Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.mft
File:                     W_9QyeFaSXdYXiHebEBrzUx7YJU.mft (raw, json)
Hash identifier:          fBykMPSSAPFeQXQKLKaRvyiTfw4x6woyTABP9vohNqk=
Subject key identifier:   4F:30:56:7F:52:E4:52:C9:06:98:3A:A4:F3:C8:D3:16:A2:35:17:69
Authority key identifier: 5B:FF:50:C9:E1:5A:49:77:58:5E:21:DE:6C:40:6B:CD:4C:7B:60:95
Certificate issuer:       /CN=5bff50c9e15a4977585e21de6c406bcd4c7b6095
Certificate serial:       01A08A8D177B6F779ED3C032AA98853659C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_9QyeFaSXdYXiHebEBrzUx7YJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:01:37 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:37 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:37 +0000
Files and hashes:         1: W_9QyeFaSXdYXiHebEBrzUx7YJU.crl (hash: QRZTg+OWbgLhPokoVD6iXwN2AsOJE1s3wfu1KaX+nwc=)
                          2: ojaYHW9oAySLCEYa-UvGTU6SU04.roa (hash: MulrOO7Jd9rifm6F/+0AFM/tZGKYNm2leLCIYQejvtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_9QyeFaSXdYXiHebEBrzUx7YJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:17:7b:6f:77:9e:d3:c0:32:aa:98:85:36:59:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bff50c9e15a4977585e21de6c406bcd4c7b6095
        Validity
            Not Before: Sep 10 09:01:37 2026 GMT
            Not After : Sep 11 09:01:37 2026 GMT
        Subject: CN=4f30567f52e452c906983aa4f3c8d316a2351769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:58:37:de:ed:5b:9c:2f:a3:93:0b:3b:63:
                    99:b2:d2:3a:48:e3:e3:e0:4a:21:b6:be:e0:8d:a4:
                    f7:12:17:1d:0f:9b:62:07:ba:cd:da:eb:a2:a1:b1:
                    f6:7a:8e:16:3d:81:f7:f9:c6:8c:8a:fa:7c:c8:37:
                    50:36:a5:44:e7:56:96:2f:02:de:15:df:47:c8:1a:
                    c6:08:54:9d:cd:3e:54:b4:e8:4c:bd:83:55:fb:a9:
                    80:fe:3d:34:6a:84:f8:5f:9e:f0:11:99:46:50:d7:
                    b2:17:b3:1e:f4:c8:f4:f6:24:e4:d1:99:1f:59:4a:
                    07:34:0b:b7:d8:34:80:69:ac:a6:fd:56:45:01:af:
                    34:7c:99:80:aa:1c:0c:d3:6c:ad:c3:35:08:96:34:
                    b5:a2:f7:8a:f0:f2:b5:ae:55:85:fb:eb:72:59:65:
                    b4:1d:63:5e:54:04:a7:e4:ae:89:b3:55:84:f1:0f:
                    b9:70:82:27:de:73:9e:7d:65:e6:fa:fa:13:43:62:
                    97:52:b1:06:b9:1b:40:b3:97:83:51:63:cf:1b:40:
                    b4:89:72:d6:28:c9:e3:39:28:cf:f5:60:8b:ab:89:
                    c4:d0:7f:b2:7a:86:5d:36:3e:19:d3:e9:96:0a:67:
                    2f:84:50:93:ac:8d:09:47:8a:b9:12:7f:49:9e:eb:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:30:56:7F:52:E4:52:C9:06:98:3A:A4:F3:C8:D3:16:A2:35:17:69
            X509v3 Authority Key Identifier:
                keyid:5B:FF:50:C9:E1:5A:49:77:58:5E:21:DE:6C:40:6B:CD:4C:7B:60:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_9QyeFaSXdYXiHebEBrzUx7YJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:00:52:98:30:0c:99:2c:df:f1:11:7b:76:09:a2:84:63:32:
         05:79:a7:5d:c4:8b:1e:0b:4e:87:c4:3b:92:c9:14:66:21:ff:
         97:76:4d:34:04:27:c3:4f:72:cb:89:15:c1:cc:66:40:de:f3:
         24:c7:7e:c3:04:aa:bc:5a:5a:d6:c8:7c:d1:cf:43:4c:b2:30:
         b8:86:a1:25:a7:f8:32:10:12:d0:43:f5:34:d4:d8:62:56:2e:
         56:8c:64:7a:dd:0d:23:3b:6f:cc:80:e2:d1:d4:7d:00:1b:c4:
         f5:7a:33:18:e5:d5:bc:96:2e:3c:41:6f:6a:ab:28:7f:e1:3e:
         09:8d:43:2b:97:2f:ca:38:81:65:83:9b:af:d2:c5:4e:8e:e6:
         97:17:e3:a7:61:01:18:43:9d:72:04:7a:54:62:46:06:28:31:
         33:57:b5:d0:5f:fb:d4:e9:93:88:4a:b6:69:a1:c6:8f:d1:6e:
         5a:21:f9:74:c5:55:2c:f3:d5:6c:08:36:42:8b:0d:9a:89:8e:
         7b:28:51:95:11:2c:17:46:de:d9:1f:29:81:4d:a2:ad:d2:71:
         a3:52:28:9d:aa:98:e1:8d:ed:cb:86:ac:1c:b8:94:69:1a:82:
         3e:aa:2b:76:72:0e:51:cb:b6:5a:84:18:6a:7b:d8:85:6c:bd:
         d3:6b:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:58:19 2026 by rpki-client