Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File:                     PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier:          Wa8w6PAGfJk3qIHjpMqF454SAmBtIYDNiPSYTXbJyV4=
Subject key identifier:   98:84:57:A1:CB:05:9A:C0:A4:F1:AD:E4:DB:D4:22:89:5C:9C:75:B9
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer:       /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial:       019FFEDC61851C338B3BFB982D8BED723DF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number:          02D5
Signing time:             Fri 14 Aug 2026 06:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 06:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 06:01:23 +0000
Files and hashes:         1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: wM2RRWAlvcPKdTlSx6tTYxcA3P+EESzo1hfpha22uQc=)
                          2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:dc:61:85:1c:33:8b:3b:fb:98:2d:8b:ed:72:3d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
        Validity
            Not Before: Aug 14 06:01:23 2026 GMT
            Not After : Aug 15 06:01:23 2026 GMT
        Subject: CN=988457a1cb059ac0a4f1ade4dbd422895c9c75b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:dd:44:d5:1c:73:f0:ff:c1:2f:07:ae:7e:
                    2f:f4:e2:9e:11:1e:6c:6f:59:3c:6a:2d:3c:22:e0:
                    20:4d:ca:93:b5:41:18:85:5a:80:dd:7f:a2:05:91:
                    c1:64:79:39:7a:57:1d:55:8b:3d:59:c4:92:b7:f7:
                    b4:58:30:d8:d5:9f:43:cb:dc:17:bc:35:6c:03:48:
                    0b:d6:0d:98:5b:df:b8:59:0b:99:61:af:d0:a7:4d:
                    65:16:f7:29:2e:9e:97:e0:2a:b0:b5:5e:41:b0:be:
                    16:0b:ad:71:89:0c:14:d8:0d:43:e0:ee:78:bc:2e:
                    f0:f7:3d:d5:b6:ca:07:78:43:24:8d:21:19:fb:e0:
                    a9:90:08:51:de:61:7e:fb:d2:e7:6e:ab:4a:8a:f1:
                    e1:a7:9c:ab:68:48:f5:6a:2d:3a:b0:a7:f5:e5:43:
                    26:37:cb:69:21:1a:5a:e6:db:04:11:cb:42:09:ec:
                    33:3e:28:11:e3:4d:5a:83:ad:c9:81:c3:7f:fc:f4:
                    12:74:eb:17:39:8b:21:c8:03:69:19:26:99:37:19:
                    47:4f:5d:aa:18:56:0a:0c:45:c1:23:07:8f:51:e8:
                    d0:bc:d5:32:ea:d4:63:c3:fe:66:1f:5f:24:f4:5c:
                    9f:b0:db:21:6e:dd:4a:26:05:19:4c:76:49:77:fc:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:57:A1:CB:05:9A:C0:A4:F1:AD:E4:DB:D4:22:89:5C:9C:75:B9
            X509v3 Authority Key Identifier:
                keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:49:af:f5:6e:55:2b:11:25:97:f0:40:bf:9e:e2:94:a0:
         e6:8e:11:05:da:e8:5d:58:12:77:a2:28:76:c5:0e:8a:c4:76:
         ff:8e:b8:d4:56:cf:78:58:e9:5b:19:24:df:1f:8b:c4:96:34:
         35:21:d5:8f:f9:9a:91:19:b9:3d:05:21:b3:37:6a:5f:46:05:
         d1:62:03:87:3d:56:ae:9b:ac:62:38:0f:a9:5b:d9:7d:c6:fc:
         e8:d7:70:b3:a1:13:c1:ee:d1:28:ab:e0:94:8f:42:74:62:18:
         dc:c4:fa:48:e6:c5:15:3f:5a:fc:7c:b7:22:a7:72:a4:fc:cf:
         dc:4c:4f:ac:c9:59:15:04:43:c5:b7:6d:9f:6d:65:e8:fa:ab:
         75:bd:3d:ea:52:a2:bc:db:96:05:02:8a:5b:15:a8:61:c5:99:
         b0:3d:13:56:99:99:ef:58:c7:7e:9f:5f:bb:c9:b2:f4:ea:6d:
         e9:fc:0b:35:eb:7f:6e:22:85:1b:97:13:0b:01:62:9f:e7:77:
         a7:f0:61:e7:a9:95:a6:b5:af:7d:9b:0b:c8:bd:0a:5b:43:0d:
         af:f6:45:86:0e:69:76:b4:f7:39:00:58:a2:93:18:77:a4:29:
         4f:d8:b3:fd:0c:65:0a:92:71:b7:3a:a5:23:6e:2b:46:a1:47:
         bc:54:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 16:20:49 2026 by rpki-client