Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          68FWupygJBdZI3mhXl1FQ27V3ogh/NK1h8OjdHLN0Rk=
Subject key identifier:   C3:A0:BB:D1:84:C6:85:90:A3:16:30:C9:D6:C3:E3:BB:68:66:39:37
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       01A001A6588520A7CF383373D6E5583A52B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          0A7B
Signing time:             Fri 14 Aug 2026 19:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:13 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: 5lt8Q/QUGPNJ5f/Kqp4Tmlw1KVybUcrSpI8tWdhNMlQ=)
                          2: lbIe2qyRrYfjB41x_s_oC0HIMV8.roa (hash: IbB04MSM8ZFCnQ8XX8Yub4xMYWMjSxvhyr9xWMdyxEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:58:85:20:a7:cf:38:33:73:d6:e5:58:3a:52:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Aug 14 19:01:13 2026 GMT
            Not After : Aug 15 19:01:13 2026 GMT
        Subject: CN=c3a0bbd184c68590a31630c9d6c3e3bb68663937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:a5:34:9c:55:84:c9:6d:ad:cb:e1:ec:c9:
                    f4:c6:79:47:ad:06:a5:c1:1f:2f:ee:1d:07:ae:87:
                    68:25:99:df:62:53:40:4f:52:d7:cb:0d:21:aa:7d:
                    ee:f7:79:51:9f:b8:27:f5:25:2c:a0:0e:10:ae:6d:
                    8a:6f:a9:ff:87:18:e3:6f:36:e0:96:b8:d3:b5:c5:
                    9e:27:9e:6e:6a:be:82:cd:e8:34:1d:26:56:70:19:
                    8a:56:98:51:dd:ae:75:ed:6b:98:ab:1c:86:ef:59:
                    43:08:ba:94:3f:2d:6e:b7:c4:28:66:49:58:f0:79:
                    60:3e:e8:8e:d6:74:23:63:f9:06:9c:fb:74:78:7b:
                    96:4e:e6:da:73:c7:5a:26:49:c0:97:bc:ad:b1:fd:
                    2c:f1:84:a5:35:5a:cc:2d:02:f2:26:0a:9c:84:38:
                    16:de:f9:13:59:35:b4:1c:31:4e:94:65:8c:de:a2:
                    3a:7f:21:3e:49:53:64:56:85:48:83:2b:34:28:c1:
                    c4:2c:f1:64:94:63:57:ba:af:71:54:45:3d:df:3a:
                    a5:54:f5:68:e1:0f:f0:1e:20:61:76:5e:a8:94:71:
                    64:e7:61:a4:67:6b:fa:58:4a:46:9e:8e:b9:2d:ca:
                    4d:b2:4e:f8:cb:21:bc:47:50:fd:0d:96:69:cf:c6:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A0:BB:D1:84:C6:85:90:A3:16:30:C9:D6:C3:E3:BB:68:66:39:37
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:25:e9:c2:14:e5:4c:17:57:95:49:c7:67:de:64:75:bd:c2:
         4a:fc:39:6f:bd:0f:ca:f2:2f:16:6d:8a:73:2a:88:d8:9e:39:
         44:b0:52:ca:d0:e3:43:7c:11:96:3d:0b:be:66:ba:7b:1d:e4:
         17:93:29:38:10:eb:c1:33:43:fd:99:4b:7e:3a:b4:00:e7:89:
         05:ec:f5:e5:f2:28:aa:a6:be:bc:af:7e:0b:47:a6:72:7f:d6:
         78:ca:ea:f3:4f:a7:2c:88:e4:36:41:23:d5:6e:f4:58:8d:7a:
         47:35:20:ea:ef:07:aa:6f:b2:c2:a4:22:8f:79:fc:97:2c:5a:
         52:68:06:7a:fd:60:94:32:5f:a6:83:64:42:a7:be:2c:4f:59:
         35:c8:5c:35:1d:08:c8:4f:80:b7:26:65:31:df:c6:cc:a6:75:
         04:25:6b:42:84:cd:be:f6:40:fd:49:e8:0e:76:f2:c6:68:4f:
         c1:a7:7e:3a:b3:af:58:ae:bd:50:63:11:59:1a:94:78:e6:ae:
         e6:e0:10:c1:a6:3f:21:6a:7d:12:10:8d:3e:7a:4b:a8:f3:61:
         6f:e9:fe:e6:e8:0a:80:1d:af:06:f4:a4:1c:bd:48:e0:22:e1:
         57:cf:9a:55:76:ae:6d:23:22:7e:a1:a5:7e:c0:0a:6f:c9:4d:
         1b:fb:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:22 2026 by rpki-client