Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File:                     WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier:          lHiV1djL22dEnPmdE9ywpAnGedyYQmV64uYptg5tSOE=
Subject key identifier:   C8:3C:3E:33:B6:40:77:37:E9:47:A6:01:FD:0D:AF:F2:98:5F:FF:18
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer:       /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial:       01A087F9743E5406817AFE6A0122127EADD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number:          07AF
Signing time:             Wed 09 Sep 2026 21:01:07 +0000
Manifest this update:     Wed 09 Sep 2026 21:01:07 +0000
Manifest next update:     Thu 10 Sep 2026 21:01:07 +0000
Files and hashes:         1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: KF1p0YLgUYFaBwJ6uxAggMbGe3WlPOilTP/Z+iyvKM4=)
                          2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:87:f9:74:3e:54:06:81:7a:fe:6a:01:22:12:7e:ad:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
        Validity
            Not Before: Sep  9 21:01:07 2026 GMT
            Not After : Sep 10 21:01:07 2026 GMT
        Subject: CN=c83c3e33b6407737e947a601fd0daff2985fff18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:25:e2:8e:15:a9:a7:77:87:f4:27:72:d5:
                    68:f2:cc:ef:60:3f:1c:48:a9:8d:27:ac:b2:07:c4:
                    31:b7:40:e4:c1:b3:d8:ba:ea:ba:a5:be:d5:fd:ae:
                    51:c7:62:81:86:45:3a:4b:18:1c:3b:de:bf:d0:db:
                    79:92:17:7a:a3:35:da:2e:4a:d6:fa:5f:b7:2d:09:
                    f3:88:48:1a:2e:af:33:60:a4:54:f7:8a:8b:44:56:
                    f7:65:1d:b5:3d:5a:84:55:ff:de:2a:74:f4:00:77:
                    83:93:93:1f:54:1e:ea:91:1d:7c:ea:ac:ce:65:59:
                    1a:e4:a2:f0:1c:87:52:62:38:b0:b7:f3:a4:e2:29:
                    c0:b1:46:7f:60:5c:38:70:08:d8:b7:08:08:00:15:
                    b4:8c:7e:88:b2:5f:ea:80:30:fd:14:83:94:df:f6:
                    99:49:df:bf:8e:52:43:1f:8d:1b:00:fe:4e:26:48:
                    fb:25:5d:20:84:ce:5e:9f:ad:57:f8:77:92:47:59:
                    1b:0e:84:95:0b:90:27:ed:8c:94:de:47:f6:17:98:
                    60:b1:2d:99:a6:68:7f:63:c9:b5:d9:e0:e7:36:1a:
                    02:2c:b9:f7:24:b6:06:90:13:f5:00:bb:1f:f6:5c:
                    95:8b:d4:09:f0:2a:e4:1f:43:3d:41:20:0a:f9:65:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:3E:33:B6:40:77:37:E9:47:A6:01:FD:0D:AF:F2:98:5F:FF:18
            X509v3 Authority Key Identifier:
                keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:22:f1:5b:6c:c8:32:63:7d:d8:6f:c2:fb:b5:8d:8f:5d:
         ec:6f:d8:39:c8:0b:cb:fd:b0:64:e9:df:ff:99:19:a8:42:53:
         07:55:0f:f5:9a:8e:7f:69:f3:b9:e0:85:66:49:ae:08:70:d4:
         74:47:a7:8e:61:34:d7:1f:e6:be:1e:66:7b:ce:e9:77:9f:69:
         9b:be:e7:79:39:ad:56:fd:62:62:9b:e1:89:58:07:f1:3b:07:
         df:5f:8e:07:7e:da:17:c8:64:76:5d:bb:d1:57:df:7f:08:91:
         57:45:4b:96:40:39:b9:76:b4:e0:47:29:bb:ec:39:af:5e:3b:
         ee:bb:cd:8f:0b:03:c7:50:ec:f9:74:65:32:ff:06:5f:ca:7a:
         f2:91:73:0e:97:3a:e1:9d:3f:e0:69:88:24:d5:01:7c:8a:f5:
         39:3a:f3:1b:a5:71:62:28:8c:7b:9c:da:40:0a:49:b3:a5:cf:
         8d:06:ef:d6:d5:36:2a:92:72:e4:15:48:bd:e2:6b:0c:1d:f8:
         1c:fb:4f:5c:44:a7:e1:f4:8d:36:3b:fc:21:b9:bb:72:ce:54:
         25:d4:24:24:12:81:59:66:7b:56:2b:5e:06:ba:6d:36:70:06:
         30:b8:d2:10:dd:77:a3:f7:4b:c8:df:11:26:5e:09:09:3c:78:
         c3:e9:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:50:36 2026 by rpki-client