Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File:                     WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier:          UuzswxiW9RBcWxMg17CV5y+KxNUXaeCFxV5t6We8m9Y=
Subject key identifier:   DC:5A:D0:58:83:34:85:17:2B:F5:08:CF:70:95:43:A7:E7:77:3A:CA
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer:       /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial:       01A0BE798E032A4CEDEF1AA27F30F295CCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number:          0EE4
Signing time:             Sun 20 Sep 2026 11:00:32 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:32 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:32 +0000
Files and hashes:         1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: jAMC30SjvNwH1zlatjG4As7aLXutETOHFO4HuuGrXTY=)
                          2: uOMEY1CfkmC36r0f9f4bgECHg2c.asa (hash: 8uoM6/FqhEm2cMD7oAzd60368BQDHqi/zjzPTgoPbLI=)
                          3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:8e:03:2a:4c:ed:ef:1a:a2:7f:30:f2:95:cc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
        Validity
            Not Before: Sep 20 11:00:32 2026 GMT
            Not After : Sep 21 11:00:32 2026 GMT
        Subject: CN=dc5ad058833485172bf508cf709543a7e7773aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:38:3e:f9:39:de:4d:3f:71:28:fe:b6:5b:
                    ee:b1:f3:59:63:13:a6:18:97:08:35:0f:25:b4:1c:
                    bd:58:c4:80:09:3d:46:17:3e:f7:f4:0d:bf:1f:de:
                    8f:25:88:e5:37:e8:9d:08:96:4d:f7:6a:a7:31:31:
                    a7:1c:5e:a4:17:58:58:2a:09:3e:c6:87:f3:fc:af:
                    a6:25:87:10:20:1d:00:ff:0c:87:83:fd:6b:de:43:
                    ed:02:0b:1a:a4:e7:cf:6c:9a:8c:7c:90:61:bc:3c:
                    47:38:a5:82:21:17:bf:09:94:d1:5b:b2:2c:a6:6b:
                    de:fd:3f:6d:95:84:91:01:f4:cb:2c:af:62:02:ba:
                    9a:86:1e:44:9d:bd:f7:ee:d2:a8:09:af:b7:44:a2:
                    f7:c6:ba:5a:be:a0:5f:e2:d1:48:0c:5d:5d:3e:c5:
                    2b:31:cb:e0:ec:96:7f:50:b2:e7:e1:b0:96:5f:8e:
                    95:93:ee:c1:34:06:dd:af:dc:0c:18:27:42:69:b5:
                    3c:a5:89:7f:a5:9a:d0:0b:2d:5f:e7:f5:77:25:4d:
                    be:aa:98:ab:c6:9f:d3:e4:77:4d:1d:70:e1:61:05:
                    fa:bd:ff:cb:e5:34:ca:cd:fe:6c:c2:11:cb:05:eb:
                    17:b3:cf:3c:fb:2e:64:d3:ea:6e:4f:74:2d:7b:ef:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5A:D0:58:83:34:85:17:2B:F5:08:CF:70:95:43:A7:E7:77:3A:CA
            X509v3 Authority Key Identifier:
                keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:cc:dd:46:3c:a8:a8:2f:5d:21:8d:6e:d2:fd:72:06:c0:
         8c:db:f5:21:b0:63:87:78:28:b4:a3:49:19:d1:f2:c6:42:b6:
         13:20:ba:3d:9a:64:44:01:02:37:27:f4:b2:f8:44:6b:10:6f:
         ca:18:b8:e4:93:c8:b1:9a:48:2b:2c:5a:9d:15:5a:06:69:b8:
         51:47:7d:b6:ea:d3:a1:f8:77:8b:fa:6c:35:11:be:67:ff:e6:
         6c:19:4d:97:e3:e7:73:da:36:11:3e:76:9b:c2:35:8c:5e:5d:
         4c:75:20:bf:3f:cb:8b:73:56:3c:09:90:6d:da:35:a0:b9:6b:
         f1:22:11:95:56:71:af:cf:a4:1d:e4:fb:8f:32:83:ed:3b:e1:
         cd:c8:bc:71:ee:4a:41:07:ec:e1:fb:f3:4f:ad:c6:0b:73:a9:
         56:c2:f0:47:6b:7e:44:94:a0:d1:3d:70:31:9f:4d:4e:f8:83:
         bb:f3:f6:ca:c0:82:34:7f:ef:0b:f5:a5:be:4a:b2:1f:32:d8:
         5c:56:72:d7:a0:86:bd:a1:c8:05:ac:74:1c:11:fe:10:4f:bd:
         f2:39:4b:dc:ef:48:d7:0b:f1:c3:1b:b7:ba:37:6c:a3:f1:ad:
         46:be:bf:c3:ae:d1:7c:3e:73:74:44:e0:1f:25:57:a8:4d:3d:
         2f:de:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:51:24 2026 by rpki-client