Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File:                     r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier:          DaYzKxnWwgPq9iRuCoKU+sPgpa15FESWE+0kJISy1Yc=
Subject key identifier:   78:0D:6B:68:F4:6F:EF:E2:CB:26:C7:1F:53:63:22:C3:7D:8B:D9:92
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer:       /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial:       01A003263095ACBA364D9AC144086E77BD22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 02:00:29 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:29 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:29 +0000
Files and hashes:         1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
                          2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: MmHh2vWk6U32mocQobkgt7OrBS0lpCqpyoQayQGwTaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:30:95:ac:ba:36:4d:9a:c1:44:08:6e:77:bd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
        Validity
            Not Before: Aug 15 02:00:29 2026 GMT
            Not After : Aug 16 02:00:29 2026 GMT
        Subject: CN=780d6b68f46fefe2cb26c71f536322c37d8bd992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f1:ff:e8:8e:32:43:af:c2:33:cb:a6:ba:9b:
                    9e:39:be:26:19:fe:58:c3:64:d6:c1:70:f4:78:50:
                    57:70:0f:5b:99:56:bf:fb:8a:6f:ba:4e:4a:8d:0e:
                    e6:b2:84:e8:36:1e:de:bd:83:ef:c6:35:22:db:88:
                    ab:c2:57:12:8e:b9:eb:0b:be:84:83:e2:85:60:9b:
                    6b:d2:76:48:fc:34:21:83:bd:8b:35:a3:da:32:70:
                    da:c2:42:ae:54:c0:ff:5f:96:de:2f:f8:b1:51:84:
                    70:aa:ef:cc:62:5e:b5:d0:bb:66:75:e0:56:69:8b:
                    89:13:e8:6d:97:48:3c:44:c5:ce:9a:be:7d:dc:d6:
                    0d:17:e5:86:d6:6e:3b:f6:58:dd:9a:13:c2:f4:3f:
                    d6:5a:52:f0:f9:ef:d6:f8:c9:fb:9e:46:22:7e:7d:
                    07:82:36:c7:0f:5e:5c:75:bd:fd:d7:16:57:2c:66:
                    b1:08:62:ba:f3:f5:f2:1e:16:58:c2:83:61:bb:69:
                    66:32:fc:b4:bd:18:57:32:8e:c8:84:b0:ed:0b:26:
                    ea:58:f5:e5:30:40:c0:22:eb:20:19:59:ce:a8:cc:
                    76:e2:38:0d:95:79:88:8d:00:0a:62:d7:55:86:40:
                    0d:6d:4e:42:2a:74:fc:e6:12:d8:59:ce:1b:87:f9:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:6B:68:F4:6F:EF:E2:CB:26:C7:1F:53:63:22:C3:7D:8B:D9:92
            X509v3 Authority Key Identifier:
                keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:62:d7:9f:d2:75:69:5c:69:f5:11:14:2e:16:ef:75:9b:b5:
         ab:aa:11:d3:13:a9:57:af:52:77:b0:b4:bd:51:c7:fb:41:67:
         09:c3:6c:46:d4:76:33:bf:48:9b:38:85:1c:4d:a7:ec:a4:f5:
         54:3d:a7:e9:05:35:0e:47:8d:75:41:13:b8:63:32:d8:7e:b4:
         a2:8a:5d:17:f8:4d:01:57:b0:29:62:cb:b8:66:2d:a5:8d:74:
         89:6a:d5:2f:19:c5:b3:9f:17:55:06:fa:52:29:21:60:b4:9b:
         d4:6a:8d:bd:78:a0:08:28:cd:32:14:b3:8d:5a:a4:b7:6a:ba:
         07:da:b6:7d:2e:fd:6b:f1:93:5d:f9:ac:7f:bf:d3:71:ab:fd:
         4e:70:9c:db:e6:91:72:03:0b:68:ee:03:fc:a3:55:eb:ae:cc:
         ea:86:98:c6:a4:85:e8:fb:45:19:65:26:67:d9:a3:a3:35:5c:
         c0:42:10:3e:7e:a5:2a:6e:c1:5a:ef:0d:4a:fd:ef:35:e6:e6:
         9b:3c:28:f1:c6:c0:56:c2:b5:8e:6d:a6:f7:74:ba:27:ed:0a:
         4b:a2:79:08:15:d0:81:e0:9f:75:d3:55:59:00:d1:ae:70:0f:
         8a:88:ea:43:d0:1e:7e:f3:02:58:17:68:cf:c2:00:30:0f:b8:
         7a:e7:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:24 2026 by rpki-client