Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft
File:                     WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft (raw, json)
Hash identifier:          SJ6OzRX5OsWg8faR5PNOFCZlOGhm9M1mmmZMZ0hxtD0=
Subject key identifier:   44:99:65:6D:A7:2C:BF:47:C5:70:06:A0:F2:F0:9F:25:1F:82:5E:62
Authority key identifier: 58:15:A3:E0:95:9D:E2:F2:7B:45:E7:1D:2A:84:FF:53:5F:81:63:B2
Certificate issuer:       /CN=5815a3e0959de2f27b45e71d2a84ff535f8163b2
Certificate serial:       01A06E712FD16475594D179F1DBF6CCABC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft
Manifest number:          CA
Signing time:             Fri 04 Sep 2026 22:01:46 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:46 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:46 +0000
Files and hashes:         1: WBWj4JWd4vJ7RecdKoT_U1-BY7I.crl (hash: WplsyGdyYVsMx9at0YxxqpS4QLwbp61xM/oYuh0MLGA=)
                          2: fuGQD3dIcuYFPHWfFYN9XNzksWs.roa (hash: 2ylZRzaFJXpYOr7KOt0jit74Kjsd61AmZ353s2BWVvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:71:2f:d1:64:75:59:4d:17:9f:1d:bf:6c:ca:bc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5815a3e0959de2f27b45e71d2a84ff535f8163b2
        Validity
            Not Before: Sep  4 22:01:46 2026 GMT
            Not After : Sep  5 22:01:46 2026 GMT
        Subject: CN=4499656da72cbf47c57006a0f2f09f251f825e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:0d:f3:0e:0e:65:f4:b3:c1:12:b0:2a:83:
                    e5:f5:5e:80:3e:0c:4a:e0:d9:62:bb:4f:db:47:d9:
                    29:52:70:1d:83:9b:5c:62:d3:48:52:35:5a:20:67:
                    d4:ec:a4:06:4e:50:3b:e3:a0:b9:88:56:99:e6:1f:
                    e4:a0:42:16:65:48:b1:e6:fc:91:1f:fd:43:da:8d:
                    ce:d3:92:a8:3d:c8:7d:bc:e8:ba:ef:cf:18:f1:3a:
                    36:4b:4a:c5:f7:07:e6:8b:70:be:fa:d7:b4:a8:a5:
                    bb:5d:25:ab:da:41:20:3d:36:65:5f:0c:e5:f6:6a:
                    44:f8:eb:d0:43:f3:da:e5:65:6f:d1:56:c2:29:82:
                    db:2b:2a:69:e3:37:f5:9e:25:00:e8:26:30:11:59:
                    75:d1:9a:a4:7b:4d:b4:94:9d:e1:46:c5:48:bd:4a:
                    bd:59:8e:c1:d2:ab:6b:17:51:d5:b3:8e:52:2d:b0:
                    5a:81:3e:e7:a2:a4:84:4d:ef:17:1f:00:9c:14:c3:
                    c0:48:ad:b1:ad:80:9d:d1:12:c7:0f:db:73:6a:3f:
                    e8:9a:bc:f4:68:ec:ea:01:4b:32:d2:eb:0c:b7:b9:
                    16:fd:c6:0e:c0:83:84:43:ec:06:57:fc:95:d8:41:
                    9b:6a:10:18:44:92:e3:65:cb:4e:0b:86:8b:61:0f:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:65:6D:A7:2C:BF:47:C5:70:06:A0:F2:F0:9F:25:1F:82:5E:62
            X509v3 Authority Key Identifier:
                keyid:58:15:A3:E0:95:9D:E2:F2:7B:45:E7:1D:2A:84:FF:53:5F:81:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:e5:05:9a:fe:21:c4:b3:d3:d9:5e:6c:ac:d5:dc:bd:f1:
         18:16:fb:65:0e:01:56:53:e4:67:12:3c:ed:43:be:c2:e6:69:
         07:34:a4:72:f4:6c:4e:18:d9:f9:34:6e:6e:d7:da:65:fc:9e:
         be:09:36:d8:fd:8d:15:bd:54:cb:25:9a:ce:db:fc:db:22:a5:
         99:50:dd:b7:e5:df:33:32:89:43:94:ab:d6:a8:de:67:ef:da:
         ec:e2:68:70:aa:5f:c0:ed:a1:ce:84:2a:56:c9:81:37:27:fe:
         8c:04:94:87:c8:71:d9:c5:d7:ba:08:61:08:50:fa:2f:55:85:
         13:3e:d6:1e:63:d9:55:20:2f:4a:61:f5:c8:dd:52:e9:09:36:
         80:f1:1e:60:07:b1:63:0e:0a:f1:a6:83:e7:69:e9:6e:68:b8:
         06:3b:05:1f:1a:79:77:a1:bd:13:e2:83:f7:1c:22:a7:2f:67:
         31:b6:26:d1:1b:9c:85:7a:9b:65:2e:45:31:1e:b1:f5:a6:eb:
         a8:e3:c9:ca:ee:69:ca:f1:04:e7:a4:0f:ae:7c:83:34:cb:31:
         39:bd:9a:d1:65:44:d9:46:3e:e4:cb:7e:32:8c:5f:bc:39:c6:
         2e:da:6c:c7:e1:07:3a:4e:d5:e8:42:d5:37:53:4e:9b:af:05:
         63:63:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:03 2026 by rpki-client