Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft
File:                     1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft (raw, json)
Hash identifier:          2ZAawS1Hwpmra6M3IbhYSo6gzDjPAEM47VAU3PueBn0=
Subject key identifier:   49:2C:7D:A8:DF:C1:16:8A:2A:31:36:B8:99:5E:5A:26:49:50:73:5B
Authority key identifier: F9:65:AC:00:6D:35:AC:2F:5E:2E:62:B5:3B:B0:AF:0F:D2:7E:3A:31
Certificate issuer:       /CN=f965ac006d35ac2f5e2e62b53bb0af0fd27e3a31
Certificate serial:       01A040BC9F3C7AFBB7FB4BF0BF70A6FA781C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WWsAG01rC9eLmK1O7CvD9J-OjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft
Manifest number:          0154
Signing time:             Thu 27 Aug 2026 01:01:38 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:38 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:38 +0000
Files and hashes:         1: 1-WWsAG01rC9eLmK1O7CvD9J-OjE.crl (hash: /Po6OKtwvLSLcgdiHmQjaSZ+SB0GpOtXd3osjmjpCZs=)
                          2: y95HZtf6ljFTlQS7GT9uqXnjJnI.roa (hash: 72ysblRdwkofAQYbkGbuUgIvvVzilyYh8p5im2o/LE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WWsAG01rC9eLmK1O7CvD9J-OjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:9f:3c:7a:fb:b7:fb:4b:f0:bf:70:a6:fa:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f965ac006d35ac2f5e2e62b53bb0af0fd27e3a31
        Validity
            Not Before: Aug 27 01:01:38 2026 GMT
            Not After : Aug 28 01:01:38 2026 GMT
        Subject: CN=492c7da8dfc1168a2a3136b8995e5a264950735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:8c:1b:9a:43:fd:e8:41:07:22:6a:23:13:
                    e7:1e:8e:58:43:36:89:f5:f5:ef:9b:f1:81:c0:2f:
                    f4:23:a8:3d:89:3c:6a:25:e4:e9:d6:34:8a:cb:1c:
                    f9:e0:15:85:4d:4e:e0:34:79:ad:0c:31:f6:ad:04:
                    94:85:c4:04:ff:7c:28:83:aa:97:68:c8:22:c9:bd:
                    94:07:d6:5a:4a:3a:b1:a5:7b:47:ed:ab:36:95:85:
                    66:3a:69:f9:4c:30:01:3d:44:00:a0:08:c6:6a:bf:
                    99:bf:31:05:d3:75:3c:f9:47:41:27:a3:95:d5:99:
                    db:42:a7:a9:69:d4:6c:d0:28:ab:a1:23:fb:2d:42:
                    d9:4e:b4:be:72:31:9a:75:4f:0e:1e:9b:2c:86:a7:
                    f1:58:e7:4a:9c:98:69:64:69:3f:35:11:1c:e1:cb:
                    39:89:dc:7d:61:3d:c9:94:71:7b:65:03:1a:93:cd:
                    f2:92:44:ec:f4:55:c2:d9:4c:6c:1f:ed:6c:be:b7:
                    35:c8:9a:62:ed:33:5a:c2:ef:ea:38:ae:89:56:0e:
                    6e:9d:92:2a:0a:85:12:1b:0b:cc:39:77:96:4d:be:
                    17:14:f5:98:b7:25:df:bc:85:d3:d1:eb:37:dc:71:
                    70:4f:82:1f:a0:8b:a1:bb:2a:30:04:ba:6c:07:98:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:7D:A8:DF:C1:16:8A:2A:31:36:B8:99:5E:5A:26:49:50:73:5B
            X509v3 Authority Key Identifier:
                keyid:F9:65:AC:00:6D:35:AC:2F:5E:2E:62:B5:3B:B0:AF:0F:D2:7E:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WWsAG01rC9eLmK1O7CvD9J-OjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2c2115-40d8-4c33-8da4-17aecd777ae7/1/1-WWsAG01rC9eLmK1O7CvD9J-OjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:26:c7:4e:21:d3:30:21:ed:73:dd:5d:bb:dd:b0:5b:7b:
         de:84:11:98:66:a0:e8:87:40:92:22:9c:bd:5d:82:be:bf:6f:
         10:c3:4c:a4:dd:a5:84:4a:d4:a4:77:c1:97:8c:3e:be:df:96:
         8e:bb:dc:a3:c9:46:cd:92:c2:a0:e5:e5:2d:5a:24:13:6a:c8:
         05:27:e2:47:1f:b9:41:2e:4b:f1:12:ee:21:d0:f9:43:06:57:
         1a:5f:94:01:12:01:1e:07:ac:b2:bc:f2:62:f2:14:5f:9d:fc:
         ae:38:c6:51:e5:c7:52:5c:bd:cf:0f:b5:ca:99:f6:37:b4:d9:
         60:ee:49:98:e8:77:22:ba:3a:e2:c4:7c:f9:65:53:39:9d:0c:
         ef:fa:88:8c:8f:a5:bf:cc:a8:30:0e:22:7d:04:44:12:16:af:
         cf:4a:a8:82:4e:13:9e:ed:20:91:3d:a6:a9:9a:20:e8:90:09:
         8d:eb:2e:f1:76:47:79:af:7d:60:c0:7a:17:54:fa:9c:19:37:
         78:93:f7:d8:22:90:58:17:67:0d:49:ec:97:29:30:ba:15:f7:
         3b:3e:9e:d8:37:94:3b:81:0a:e8:d5:45:c6:7e:75:b7:b8:a3:
         61:66:b9:81:51:12:e8:0b:88:94:3a:7c:09:86:cd:3e:c5:c3:
         3d:4e:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:38 2026 by rpki-client