Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File:                     WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier:          ijNBNpQ0LLhRXLG+8d9tiz4WDyZRqNZjVru/PHGZ8gM=
Subject key identifier:   D7:B8:F3:46:29:FD:25:FE:20:29:6A:85:E4:36:2E:F2:18:EE:80:BB
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer:       /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial:       01A0DA96D43204930912D92A57D53ED22966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 22:01:52 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:52 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:52 +0000
Files and hashes:         1: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: uRe66ZQoWHiXIVPkOkqxMoVsPyIvEtxiIWm4+KwZMLo=)
                          2: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (hash: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:d4:32:04:93:09:12:d9:2a:57:d5:3e:d2:29:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
        Validity
            Not Before: Sep 25 22:01:52 2026 GMT
            Not After : Sep 26 22:01:52 2026 GMT
        Subject: CN=d7b8f34629fd25fe20296a85e4362ef218ee80bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:0c:1c:3d:33:02:a8:55:16:00:cc:e7:90:
                    5e:4c:07:7b:f1:fc:aa:58:d9:ca:48:b7:5d:81:18:
                    f7:af:86:19:c4:9e:e3:55:e4:ee:ca:05:3e:f2:40:
                    b4:0e:30:af:54:2c:59:eb:64:01:6c:f0:42:ca:5b:
                    70:7e:46:01:73:0d:c1:9a:99:d2:08:39:34:a7:c8:
                    8a:e3:ec:00:5b:cd:66:68:06:44:74:a0:d2:b6:f1:
                    35:36:ac:a7:89:52:fd:cb:1a:24:04:57:90:b4:a9:
                    b2:92:0f:0c:7d:f3:e5:1e:67:0c:8d:a0:aa:33:66:
                    c3:69:0d:54:a4:98:db:cb:24:df:2e:23:55:bd:b0:
                    c6:01:53:34:2f:95:07:24:3c:5c:b0:96:bb:22:50:
                    d6:8e:28:05:65:51:91:ac:c4:11:f8:1e:9c:35:8b:
                    db:24:6c:07:28:27:ca:51:90:ff:ad:8e:06:ce:02:
                    03:2d:3e:26:be:54:b2:59:0f:fe:a9:66:8d:e9:ad:
                    45:16:4c:f5:48:53:65:f5:a8:5f:db:8a:36:b6:12:
                    5b:f1:10:4a:8b:91:8c:fc:8e:c6:da:79:46:92:03:
                    b6:4c:0d:52:ee:2e:9c:85:8b:c9:ec:15:d9:86:89:
                    29:84:59:1f:a0:53:35:d1:13:c6:0a:ad:c2:11:c5:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B8:F3:46:29:FD:25:FE:20:29:6A:85:E4:36:2E:F2:18:EE:80:BB
            X509v3 Authority Key Identifier:
                keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:9d:cf:67:f8:02:e6:f1:17:9b:9f:19:95:41:6e:8b:8c:
         bb:73:ed:77:12:4f:0b:72:6d:1b:56:2a:4c:d9:50:ea:58:67:
         b8:de:7e:06:30:09:31:78:aa:5c:74:af:61:fb:9a:ee:cf:40:
         9f:1c:1f:c1:6e:20:37:f5:1f:d1:28:e9:26:41:85:d4:40:e2:
         33:5c:4e:57:80:b0:5f:b6:b9:9c:fa:a1:34:d1:0b:2d:99:15:
         71:2e:0b:cc:b1:8a:79:fe:77:a5:1a:63:b2:ca:8a:56:b0:78:
         28:0c:a5:2d:c1:d8:94:65:8f:05:2b:c1:c2:86:4f:31:7a:a1:
         2c:83:73:ac:52:ad:b2:77:91:79:57:dc:30:95:4c:05:f8:29:
         91:e9:22:22:8b:00:9c:8b:aa:39:65:d7:4c:27:ab:a4:c1:ba:
         41:70:90:2f:6f:5b:cc:85:b7:4b:8e:3e:a7:e7:0c:39:63:aa:
         05:e6:7c:1f:22:f4:4f:03:96:62:3a:48:2c:c8:6a:6b:93:e6:
         77:03:ed:ff:38:ea:e3:1b:52:88:43:0f:0e:39:e1:4f:5e:30:
         2b:d6:54:50:0d:f7:22:54:c4:19:a6:90:30:2d:f3:b2:eb:11:
         10:27:a4:f3:80:17:34:a1:17:92:c2:9d:79:7e:76:12:8b:2e:
         aa:fe:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:56 2026 by rpki-client