Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File:                     1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier:          R6ybWMIXKjj6WqXVRdpuht0Fg3+teYB76sUaKk1awUg=
Subject key identifier:   9C:A0:2F:D7:5A:C2:02:E9:A3:16:88:6D:BB:1A:D1:E7:8B:7A:00:3C
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer:       /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial:       01A0DACD7DFF028DBB8322EC61EBA0E1B537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number:          1A45
Signing time:             Fri 25 Sep 2026 23:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:35 +0000
Files and hashes:         1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: ATPmK22Rg8bFHhnJwUAOhdmFv93T2Zz5AOvOXFBcQ6M=)
                          2: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (hash: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:7d:ff:02:8d:bb:83:22:ec:61:eb:a0:e1:b5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
        Validity
            Not Before: Sep 25 23:01:35 2026 GMT
            Not After : Sep 26 23:01:35 2026 GMT
        Subject: CN=9ca02fd75ac202e9a316886dbb1ad1e78b7a003c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:6b:03:3e:99:aa:09:cf:5b:08:67:94:85:
                    7f:16:94:98:d2:13:b0:af:2b:62:87:f9:6a:97:9a:
                    be:25:31:20:f5:47:37:18:54:7f:08:06:35:a8:4b:
                    00:e5:29:d1:60:d1:df:dd:8b:3d:4d:69:ba:c2:5c:
                    c4:b4:3c:fa:84:fb:35:5f:97:8d:8b:15:89:f1:cd:
                    66:08:88:1a:0b:f3:6d:39:4c:d2:77:36:d2:7b:ad:
                    ac:81:c9:40:66:b5:5d:c6:12:a8:90:14:75:60:3d:
                    40:69:e2:19:da:29:e5:89:5a:a0:e3:15:36:bf:fd:
                    e3:97:7f:57:8d:20:64:f0:72:51:05:26:23:26:a3:
                    0d:8f:19:cc:12:7f:0b:8f:89:4b:96:93:9a:57:c2:
                    c4:d5:41:73:b7:cd:34:f0:1e:fb:5c:e5:2d:c9:d7:
                    6b:51:63:39:2e:1e:84:19:0e:45:23:44:4a:e7:08:
                    a5:a8:96:01:c1:79:fe:dc:0c:4b:ed:0b:87:5b:28:
                    df:ea:89:a8:52:38:d4:69:f9:cc:1e:57:cb:d6:8e:
                    a2:b2:02:04:c8:0e:85:4d:c3:98:a1:7a:bc:32:e7:
                    19:ef:2a:73:be:38:74:ca:bf:20:44:be:af:b9:c1:
                    c9:77:84:16:13:97:bf:57:99:4d:b1:95:3c:f1:e5:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A0:2F:D7:5A:C2:02:E9:A3:16:88:6D:BB:1A:D1:E7:8B:7A:00:3C
            X509v3 Authority Key Identifier:
                keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:85:b9:e3:2f:d0:c2:68:69:c5:f9:b0:40:6c:d1:6e:70:0d:
         05:d6:df:a7:44:2e:37:95:c1:07:51:ad:4f:ea:ad:54:c1:c3:
         ed:a0:d1:3d:8e:c9:9e:83:bd:0d:b6:6f:e1:9f:a7:65:f0:6d:
         73:57:76:81:9a:ff:85:c5:99:4b:5d:a8:d9:d4:ca:90:a8:20:
         50:c2:61:d0:56:4d:d8:f8:a6:d9:03:6b:b0:30:0f:d9:6a:70:
         5a:b2:6a:a6:d8:38:3b:d8:4f:fc:72:f4:68:ed:d7:ca:7c:8b:
         1e:04:17:3c:b7:f5:90:5a:47:97:f9:3f:59:c9:3a:56:5c:52:
         ae:1b:8d:09:31:11:60:89:ee:17:31:d0:dd:97:19:3b:55:ed:
         70:8c:7d:b2:68:31:e2:b9:17:09:2f:d5:21:52:9a:cc:60:4b:
         5b:85:a2:b8:08:41:82:1d:a0:00:cc:be:cf:9b:97:27:da:b7:
         48:b0:22:2a:4a:49:fb:d8:0f:12:6f:c1:e7:a4:f8:ea:3e:60:
         17:43:a9:39:3b:7d:19:70:73:0b:dd:f3:bf:13:fd:ab:3f:d3:
         8b:15:75:a8:3e:09:9a:83:56:5d:22:64:e9:d5:53:fd:af:d8:
         83:9f:d1:5a:d6:25:3f:b6:64:3a:cd:1f:e7:4c:c2:e7:74:af:
         90:d1:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:41:14 2026 by rpki-client