Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File:                     wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier:          NnHT1cA0RBk4G339vZ94yxDkiyJ4kzMgggF5tTym08U=
Subject key identifier:   AB:44:7B:9B:DE:95:88:26:93:85:4A:0C:F9:0D:53:36:B8:EA:D2:CD
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer:       /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial:       019F126536E145566579BBFB7DCF01CBCCA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 08:00:50 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:50 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:50 +0000
Files and hashes:         1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
                          2: vWoXZ2cjqRt11wOQD24nyWSDbTU.asa (hash: H/d3dWZIDW2sfXMUazgoFnBucag9BiVgeiQslyOpxvw=)
                          3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: fRo5eVCA6cLxuoaS1ldi2SAJznqCqyhq1zMZUAAGZvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:36:e1:45:56:65:79:bb:fb:7d:cf:01:cb:cc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
        Validity
            Not Before: Jun 29 08:00:50 2026 GMT
            Not After : Jun 30 08:00:50 2026 GMT
        Subject: CN=ab447b9bde95882693854a0cf90d5336b8ead2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:2e:a2:51:42:98:bd:4c:f2:9a:eb:68:c7:
                    04:4b:96:36:c0:95:fe:8e:27:91:ba:28:b8:57:5b:
                    84:d7:03:61:15:ce:83:fe:a9:78:57:6f:0f:a9:65:
                    38:23:ab:ba:1d:8a:c3:1f:cf:b4:5f:d5:2e:e0:c0:
                    2e:ec:b3:c0:c5:75:d0:b1:d6:6c:4d:f4:0b:62:65:
                    36:23:80:d6:ed:16:65:e0:e9:64:cf:bf:e0:38:8c:
                    36:29:eb:78:55:eb:74:53:b2:bd:3d:d9:6c:82:c5:
                    0e:8b:7a:5e:6f:90:3f:f1:07:0b:cb:dd:60:54:d6:
                    5f:7d:bd:e5:9e:91:ec:72:c0:f4:89:ad:f7:33:21:
                    af:df:98:d9:c1:0f:76:e7:bd:5b:a7:e2:62:c7:1b:
                    9d:55:ae:00:3b:8b:38:50:3f:1a:bd:14:5f:61:2a:
                    ba:e6:46:9e:63:34:2d:0b:66:d3:9d:06:ab:e1:78:
                    a7:bf:6c:d0:63:e8:b4:ba:c9:da:43:cf:41:da:da:
                    fe:37:3c:48:aa:38:37:6c:a5:f6:5a:4b:5b:03:73:
                    04:ba:4a:66:48:18:f0:e8:5e:92:22:b9:34:86:82:
                    1e:d8:5c:a6:d6:af:45:30:92:4c:0a:b3:f6:c9:4d:
                    aa:f0:3a:7e:3f:31:bd:37:d9:6b:f4:9b:59:4e:89:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:7B:9B:DE:95:88:26:93:85:4A:0C:F9:0D:53:36:B8:EA:D2:CD
            X509v3 Authority Key Identifier:
                keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:42:05:09:62:7e:a1:83:a4:bc:69:f2:7b:36:db:71:c1:
         45:19:e3:c1:0a:57:e3:fe:39:2d:9e:92:20:e6:d1:ee:ca:9e:
         7f:15:ff:cf:aa:38:6d:6f:a1:78:58:7a:3d:a6:5a:62:cf:d0:
         7d:33:dd:71:84:c9:ed:a3:32:be:d7:4c:b1:bc:09:c8:1c:69:
         ae:46:7b:5d:69:7e:78:42:8d:37:6d:60:6f:58:41:46:c5:6f:
         76:44:72:67:9e:62:4b:6e:7e:f0:a7:b3:96:39:87:00:e7:ae:
         3b:db:0d:62:c1:c8:8a:63:bc:4a:9d:a6:70:2c:6d:2f:59:df:
         da:ea:5a:11:fb:1a:88:41:14:dd:01:86:36:cf:30:9b:10:40:
         d9:6e:da:50:ad:d0:97:e2:2a:25:d8:ea:f0:ae:38:04:9f:a6:
         a6:2e:c7:e5:fc:4e:47:f0:f4:00:b1:56:a6:55:98:3d:b3:c3:
         23:68:8a:bc:76:69:c3:f6:33:4d:3c:e5:63:79:6a:76:2c:e9:
         a6:af:2e:ae:93:3b:11:5a:27:03:dd:7c:28:74:fc:c7:cc:c9:
         48:00:ae:3e:75:2d:54:a3:39:e3:01:01:d0:7a:59:4a:5c:77:
         db:17:00:53:63:8d:0e:bd:75:eb:ff:c0:e1:4a:3f:6e:45:f3:
         2e:5c:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:55 2026 by rpki-client