Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
File:                     Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json)
Hash identifier:          zgYRugWGz5tZ7LriLkkVzhWv7sxVxyUaeMzHh3zsI8g=
Subject key identifier:   3A:E8:C3:A3:78:3C:6F:8B:4C:43:D7:1B:16:0D:1B:E5:43:4F:60:8D
Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
Certificate issuer:       /CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Certificate serial:       019FA0A8AF8420639343C7F510596F4F42D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
Manifest number:          01E6
Signing time:             Sun 26 Jul 2026 23:00:37 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:37 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:37 +0000
Files and hashes:         1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: bQ3vHkhoFYHqDGyEluffCrTp22BYSgfrT63xjsr59eA=)
                          2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:af:84:20:63:93:43:c7:f5:10:59:6f:4f:42:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928
        Validity
            Not Before: Jul 26 23:00:37 2026 GMT
            Not After : Jul 27 23:00:37 2026 GMT
        Subject: CN=3ae8c3a3783c6f8b4c43d71b160d1be5434f608d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:b4:ca:ad:f1:67:f1:7b:4a:98:de:73:8d:
                    20:f5:3e:29:c2:39:9e:9d:71:82:1b:5b:c3:7e:98:
                    f0:20:00:41:2d:63:e0:89:aa:40:3b:33:ce:7d:b7:
                    fa:b3:32:a6:11:ad:cf:dd:12:37:5d:0a:b4:a5:26:
                    f1:42:34:02:7d:ff:5a:6b:52:91:25:ea:2a:6e:5d:
                    9c:bf:d2:12:63:43:8b:aa:20:2b:d0:43:e9:57:d0:
                    c4:ed:8a:2b:fd:8c:91:a7:3f:e7:e4:eb:3a:43:af:
                    f0:cc:a4:2e:57:3d:ba:bf:89:5c:44:43:42:0a:c6:
                    ed:59:e8:19:62:66:c3:f8:d7:df:fd:49:17:07:f5:
                    e6:b6:53:08:fd:83:d2:93:db:7c:76:71:8f:35:88:
                    c1:84:52:26:ee:67:d2:16:18:80:0e:5c:c5:6e:43:
                    a4:b9:6a:ff:95:ac:df:9b:3d:36:d5:c0:e6:b8:65:
                    48:bd:23:7b:13:02:ac:60:3c:eb:35:99:65:33:52:
                    1c:ca:2b:90:12:d0:95:f6:75:8a:0f:2a:b0:2d:cf:
                    ba:49:32:d9:74:d5:fa:07:93:c4:e4:4d:95:9b:85:
                    05:85:4a:67:5c:19:ac:93:7f:3c:96:24:11:81:a2:
                    91:b2:22:8f:c5:bc:11:dc:55:10:fc:23:28:0b:c5:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:C3:A3:78:3C:6F:8B:4C:43:D7:1B:16:0D:1B:E5:43:4F:60:8D
            X509v3 Authority Key Identifier:
                keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:5c:b8:2c:52:4c:b3:5e:27:10:36:c2:02:60:2b:65:02:
         19:d5:1c:7f:5f:96:c6:71:95:95:7f:4f:b4:93:0b:de:7a:ec:
         cf:08:f4:5b:f0:cf:4a:26:62:26:3c:c6:cb:a5:a2:2c:78:13:
         ba:3d:f6:5b:4a:bc:db:9d:55:54:ba:78:2a:d7:43:eb:c8:97:
         33:82:95:9e:09:4d:3c:d4:2e:9e:89:0c:1b:db:68:84:b7:9f:
         0e:40:12:94:09:9c:9e:d1:28:fd:ff:23:5c:c2:bc:47:23:3b:
         66:76:f5:59:27:a1:b7:5d:3f:a4:b5:7e:c1:e2:a1:f5:93:a6:
         6f:ab:e8:8b:19:0b:89:34:79:c2:fe:5c:8c:ba:d3:56:41:c4:
         18:c0:f7:b4:e3:84:e6:11:a4:66:80:ba:54:84:c0:cd:90:8d:
         6c:61:ba:df:7f:b0:e9:7c:a2:57:0b:6a:9e:c3:5c:4f:8e:19:
         c6:fc:29:c1:32:88:aa:94:89:c5:15:05:03:86:16:68:e9:15:
         f8:46:ea:2c:66:05:ae:fe:82:29:54:d3:b3:18:27:34:28:8c:
         9c:17:43:4d:6d:90:da:b9:93:df:3f:4d:a0:2d:36:2b:bd:5e:
         dc:4e:ae:19:e2:4d:c8:92:9b:55:ae:bd:18:02:a2:01:0f:81:
         bf:73:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:47:06 2026 by rpki-client