2:e8:44:de:4c:9d:6e:32:c9:7b:
         68:37:c9:09:36:53:40:a0:76:e0:f4:3a:29:e2:7b:6e:a8:62:
         03:37:d3:3d:64:32:07:36:8b:6f:37:36:83:f6:00:fe:31:43:
         ca:30:5a:3f:3c:3c:fd:23:fa:b4:a2:a6:ef:a3:44:1e:f2:96:
         c7:08:2b:a0:ab:d6:a5:b7:d4:6f:6e:df:6d:f3:94:e9:9e:7c:
         d1:37:2b:46:61:9b:7c:0e:8d:7c:c9:9e:4d:cd:2a:4d:95:84:
         b3:16:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:29 2026 by rpki-client