Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          7eI4GqF4ac6AGd1t2CvPzY+dlsA5RP0C5fSmXCvx7Kg=
Subject key identifier:   58:DA:E7:A8:A3:E0:57:49:E7:66:75:08:EC:0B:D0:14:FB:50:60:73
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       01A0016FD3E54ADE957025E6693FD03EAFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 18:01:40 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:40 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:40 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: gvxjN4geGcxRYMMx9kfGtb6QEZ4nEqDNHnpbEOMH+iM=)
                          2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:d3:e5:4a:de:95:70:25:e6:69:3f:d0:3e:af:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: Aug 14 18:01:40 2026 GMT
            Not After : Aug 15 18:01:40 2026 GMT
        Subject: CN=58dae7a8a3e05749e7667508ec0bd014fb506073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:eb:f4:c1:5d:dc:de:3e:8b:2b:3c:3f:ef:
                    98:64:c9:74:ba:7b:ad:56:2b:42:8d:d5:f0:d5:fd:
                    4c:4c:aa:0c:e9:4d:a0:28:17:47:3a:2e:81:4d:56:
                    ee:f6:13:72:bc:18:c8:a8:3a:40:03:a2:91:f0:1b:
                    4d:9a:a6:36:d3:e3:ab:f4:b5:2e:0a:57:59:0f:98:
                    4a:fc:ae:91:e1:d6:70:23:d7:59:28:53:ab:a1:5d:
                    30:dc:4f:2e:2a:d9:a7:c3:f5:4a:2e:9b:73:14:24:
                    a0:d4:cc:bf:f3:dc:71:3f:93:ff:42:ad:0b:cd:8a:
                    5c:c8:80:9c:c9:73:9d:47:34:25:3f:0b:6f:48:f7:
                    a2:98:30:a1:f8:73:fe:a8:7d:b8:cf:e0:1d:16:5d:
                    06:0e:2f:47:42:2e:fa:b6:fc:62:4a:1b:46:73:96:
                    7f:6f:e8:82:3d:88:5d:21:7f:bc:1d:5b:78:60:6d:
                    55:3f:b3:e9:ba:4f:ec:5b:8e:2b:9d:7b:42:e0:cf:
                    a3:43:3f:23:be:d4:f4:25:1b:9d:fd:14:a0:d9:96:
                    ab:d2:31:58:4c:13:a4:67:f1:92:74:e6:fe:49:23:
                    a9:9b:1d:0e:05:d4:c8:26:64:f9:b8:bc:b1:9d:ad:
                    20:ea:f5:7f:ca:cd:9c:b0:94:97:76:86:9c:36:b2:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DA:E7:A8:A3:E0:57:49:E7:66:75:08:EC:0B:D0:14:FB:50:60:73
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:d6:c6:cf:ca:a1:78:6a:24:a8:55:94:be:82:dd:73:ac:
         0c:95:5e:fb:27:69:b4:0a:41:b4:57:3e:b1:d7:c7:a2:dc:79:
         43:08:eb:fa:09:e9:27:07:b5:1a:d6:d9:d5:5d:7b:c6:78:3d:
         d7:44:e3:4f:e9:2a:b9:7c:6e:98:99:9e:27:89:f9:b0:1f:3c:
         e7:8b:36:17:45:86:ce:f3:07:74:dc:43:cb:9a:ca:f5:eb:24:
         5b:ad:fa:51:c9:07:5a:21:ae:db:c2:07:af:c2:12:ba:64:c1:
         f4:35:de:ca:8c:37:41:15:72:c6:de:05:b3:2a:4f:eb:7d:b5:
         08:63:32:b2:6f:01:8f:2c:04:20:ba:b7:a6:5d:00:d3:bd:a5:
         9d:2d:e9:aa:23:c5:83:87:91:2a:5f:05:37:48:b7:ea:ac:41:
         cd:b6:61:46:7e:77:58:59:71:49:15:68:71:9d:b6:dc:ca:71:
         43:de:fa:bc:d4:1b:d9:09:8a:9f:83:71:98:41:c2:11:8a:77:
         ef:64:0b:00:76:65:5a:28:7a:48:b8:fd:8e:8a:d5:6c:4f:29:
         ea:92:a4:16:60:f6:5f:a0:ca:b4:55:68:58:37:56:b0:8b:cf:
         c3:fe:3b:54:0b:56:8c:52:b0:4c:7b:09:d4:17:7f:a0:09:23:
         58:fd:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:59 2026 by rpki-client