Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          CFO7Y5cRyTE4n2W/b+JCIdy5ddY8P0lLA64pQTwdjzo=
Subject key identifier:   3E:CF:E4:3F:0A:13:FB:81:54:9B:04:26:E3:B8:1A:1A:9B:CA:61:19
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       01A0B6F6E8756E9A60E4D5356593C777DC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          19F2
Signing time:             Sat 19 Sep 2026 00:00:29 +0000
Manifest this update:     Sat 19 Sep 2026 00:00:29 +0000
Manifest next update:     Sun 20 Sep 2026 00:00:29 +0000
Files and hashes:         1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: 36HeqlswItwc7wXu4to2kpD1uiLR48oqKS7ojjPhAgE=)
                          3: dZTs0EIjPnxi68tbTokfAbw6h7g.roa (hash: /Yw0GBij2t0h3+q9/KbDbCPzij5LVOg+e269LitDfx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:f6:e8:75:6e:9a:60:e4:d5:35:65:93:c7:77:dc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Sep 19 00:00:29 2026 GMT
            Not After : Sep 20 00:00:29 2026 GMT
        Subject: CN=3ecfe43f0a13fb81549b0426e3b81a1a9bca6119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:70:11:c9:ed:08:75:a3:af:ff:95:1b:82:
                    ae:71:58:64:11:3c:87:9e:ea:da:9d:f3:88:ec:2d:
                    f6:1c:91:38:a1:cd:d2:fb:a8:2f:6d:42:ca:42:1e:
                    50:63:e4:ac:a4:da:ab:a9:72:1d:0e:6b:69:a3:3f:
                    22:01:7a:a7:3d:d4:3f:2e:25:68:38:d1:51:22:08:
                    de:26:e9:5a:e3:f9:2c:01:36:f7:9c:ba:5d:77:92:
                    3c:c8:4b:57:0b:ff:e6:7e:64:2e:4e:c8:a5:9a:5e:
                    e2:dc:b5:5c:92:32:56:28:63:be:b6:20:8d:fd:64:
                    c5:f0:fa:84:b1:86:89:e4:38:51:9d:52:99:2b:0c:
                    2b:01:d3:c6:ae:29:bd:b4:a8:28:86:4f:a6:3a:6f:
                    a0:f2:17:69:ee:bc:f5:32:a3:8b:71:d0:37:88:9f:
                    b2:e8:1c:f8:30:87:06:89:ff:52:92:4a:c0:7a:f2:
                    ed:56:6c:a3:d6:31:fd:72:cb:5f:47:9a:e6:41:d9:
                    fc:74:48:56:4c:6e:cd:70:d7:31:d9:d5:95:19:c4:
                    e4:4e:24:64:ea:96:3b:b1:7e:bc:37:98:47:b2:c9:
                    f6:99:8a:f3:bb:9e:cb:24:97:f0:a3:06:55:07:d2:
                    04:25:bb:e4:87:1b:cd:3c:8d:d8:6b:32:24:a8:b8:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CF:E4:3F:0A:13:FB:81:54:9B:04:26:E3:B8:1A:1A:9B:CA:61:19
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:49:69:b5:95:b9:5e:38:46:69:b9:54:2e:83:1b:ab:26:
         53:f3:21:be:03:99:c2:d0:06:09:6c:00:a3:ca:5e:42:cc:6d:
         cd:47:06:c3:12:2c:97:89:46:5d:6b:8a:15:80:50:25:f6:56:
         15:3f:79:25:c5:05:d2:a1:94:36:48:d7:90:77:39:cd:d0:7e:
         b6:29:f9:a1:df:f3:e3:2a:18:a9:6e:dd:63:d4:bd:bc:d7:fc:
         9d:4e:c6:c3:3c:b6:61:13:36:7f:2e:c6:fa:ac:69:85:12:cd:
         1f:3c:f5:d8:e4:b3:3e:eb:aa:f1:ca:84:31:c2:79:d7:fd:a4:
         1f:35:16:80:96:c9:bd:61:b1:bc:41:f9:0b:d8:dd:ab:4e:34:
         8b:3a:99:b7:80:7e:01:1a:88:4e:94:da:0e:76:01:d0:9a:04:
         34:f7:8a:60:c7:a2:21:f5:61:22:d5:7b:d8:d0:b3:e0:02:03:
         a1:ee:f3:48:b2:80:68:98:2f:1e:27:d6:45:75:3c:8b:c8:80:
         40:89:96:b6:85:97:8f:e1:30:4d:a7:d8:8d:e6:cf:e0:0e:eb:
         e1:a4:e1:5d:ee:ee:eb:f0:4a:e2:28:61:de:43:5a:6c:d7:d8:
         79:bb:ea:fb:9a:7e:5c:52:a3:66:f3:4e:eb:13:cd:f4:a2:e7:
         c1:19:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:41 2026 by rpki-client