Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
File:                     Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json)
Hash identifier:          YJ5LwIRYICMaaPapgkTikL+gjrRjty48ZGsxsWI5zac=
Subject key identifier:   38:77:F4:C6:6B:06:BC:08:4E:F2:49:0F:8B:B7:F1:EE:4C:F8:58:1D
Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
Certificate issuer:       /CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Certificate serial:       01A11184F6B542C4D4E4ABB0B4128C5BFA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
Manifest number:          02A5
Signing time:             Tue 06 Oct 2026 14:01:28 +0000
Manifest this update:     Tue 06 Oct 2026 14:01:28 +0000
Manifest next update:     Wed 07 Oct 2026 14:01:28 +0000
Files and hashes:         1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: GLZ6wnupi5hVVDujSWm/+m/v51lDE62XAx9hkPYUFTY=)
                          2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:84:f6:b5:42:c4:d4:e4:ab:b0:b4:12:8c:5b:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928
        Validity
            Not Before: Oct  6 14:01:28 2026 GMT
            Not After : Oct  7 14:01:28 2026 GMT
        Subject: CN=3877f4c66b06bc084ef2490f8bb7f1ee4cf8581d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:31:1e:ca:f7:1a:f0:89:6a:f6:cf:9d:49:
                    05:27:21:5b:af:16:0c:57:24:b8:5a:3c:70:72:46:
                    b4:61:12:ac:8d:50:44:c4:85:7d:81:1e:53:23:d0:
                    a5:03:c5:09:0e:30:4e:59:15:d8:21:c9:ce:f7:65:
                    08:11:ac:b3:83:5d:3a:9a:3d:95:bd:db:3e:0f:e0:
                    e6:54:d0:78:80:b3:ff:3d:77:d2:6e:a3:8f:9f:d2:
                    30:39:d8:1a:09:59:3e:b9:ff:cd:7d:c3:09:3c:9d:
                    1d:10:b0:1f:3c:a1:17:41:ee:89:c3:26:c5:89:61:
                    89:3b:73:e1:54:a6:0d:a8:fd:e2:92:75:7f:7e:97:
                    1d:22:c1:68:f6:c6:40:cf:74:2b:ec:35:b8:ba:98:
                    b4:f4:07:f4:44:aa:ec:55:4c:06:78:ef:89:41:6d:
                    04:38:0e:e8:59:a2:25:d9:45:ae:ad:18:cd:90:9a:
                    b9:50:e2:ce:92:0c:61:2e:11:42:25:cb:b3:9c:f1:
                    89:f9:4e:5f:42:5d:fa:ed:9e:f5:5c:3e:80:cc:1a:
                    1d:0c:76:71:a3:61:fd:22:96:77:c3:2a:f6:b3:cd:
                    47:be:67:fa:35:a9:83:90:fb:2b:ab:14:b4:f2:8d:
                    e1:ff:d3:ac:b1:de:77:4c:1c:66:13:9d:04:38:d3:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:77:F4:C6:6B:06:BC:08:4E:F2:49:0F:8B:B7:F1:EE:4C:F8:58:1D
            X509v3 Authority Key Identifier:
                keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:8a:f0:ef:c7:1f:ef:23:fb:e8:13:07:2d:48:62:f1:9d:
         83:0a:24:b4:ca:bf:4f:e3:07:b8:fc:7e:41:df:b5:7c:b1:ba:
         d4:2a:a4:d5:09:e7:1a:c7:03:2e:bb:05:a8:10:7d:d4:b9:e9:
         0b:96:44:98:ef:0c:51:70:5d:c4:fe:10:9a:86:2f:88:ff:c8:
         2f:21:31:c0:2e:fc:a3:ac:09:3e:ac:8a:9d:2f:da:ed:00:75:
         f6:44:9e:ea:77:a0:f5:2d:9a:31:e8:52:bc:a7:7e:14:0e:da:
         b9:80:1a:a1:21:3a:99:aa:2a:22:94:0c:10:c4:47:ff:02:b9:
         bb:d0:bc:d9:eb:f3:78:08:dd:d0:0c:df:e6:0f:ff:1c:34:5b:
         6f:f0:b7:f9:2b:60:c2:f2:34:15:71:66:a6:45:4a:82:47:69:
         92:60:2c:da:f6:5b:53:a4:cb:40:99:ba:ae:f4:cd:ef:49:95:
         2b:a2:e2:82:ea:f4:a8:5d:3c:14:e2:77:f9:18:57:b5:0b:35:
         6e:0e:2a:2a:16:c8:52:d4:4b:91:0b:a8:46:24:d8:35:f5:fe:
         de:fa:98:9a:d4:7a:90:1f:43:d3:15:21:fc:9b:d2:3f:28:dc:
         87:98:d6:d1:b9:d3:4d:d7:c9:1e:01:f7:73:c6:60:0e:d1:42:
         ad:0c:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:50:59 2026 by rpki-client