Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File:                     WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier:          K+hhytAfRrV+J0/FpHMzlBu1zQMYh5EXym4Qhx6h0v4=
Subject key identifier:   9B:7A:5F:65:60:FE:6B:74:82:26:62:CF:98:CC:A6:8C:3E:B3:B5:98
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer:       /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial:       019F9E4CAB05FB5105AC748C76FA7383BAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number:          0736
Signing time:             Sun 26 Jul 2026 12:00:52 +0000
Manifest this update:     Sun 26 Jul 2026 12:00:52 +0000
Manifest next update:     Mon 27 Jul 2026 12:00:52 +0000
Files and hashes:         1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: RYPrRvQj6YZsx054+5s/5vMU+jRXrdHumZjSj5JNTyw=)
                          2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:4c:ab:05:fb:51:05:ac:74:8c:76:fa:73:83:ba:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
        Validity
            Not Before: Jul 26 12:00:52 2026 GMT
            Not After : Jul 27 12:00:52 2026 GMT
        Subject: CN=9b7a5f6560fe6b74822662cf98cca68c3eb3b598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:cf:e3:96:d1:84:56:6c:f6:db:f1:11:ea:
                    89:66:00:bc:fb:17:b2:42:e1:a8:aa:1c:cf:60:e0:
                    14:db:91:3f:82:72:c2:f1:80:e6:95:06:3c:e1:31:
                    65:4b:a6:8c:2b:3f:f1:7b:4d:d7:37:2a:b0:ae:c6:
                    1a:c7:3b:ac:87:82:2e:ac:10:f3:99:55:d2:55:ed:
                    59:dd:86:f2:b5:0c:92:2e:aa:ab:ff:e4:6a:f8:d2:
                    b7:f2:63:aa:49:2e:b8:e4:75:8c:3b:8a:05:24:73:
                    f0:92:a7:c5:f2:4d:af:4f:95:84:bd:b4:2a:26:06:
                    9f:14:ef:8a:4d:81:a4:9f:aa:2b:d8:ca:b4:fd:00:
                    9b:d6:ab:85:63:2c:33:0e:47:36:49:a6:23:2a:a7:
                    af:b4:f6:67:b6:9b:63:b1:a5:1c:b4:a8:f8:de:99:
                    b5:82:31:4d:76:27:fd:5f:53:10:e1:30:80:29:45:
                    e0:2a:36:3b:a1:12:ad:d7:63:62:e2:c4:9f:d0:e9:
                    9f:e4:2a:20:66:e1:a0:75:b6:97:98:3a:cb:5a:f4:
                    a7:90:67:ae:ea:45:62:59:fe:43:c3:22:46:e7:8a:
                    5c:13:15:35:86:3b:e4:f7:3a:d8:88:71:b3:1a:f4:
                    fa:55:85:f2:1b:11:46:ea:4d:7b:8e:1d:0d:6e:be:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7A:5F:65:60:FE:6B:74:82:26:62:CF:98:CC:A6:8C:3E:B3:B5:98
            X509v3 Authority Key Identifier:
                keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bf:7a:a2:24:50:85:6a:a5:ef:4b:75:fb:f4:3a:c0:62:2c:
         66:98:43:80:11:f3:87:ca:5e:ab:ba:45:13:0d:bd:e6:91:40:
         1d:b1:26:89:25:dc:43:b2:0b:31:ec:7f:8e:ae:4b:ae:6f:7c:
         5d:df:0f:38:a0:10:46:3e:26:16:64:97:15:e4:c5:08:2d:8b:
         27:3f:27:09:58:6a:3d:b7:4e:41:e4:a3:8f:2a:c8:37:bd:38:
         63:b0:8f:b0:9e:80:d7:72:2d:0c:42:30:dd:77:e7:f0:ad:ec:
         bf:b4:41:0c:96:38:e9:ea:93:bd:19:77:6e:72:c9:8c:b7:44:
         c9:6c:8f:99:89:0b:33:9d:32:93:12:f8:c3:aa:eb:35:6e:81:
         fd:85:28:16:52:bf:11:6a:9d:4d:d2:52:0a:c7:04:36:24:f6:
         a4:5d:47:00:46:0a:1a:d6:7b:96:15:7a:48:62:18:d2:bc:c7:
         27:3e:85:2d:e4:3f:04:68:8c:54:ae:82:bf:75:de:f8:94:3f:
         72:08:69:60:b1:6f:01:fd:13:4d:70:5c:db:ff:c5:ac:c7:df:
         3e:ab:e3:dd:91:c9:5d:10:d0:dc:d4:b2:6a:bb:2e:a2:08:49:
         bf:4a:1e:6e:d1:33:05:3b:81:1f:f6:65:89:6a:56:22:c1:88:
         ab:cc:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:41 2026 by rpki-client