Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File:                     1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier:          zn1PEJYyGEIDqC66jvHfPT9nSgfoH5/O5LtylKOxfsE=
Subject key identifier:   D0:61:D5:97:EF:60:2B:D6:78:91:AC:DC:1A:F1:97:72:A5:90:93:CF
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer:       /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial:       01A000932BF883BFAE1A1C831309CCDA90EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number:          19D4
Signing time:             Fri 14 Aug 2026 14:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:40 +0000
Files and hashes:         1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: 4xOZ6TUE1haqDhFPY/+NTAfqhD7N1/H3HAKW6hdAuu4=)
                          2: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (hash: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:2b:f8:83:bf:ae:1a:1c:83:13:09:cc:da:90:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
        Validity
            Not Before: Aug 14 14:00:40 2026 GMT
            Not After : Aug 15 14:00:40 2026 GMT
        Subject: CN=d061d597ef602bd67891acdc1af19772a59093cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:4c:ba:a5:09:d9:3f:61:1a:c4:bd:12:d9:
                    2e:56:b2:78:0d:11:0a:9f:3c:17:83:68:7a:a2:a2:
                    34:6f:a9:6c:4a:2e:b1:42:3c:af:29:9a:23:1c:62:
                    01:9a:19:c1:f4:51:90:e6:29:da:1b:00:e4:07:82:
                    30:49:de:3f:c6:b7:85:02:9c:e1:11:17:80:03:12:
                    02:aa:52:b7:26:0e:97:8c:52:1f:cb:7f:f6:ee:9e:
                    5e:12:cd:9c:f2:a0:a9:b8:0b:63:65:2e:92:9f:76:
                    85:95:69:3c:24:25:cf:ea:62:20:08:0a:5a:72:65:
                    a9:25:6b:aa:4b:78:b0:61:e0:24:c9:bf:11:e9:74:
                    d7:a9:74:a4:d5:ce:c1:de:8f:9a:b2:c0:b3:58:12:
                    8e:3a:3f:2e:01:1f:08:8b:69:7f:a1:55:32:30:36:
                    73:20:d3:92:8a:3c:8a:90:6f:6b:a8:c6:ba:ae:e5:
                    15:eb:94:af:82:bc:c0:0f:a7:ac:53:3d:17:6c:f6:
                    91:86:d7:83:7e:5f:66:91:7a:b9:c6:27:d1:f3:fb:
                    b6:9c:0d:64:98:34:4a:8f:62:d8:a3:d7:b7:f0:57:
                    8e:e1:77:1b:6a:f8:36:22:9e:2c:25:d3:f5:01:91:
                    86:f1:6a:69:c5:73:64:35:e1:ec:c8:4b:01:36:bf:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:61:D5:97:EF:60:2B:D6:78:91:AC:DC:1A:F1:97:72:A5:90:93:CF
            X509v3 Authority Key Identifier:
                keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:90:7d:95:39:dd:a8:59:da:00:87:f6:fa:28:e7:f2:99:
         65:bf:e4:fb:7f:98:04:fe:05:4f:04:ad:f7:7f:ae:30:d7:0c:
         6e:09:58:c6:1d:c9:53:c0:c6:57:a2:5d:e8:9b:05:81:dd:78:
         30:dc:75:c2:79:2c:10:ac:b5:28:9b:89:78:85:3e:7b:f7:57:
         39:08:85:a9:88:1c:74:20:8e:e2:59:dc:2b:6c:cd:ed:01:1e:
         d7:e8:3d:6e:56:18:f1:bf:a9:73:fd:ed:00:3b:9e:f6:cc:55:
         9c:d8:78:7e:ef:38:74:0b:98:c1:1d:24:35:42:a8:8b:0f:04:
         b9:3b:cd:5a:c7:cd:43:81:8e:6a:81:5f:12:43:dc:0a:b0:6f:
         29:be:2b:9f:69:3d:ed:ea:77:da:3f:41:9b:94:ce:78:ec:10:
         6d:95:d6:0d:3b:9a:81:d9:69:d3:c4:5c:68:8e:ad:66:3e:05:
         ac:ea:e2:8d:c9:61:dc:e6:f8:07:50:de:74:70:2e:47:b4:75:
         2e:94:7b:de:99:7d:a0:24:bc:31:97:3a:3c:0d:eb:60:19:b4:
         16:0c:cf:1e:d8:98:07:0e:58:6f:72:d2:16:63:f9:92:9c:23:
         25:88:8b:bf:86:0f:b8:48:e7:0c:42:5f:ac:61:9b:96:91:79:
         9d:99:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:22 2026 by rpki-client