Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File:                     IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier:          LtM0y1eDTy0GP7LG24sCyzdKdk1RrAMeraHZQS4jZIo=
Subject key identifier:   0B:62:6E:96:78:AA:24:04:4B:77:1D:03:36:13:37:81:75:8B:67:80
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer:       /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial:       01A005B96F69A1D7CE29F33C3331EB8C3F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 14:00:33 +0000
Manifest this update:     Sat 15 Aug 2026 14:00:33 +0000
Manifest next update:     Sun 16 Aug 2026 14:00:33 +0000
Files and hashes:         1: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: GX7PI9LBgR/GrkfVYs25g23immWj0v7zYrgDMgpLmKA=)
                          2: Oe7wTUeOifNOrZPE6s11kQOKX-4.roa (hash: gsLsf04/fdLsccMrWMJ4qLZbQv2ayrUfRSE5fjnchYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:05:b9:6f:69:a1:d7:ce:29:f3:3c:33:31:eb:8c:3f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
        Validity
            Not Before: Aug 15 14:00:33 2026 GMT
            Not After : Aug 16 14:00:33 2026 GMT
        Subject: CN=0b626e9678aa24044b771d0336133781758b6780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:00:28:0b:c9:c8:6f:d2:4d:4f:33:3d:91:
                    93:dc:24:75:b6:c9:28:66:ab:d8:2c:82:69:7c:ca:
                    42:98:25:42:a9:2e:49:b5:f7:94:c3:02:52:68:d0:
                    9b:bf:7a:31:05:30:28:35:dd:76:f7:bf:89:72:ac:
                    67:6f:9a:85:28:b8:9a:bb:02:7c:24:33:63:78:02:
                    49:cb:f8:c1:9c:1d:48:45:9c:1b:19:f0:da:1d:5f:
                    36:73:55:54:c5:de:65:b5:26:88:ee:be:65:94:4d:
                    ce:79:32:18:a6:8d:eb:a1:a1:8b:7d:8a:b7:f7:cd:
                    f2:62:35:4b:39:62:2b:f7:e6:23:cc:c2:01:8d:44:
                    3c:ce:e2:14:40:f8:ed:93:1a:be:b5:07:1c:20:f2:
                    6f:75:c9:89:42:0f:a0:0c:69:57:c4:ce:3d:d7:d6:
                    ba:3a:94:be:f2:56:58:e3:af:02:30:40:55:db:5c:
                    e7:b1:cf:02:24:21:df:cb:30:d8:8e:f9:5c:fa:4a:
                    10:20:65:aa:a6:e1:99:c4:ce:07:69:da:4b:91:3b:
                    42:8e:ec:0c:f3:ae:df:61:95:9d:bd:bd:bd:73:b8:
                    3d:16:e8:f3:59:cd:6e:03:b5:4c:90:a2:15:25:14:
                    af:13:22:ac:0a:56:8a:d3:b6:b8:0d:da:37:c1:32:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:62:6E:96:78:AA:24:04:4B:77:1D:03:36:13:37:81:75:8B:67:80
            X509v3 Authority Key Identifier:
                keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5a:9f:19:49:d0:53:b6:e8:04:af:63:62:ae:c7:47:24:ca:
         9e:a9:a6:36:a9:3c:96:e1:0b:d9:dc:8b:bc:6f:25:44:49:20:
         bf:cc:46:67:90:78:3b:5c:f7:02:20:8d:ea:52:3d:8c:3e:3a:
         45:3b:09:e4:51:53:6a:fe:2b:f6:63:4c:b0:5d:2c:b0:5e:8f:
         b6:22:a5:43:fa:a0:0d:90:90:30:97:0a:c9:3a:ca:ba:dc:9a:
         67:a5:b3:de:27:27:b5:f5:80:de:5a:a8:a9:95:3e:5a:ac:ad:
         06:48:fc:dc:7c:4f:0c:d8:17:1d:09:1b:d1:46:77:0a:cd:13:
         61:05:64:3a:6b:ef:28:6b:cb:1f:5a:03:15:cc:a2:98:5f:62:
         c2:fd:cb:70:32:e8:6b:30:b6:b7:d9:85:c6:10:70:df:72:0c:
         81:eb:ca:29:db:d5:ee:2c:9e:a1:a5:ea:a8:54:24:4f:4e:55:
         7b:7d:15:ab:45:c4:df:b3:d4:95:f3:61:34:87:3d:53:c0:75:
         10:cb:fe:e1:7a:8c:2a:4a:e9:97:c0:1f:41:f7:26:69:26:5a:
         d0:64:29:8e:56:ed:fb:56:33:a3:04:fc:5a:ff:86:d1:8b:8e:
         0e:ff:68:1d:72:6e:99:48:c0:9f:ff:53:3f:d5:de:ad:6f:d8:
         d4:bb:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 16:04:21 2026 by rpki-client