Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          2r7GFHu9YcD1UQHK4D7dOgzItnRYKgLZP+Ggg6JiUGU=
Subject key identifier:   1C:21:E7:99:4E:08:FE:C0:29:55:A2:6D:50:41:97:62:B4:23:8A:43
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       01A0DD97E1A635DF47D5328BD1FFC3AD8BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 12:01:53 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:53 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:53 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: vVdqbrgmn28d1j3RKZqU10aJBYmtziK7kvvBFKJcLW0=)
                          2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
                          3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:e1:a6:35:df:47:d5:32:8b:d1:ff:c3:ad:8b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: Sep 26 12:01:53 2026 GMT
            Not After : Sep 27 12:01:53 2026 GMT
        Subject: CN=1c21e7994e08fec02955a26d50419762b4238a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:2b:7d:d6:63:67:e9:90:7f:2a:17:8e:55:
                    88:55:91:fd:07:5f:d3:41:97:6a:b0:bc:0b:c7:9d:
                    4a:31:1d:3c:c2:be:fa:60:e4:d5:72:ed:1a:20:91:
                    9a:f3:58:03:aa:8e:88:c9:ce:db:a6:50:7e:94:eb:
                    d8:b0:93:69:f6:c7:d0:96:97:3f:00:99:37:82:bc:
                    36:b4:91:ae:36:21:f2:34:f1:57:61:23:11:d8:39:
                    00:f3:e0:b7:c5:e6:44:ff:bf:c5:b9:f5:bb:56:b4:
                    71:b4:79:71:b2:90:2d:ed:ce:af:57:b0:6a:36:b5:
                    30:7c:cf:73:55:08:83:78:fb:fd:ac:ea:9f:e7:64:
                    fb:f4:91:d0:4b:f5:e8:4b:45:80:6f:f8:4f:f3:21:
                    60:d0:39:84:72:6d:b8:cf:3e:a4:70:d0:f6:ea:42:
                    7b:e6:19:34:7f:66:0d:e3:b9:76:88:69:9c:41:a3:
                    2e:81:ec:62:f4:49:c2:c9:ad:0a:2e:aa:a5:95:65:
                    a9:56:8e:b9:1f:cf:57:de:7c:d4:1e:58:c8:e3:76:
                    42:ad:2b:56:45:31:3a:5c:a0:ac:fa:38:b3:e2:64:
                    4a:27:ba:2b:89:92:b1:38:a7:7c:06:51:4a:83:78:
                    7a:3d:ec:21:3b:fb:13:2d:ec:66:49:77:11:0c:60:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:E7:99:4E:08:FE:C0:29:55:A2:6D:50:41:97:62:B4:23:8A:43
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:05:43:80:4a:f5:08:7e:33:42:00:ee:03:77:0b:70:4f:28:
         92:6b:9c:de:59:9d:e9:61:66:a5:c9:0c:53:c8:b7:ef:89:c8:
         09:8c:1a:ac:31:e8:1f:7d:0f:bb:3d:6b:0b:1a:37:e4:82:c1:
         5d:7c:51:83:61:f9:a0:41:3c:65:6e:7a:1b:90:76:bd:42:26:
         49:62:0a:6e:30:d2:d6:e1:5d:b5:d6:55:5a:06:e1:dd:90:c5:
         6f:d4:34:2a:22:11:6c:0d:ad:c6:46:56:35:b4:6e:fd:cb:1b:
         0a:12:82:e6:2b:f4:09:9c:4c:3a:b1:35:7e:a6:3c:91:66:43:
         0e:5f:bd:a4:21:3e:f6:e6:8a:13:27:fd:84:36:63:00:40:eb:
         f0:eb:24:7f:76:2c:9b:32:5a:01:9c:df:b0:a9:83:b9:0b:d1:
         b9:af:28:08:2f:1f:77:4d:c4:53:3c:fb:1f:f3:40:e0:66:e0:
         f6:4f:ff:bc:00:d6:04:30:93:2d:ff:33:d9:66:91:f4:39:66:
         3b:cf:8f:ab:d6:c5:b2:51:66:ab:63:3a:5a:96:36:b7:4f:bf:
         e9:ac:e0:05:a5:9b:0c:bf:0a:6b:e6:e9:8c:14:ec:42:41:cb:
         75:6c:69:2a:2a:a8:f4:98:12:b7:86:ec:e7:19:fa:bd:48:3f:
         86:e9:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:30:40 2026 by rpki-client