Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
File:                     WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft (raw, json)
Hash identifier:          XWITnv6o7IMR0vnjDQ5UCifL9+bc7Ni4+OLz1Gw1OLc=
Subject key identifier:   39:73:C9:06:19:CB:8B:BF:2F:9A:A7:A1:76:DE:D5:ED:4A:39:AB:38
Authority key identifier: 58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46
Certificate issuer:       /CN=580de65241f763d6908d01a443ddf594220c0f46
Certificate serial:       019FF7FEC99A2D595EC19DEE255974C2BA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
Manifest number:          2B
Signing time:             Wed 12 Aug 2026 22:01:37 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:37 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:37 +0000
Files and hashes:         1: WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl (hash: HXA89FyK2j+PD3JIDysr6tyLakUD0OKjz20xKAzl6h0=)
                          2: ZSIyFnlfJZuqIU-6QI9Jt6BhStQ.asa (hash: yafPGi/4cIiLIirWhcmLE4fOTcFchmZLLaICx5mS/sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:c9:9a:2d:59:5e:c1:9d:ee:25:59:74:c2:ba:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580de65241f763d6908d01a443ddf594220c0f46
        Validity
            Not Before: Aug 12 22:01:37 2026 GMT
            Not After : Aug 13 22:01:37 2026 GMT
        Subject: CN=3973c90619cb8bbf2f9aa7a176ded5ed4a39ab38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:ad:3b:3b:16:9d:94:21:48:9a:7c:9b:c4:
                    33:75:7e:fa:72:82:17:1b:d9:5b:f0:77:2b:34:3d:
                    f8:35:b9:88:e9:85:09:a9:ed:b4:2a:fc:25:d5:2f:
                    ed:22:f2:49:8d:5b:1d:ac:79:b2:e5:ce:9c:5e:29:
                    a1:68:f0:19:cc:69:86:1d:94:02:64:41:24:a7:fb:
                    15:95:ee:d4:b7:48:15:c9:d6:f6:e1:2b:17:2a:a3:
                    e2:73:fe:d0:1b:ca:68:e7:32:d4:8e:bd:fd:da:77:
                    43:a8:92:f6:f2:27:17:40:e5:45:07:28:10:8b:c3:
                    56:0b:e0:cb:7d:e7:47:44:66:c3:99:e5:f8:49:32:
                    d1:cb:ed:22:e6:8c:98:63:d7:a8:7b:6f:5b:1c:6c:
                    23:14:79:76:b3:6e:5c:26:55:f4:72:0b:21:0d:cf:
                    41:1f:2c:69:04:38:d1:bd:8f:fe:71:af:d9:37:82:
                    46:f9:06:1c:56:ce:85:2d:53:4b:78:4f:a0:9f:92:
                    5e:37:1b:a1:3f:17:61:31:85:38:e6:43:e1:22:5b:
                    c7:ae:9c:eb:23:05:56:a2:aa:06:6c:21:53:28:88:
                    4c:92:b6:45:c3:6e:cc:05:09:36:47:6b:9b:06:65:
                    9b:cf:ee:7a:5a:8b:61:3b:cf:88:69:75:3e:3f:31:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:C9:06:19:CB:8B:BF:2F:9A:A7:A1:76:DE:D5:ED:4A:39:AB:38
            X509v3 Authority Key Identifier:
                keyid:58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:b8:1c:91:19:8b:93:e9:8a:b8:9c:ef:8a:ad:b2:a5:00:
         c9:e0:20:cf:19:24:65:05:46:81:4a:e9:2c:12:2d:33:d2:01:
         3c:de:f2:9d:3c:3a:ac:5a:29:4e:97:38:d8:7d:bb:dc:df:45:
         17:65:6b:3a:f3:14:2c:a7:68:8f:c6:4b:f1:43:c1:99:f8:34:
         14:db:91:8b:4b:4d:b5:5d:37:4e:f7:45:92:fe:b4:ff:68:21:
         e8:68:ad:91:63:21:28:b5:ab:c8:9b:5d:a7:b3:b4:c5:1b:d8:
         36:84:2b:55:ee:9e:e5:bb:db:58:9f:a8:90:eb:ef:59:e3:1b:
         ef:93:57:cd:22:cc:f8:18:e8:5e:0e:c0:c4:81:2f:1f:dc:da:
         87:3e:53:86:ae:93:1c:1c:ed:1b:a4:f7:de:0e:d7:dd:4d:40:
         31:58:65:64:d8:91:8b:ad:ee:66:e6:cb:f4:cd:f1:01:1b:13:
         7f:8c:52:a9:83:98:c9:d0:a7:09:50:fd:db:91:0f:47:50:05:
         08:cb:00:f6:24:11:50:dd:c7:74:11:df:e5:e5:2d:5f:c1:a7:
         23:a2:ac:fe:ac:42:e1:a3:d3:e7:2f:00:c2:3b:55:96:e9:90:
         99:c8:67:7f:6f:12:02:7f:fb:08:f0:6c:45:d8:88:91:af:cd:
         f2:35:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:27 2026 by rpki-client