Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
File:                     WX2pAlHCK1uljAuii6BJC51tQgU.mft (raw, json)
Hash identifier:          dcn1JNZK63lQXZzymRDrzZTQj7qk70QSLh+Y8WJgqD4=
Subject key identifier:   2A:74:F2:A7:CE:A3:C5:C5:DC:2A:7F:47:7D:37:E3:CE:15:B2:62:DF
Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
Certificate issuer:       /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Certificate serial:       01A0F1550373BB302014DB9A2D4C11534558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
Manifest number:          14CB
Signing time:             Wed 30 Sep 2026 08:01:15 +0000
Manifest this update:     Wed 30 Sep 2026 08:01:15 +0000
Manifest next update:     Thu 01 Oct 2026 08:01:15 +0000
Files and hashes:         1: WX2pAlHCK1uljAuii6BJC51tQgU.crl (hash: PF6uY72ej4vz+J1H718EI8a2sArvzaH707Q/tD8wMyM=)
                          2: XsYTo_gGxvsIYQ3QjFc7tZGbxZU.asa (hash: zqWFt0kHjs9uY0vdqEIk0IdTor9HMxLABVos3H7Y+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:55:03:73:bb:30:20:14:db:9a:2d:4c:11:53:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
        Validity
            Not Before: Sep 30 08:01:15 2026 GMT
            Not After : Oct  1 08:01:15 2026 GMT
        Subject: CN=2a74f2a7cea3c5c5dc2a7f477d37e3ce15b262df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:20:12:82:4b:fc:85:1b:03:df:6b:ba:a1:
                    de:39:f9:a8:69:f4:18:59:f9:3f:08:b5:c4:d2:bd:
                    c4:be:78:c1:26:51:69:ff:4f:24:ee:68:8a:e7:a2:
                    be:5b:b4:d1:2d:b3:9b:8e:48:58:6f:e3:c9:7e:4c:
                    91:9c:2d:a7:ea:ec:59:00:78:2b:b0:68:1c:3a:f4:
                    4f:4b:71:4e:df:d8:07:9d:63:d0:c2:22:23:e2:22:
                    81:48:7a:76:fd:1c:1f:d0:40:f7:9b:ac:29:44:7b:
                    ce:70:65:9f:1f:33:57:73:c7:f9:cd:1b:e2:b0:01:
                    ff:57:e0:4d:6e:b8:1a:9d:41:95:d1:09:79:9d:d9:
                    61:33:ae:78:03:3d:69:3f:a7:56:c4:39:76:3e:8d:
                    3c:ed:38:22:69:03:16:5f:c1:b9:86:72:72:ad:23:
                    f1:22:34:60:0f:34:d8:a9:45:74:6f:60:c0:75:6d:
                    97:d6:1f:52:30:51:8c:99:3b:90:5e:44:3d:5f:63:
                    40:8d:08:72:a3:16:98:98:ea:c0:77:1e:b9:1b:06:
                    85:4e:5c:32:64:bc:00:11:cb:0d:fc:4b:3e:91:cd:
                    6a:71:92:fa:e3:05:7b:53:f1:16:3a:e3:1e:6a:64:
                    97:93:76:2c:c5:42:f9:f4:e6:bc:97:b7:ea:68:e3:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:F2:A7:CE:A3:C5:C5:DC:2A:7F:47:7D:37:E3:CE:15:B2:62:DF
            X509v3 Authority Key Identifier:
                keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:18:e2:42:8d:ea:c4:9b:b1:48:b3:4b:70:60:fb:7d:98:
         e4:e7:10:12:0f:8d:ff:6e:2f:4a:1e:dd:d4:ac:15:78:71:7f:
         e5:bc:ef:09:a3:9a:5f:f2:cf:ad:3e:5f:b5:54:a3:8b:b8:d7:
         e2:27:70:46:e5:6b:21:6c:3b:a0:fd:c1:f1:8e:f4:d4:af:a6:
         89:8c:50:fb:d2:33:e9:c9:f8:54:35:f1:c8:d9:69:97:ff:ed:
         e2:d6:2d:db:4b:41:9f:29:85:2d:ce:ce:cb:b6:90:0c:f4:10:
         1a:45:3e:73:a4:b5:51:e3:44:b5:fb:e8:8d:cd:5d:68:a3:1d:
         ff:b0:da:15:3a:2f:72:dc:c1:db:8f:c9:a1:d3:4f:b4:82:66:
         b5:e8:9a:9b:f4:21:6d:3f:f5:8b:40:72:c9:4d:97:65:3a:d1:
         c1:fe:cd:06:4e:c0:e0:c3:58:f4:1e:d2:bd:fd:b1:21:bd:39:
         3c:76:8f:ae:7c:a7:f8:e2:4a:5b:29:aa:7f:39:29:f5:cd:45:
         46:20:52:59:a4:5b:7f:a8:2e:4f:fe:e3:52:9b:60:2a:09:13:
         cd:da:cd:b0:03:74:a0:30:87:69:c6:52:9a:ef:2f:4b:39:fb:
         7c:bd:80:db:3a:f1:9e:79:be:31:5b:17:2c:59:56:6f:a3:32:
         df:af:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:52:20 2026 by rpki-client