Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
File:                     1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft (raw, json)
Hash identifier:          gjlN5DZh4W6tGcOzV/tf/ouhmTKdu97Kut3UEyCkxTI=
Subject key identifier:   C7:62:CB:AB:C1:85:0F:9F:A5:04:83:1A:23:D3:47:0E:D7:E7:99:45
Authority key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
Certificate issuer:       /CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Certificate serial:       01A040BBC7A25E9173A4C5B5D31F02AF56C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
Manifest number:          03A7
Signing time:             Thu 27 Aug 2026 01:00:43 +0000
Manifest this update:     Thu 27 Aug 2026 01:00:43 +0000
Manifest next update:     Fri 28 Aug 2026 01:00:43 +0000
Files and hashes:         1: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl (hash: 37o5Eny9ors9ppjaU8DEUJjEEmYg+gMUvll6EPZIjC4=)
                          2: UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa (hash: a+cVa2kzi7Q/+FGH9LfCA4p6Z3qaWMrupfp1ELf+pAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bb:c7:a2:5e:91:73:a4:c5:b5:d3:1f:02:af:56:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
        Validity
            Not Before: Aug 27 01:00:43 2026 GMT
            Not After : Aug 28 01:00:43 2026 GMT
        Subject: CN=c762cbabc1850f9fa504831a23d3470ed7e79945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:f3:65:09:b0:ae:8c:6c:ea:2d:34:e8:f1:
                    30:57:55:ca:4f:51:91:a7:29:96:5c:d7:ba:ae:3c:
                    03:68:f6:82:3e:ff:36:3e:e6:e5:75:2f:43:0b:b2:
                    6d:90:f0:93:ef:05:a0:d7:92:c5:3c:c9:13:ec:96:
                    44:d6:6a:3b:12:5e:91:38:36:17:e3:1e:9c:d1:4b:
                    b0:8b:f1:96:b0:f7:99:11:50:6e:11:ee:e9:dd:9c:
                    43:48:43:5f:19:c3:6c:72:1d:0b:33:56:26:19:5f:
                    31:12:4d:22:b0:9d:94:79:ea:35:01:92:ee:27:b3:
                    b5:3e:2c:37:6d:f4:c3:f8:99:c4:28:58:d5:92:09:
                    23:53:9b:b9:ad:bd:a6:9a:a7:9e:fe:99:91:84:e7:
                    a6:0a:72:11:3c:77:7f:c9:00:b6:4f:d4:d1:18:22:
                    45:01:40:76:59:26:72:70:7d:96:41:68:ca:a8:6e:
                    84:f6:1c:32:ef:d3:9c:6c:3c:d8:40:5a:98:0f:ea:
                    23:0c:7f:24:07:72:8a:06:46:16:3c:8d:44:5d:1e:
                    d7:50:64:d7:a7:08:12:85:b3:f1:03:03:c7:27:28:
                    ed:f4:42:06:1c:62:1e:8b:a4:f4:6b:88:de:1b:c7:
                    bb:8e:0e:eb:a6:38:0e:2c:e4:eb:04:29:c3:3f:e4:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:CB:AB:C1:85:0F:9F:A5:04:83:1A:23:D3:47:0E:D7:E7:99:45
            X509v3 Authority Key Identifier:
                keyid:FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:c9:bd:fb:0d:58:7c:82:ef:9b:94:1e:c6:27:10:7d:1a:
         82:3e:89:0a:30:17:6c:bd:40:6c:ab:5c:ea:da:cf:b5:85:54:
         c3:2b:20:b6:71:cd:6a:c9:cd:05:aa:76:ce:0b:bf:94:49:2f:
         f1:48:94:eb:ef:ac:aa:a9:95:50:bc:ce:77:59:7b:d8:0c:2f:
         c3:82:59:7e:73:41:8a:60:20:d7:74:10:81:78:2d:f6:7d:a4:
         bb:f3:ab:5c:7d:e8:30:66:0f:a2:ad:24:25:d0:e3:30:ce:eb:
         ec:a3:94:31:c6:1a:77:b4:72:df:15:3e:aa:c6:d4:6d:50:5f:
         c0:74:ad:ad:26:58:68:d3:61:76:a6:2b:ee:b1:41:35:1c:3d:
         aa:7a:8e:4b:dc:99:9a:64:b0:13:78:ad:62:71:d2:27:e1:f5:
         d4:6b:fd:3b:62:d0:66:a5:fe:53:2a:b3:67:be:2a:36:6a:28:
         66:ed:eb:c8:e2:7e:de:9e:9d:1a:f2:cc:16:c2:68:2f:42:44:
         2f:3f:38:5a:f1:03:dc:15:7f:5d:f4:88:93:00:b3:6b:b1:4c:
         87:e4:8e:02:15:d0:a8:bb:9f:8c:a1:b2:65:7d:88:5f:27:b4:
         eb:ed:26:6e:f4:52:b7:ac:cf:de:95:9a:e2:77:61:65:d7:34:
         9e:79:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:42 2026 by rpki-client