Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
File:                     WX2pAlHCK1uljAuii6BJC51tQgU.mft (raw, json)
Hash identifier:          QTrVQJpb1205misiajkr114RGQlj3aq38P8Y74hVZwI=
Subject key identifier:   D9:98:DD:E9:E9:5C:D0:63:AE:24:3F:1F:B8:16:2C:41:D2:DE:4F:5E
Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
Certificate issuer:       /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Certificate serial:       019FF835F6D416AC16C61FF9B1549B140061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
Manifest number:          144A
Signing time:             Wed 12 Aug 2026 23:01:53 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:53 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:53 +0000
Files and hashes:         1: WX2pAlHCK1uljAuii6BJC51tQgU.crl (hash: xMv0hfts/van1kd/+7db8I07MFkO8TWlGszIu8H3dyM=)
                          2: XsYTo_gGxvsIYQ3QjFc7tZGbxZU.asa (hash: zqWFt0kHjs9uY0vdqEIk0IdTor9HMxLABVos3H7Y+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:f6:d4:16:ac:16:c6:1f:f9:b1:54:9b:14:00:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
        Validity
            Not Before: Aug 12 23:01:53 2026 GMT
            Not After : Aug 13 23:01:53 2026 GMT
        Subject: CN=d998dde9e95cd063ae243f1fb8162c41d2de4f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:5d:8b:92:2f:d9:75:43:14:39:a0:b8:07:
                    d8:48:86:7f:61:1c:55:2e:c8:97:f6:20:d3:2c:73:
                    8b:15:ef:6a:0d:c8:d9:44:bc:1a:37:af:79:1d:43:
                    89:7f:e2:73:db:79:65:44:98:0c:eb:d6:70:d8:16:
                    62:67:14:95:9a:95:54:a3:c6:ed:7e:a4:92:5e:84:
                    6d:88:c0:95:ef:ac:5a:da:8b:a5:94:b8:2c:6c:fc:
                    f7:e2:81:1d:88:0b:8c:c9:bd:71:8d:87:8b:cd:f9:
                    5e:22:70:3e:b1:fb:e0:fd:7e:98:6c:9f:c2:cd:44:
                    ee:e0:42:8d:b6:40:c5:8b:6a:7d:c9:fd:2b:39:b6:
                    50:fc:ba:25:14:e3:d8:51:f3:0a:7e:45:f0:2b:0e:
                    d1:3d:09:a8:dc:15:ca:96:31:d2:7b:7a:ac:ed:06:
                    df:cf:68:df:b2:47:00:e4:13:87:fc:ec:27:23:29:
                    b0:a6:1c:98:f8:ef:6a:51:e6:e4:0f:c9:9a:3d:a0:
                    ab:93:90:97:fb:69:d1:ab:79:f1:d9:ef:a5:1c:3b:
                    6a:71:65:cf:b9:f3:ef:a1:81:11:30:4f:c4:7d:8f:
                    a6:ad:06:e0:9c:0d:ec:00:39:92:74:ec:e7:36:2c:
                    07:e9:28:56:73:4c:56:5b:bf:5e:de:ba:9a:05:9d:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:DD:E9:E9:5C:D0:63:AE:24:3F:1F:B8:16:2C:41:D2:DE:4F:5E
            X509v3 Authority Key Identifier:
                keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:11:f2:54:25:a9:02:57:b3:d5:39:f1:df:83:9a:f8:8d:
         9f:d4:0e:26:1d:d4:77:96:61:f2:ce:fb:3d:e6:a9:7a:12:74:
         86:29:e7:5c:83:e5:fb:93:40:bd:cf:10:38:de:27:92:ee:07:
         87:8d:d8:c2:8e:04:88:31:fc:ba:b9:cb:3e:ee:55:b6:00:97:
         62:b4:6b:f4:3b:39:f1:00:54:8e:78:82:3f:a9:29:de:88:18:
         1d:dc:c2:bc:f7:2f:06:fa:0d:dc:b9:ea:06:80:54:5c:73:34:
         f3:1b:a6:de:c0:0c:12:46:9b:89:8b:1b:cd:d3:bc:c8:36:8d:
         12:ab:7a:c1:5f:d6:7d:d5:2d:61:37:65:ce:f7:05:70:fb:0b:
         be:f9:13:dd:88:94:43:ea:f0:e3:3c:ba:83:a5:52:0c:e7:6f:
         70:75:e0:43:02:bc:c5:14:03:32:2f:c3:09:98:98:9d:17:3c:
         da:07:e6:8a:02:ab:72:21:c5:06:b6:c0:73:3e:88:8c:28:8f:
         40:52:49:50:4c:c1:e4:d5:5e:b5:93:08:ba:1e:61:5d:00:a4:
         15:9d:77:6e:3c:02:ad:8c:5b:ea:ba:fc:d9:66:7b:02:55:9e:
         d0:74:31:e2:e1:84:03:06:90:a2:78:37:ae:e5:89:7d:ec:63:
         d9:7a:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:15 2026 by rpki-client