Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File:                     r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier:          o32XEtR8v/d+s8TQf552rg3twzjZKZjicKHOUFodYT4=
Subject key identifier:   EF:AD:DE:D1:05:5F:40:F9:3F:EF:0A:A4:CE:16:B3:5F:4A:40:1F:C2
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer:       /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial:       019FAB2C81F785A7577DF575B2E3DB47D7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number:          0AE2
Signing time:             Wed 29 Jul 2026 00:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:48 +0000
Files and hashes:         1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: kF2UYzkRF1v0RruUOaCVxOY97DtwH8IpHUnV7yzxv+E=)
                          2: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (hash: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:81:f7:85:a7:57:7d:f5:75:b2:e3:db:47:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
        Validity
            Not Before: Jul 29 00:00:48 2026 GMT
            Not After : Jul 30 00:00:48 2026 GMT
        Subject: CN=efadded1055f40f93fef0aa4ce16b35f4a401fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:54:d8:d0:d8:26:31:54:61:59:d7:97:fa:
                    b7:0b:98:fb:77:2e:46:12:a8:e6:15:d3:73:f5:33:
                    0d:f0:33:a9:ba:64:56:7b:64:c3:12:07:26:11:b1:
                    a0:ba:80:bc:e3:9a:7d:f8:fb:10:aa:30:a4:ab:a3:
                    c1:70:60:c2:12:95:90:09:6e:5e:b6:7a:bb:db:ae:
                    c2:6c:a7:b3:d3:b7:3d:0f:94:ad:00:f0:c6:54:2d:
                    74:90:f8:88:b1:68:0b:8f:05:8f:f9:cb:8e:c2:93:
                    64:8f:1e:e5:93:81:72:2a:ce:4c:8f:ab:ad:ff:82:
                    d3:1b:08:76:27:ac:53:fb:82:35:ef:c6:f7:97:10:
                    74:03:69:02:99:7b:39:1a:63:f3:d1:4a:64:0f:4d:
                    08:5e:04:d4:62:97:02:bb:cd:e5:e4:99:88:f3:ae:
                    2e:8e:22:3c:b1:44:28:56:06:db:2d:f8:e5:71:40:
                    71:78:7f:ec:d4:98:48:52:25:8b:23:66:69:c9:e0:
                    40:d8:47:f7:1d:8e:af:99:f1:f4:17:4d:7c:91:6b:
                    38:92:31:a0:54:d0:19:9f:e4:97:46:5f:94:a6:ed:
                    74:6c:8e:1f:24:b9:b7:4d:10:6e:0f:72:96:6e:91:
                    c8:d5:fc:3b:03:a4:1f:73:bd:d1:4d:41:82:86:a0:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:DE:D1:05:5F:40:F9:3F:EF:0A:A4:CE:16:B3:5F:4A:40:1F:C2
            X509v3 Authority Key Identifier:
                keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:27:45:3f:a1:4e:4f:fe:6f:95:14:a1:28:b8:7c:cc:78:
         d9:31:12:a5:6e:e2:d4:1e:69:8f:ce:b1:0f:19:11:f1:89:1f:
         e8:e3:75:d5:ef:1c:77:98:68:61:e8:a5:61:80:be:c0:dc:cb:
         a4:b9:a7:ed:35:a2:b1:3c:ab:91:1d:f0:8c:8d:a9:30:6c:09:
         f3:01:30:af:b5:19:43:8f:b5:84:21:33:c8:ea:3d:fb:14:89:
         9d:cc:8e:db:a3:1e:3a:88:59:f0:50:57:65:bb:7a:28:96:5e:
         01:8b:ab:9f:59:95:2e:31:a2:6e:80:ee:61:21:a9:af:10:d8:
         bf:b3:31:91:c3:14:52:3f:3f:fa:22:55:2b:9d:69:1f:24:21:
         49:54:6d:ff:9a:30:3c:8b:67:fb:e6:0d:c6:58:ed:52:c2:1a:
         34:93:49:e6:54:82:e4:84:d4:59:2d:66:3e:c1:e0:c2:0b:87:
         ec:74:fd:fd:27:e1:26:62:68:a0:62:50:c1:cf:9e:8d:53:30:
         70:f9:29:37:1f:90:4c:92:a4:94:64:43:62:a1:c4:7b:c0:57:
         93:f7:08:51:72:73:16:dd:cf:2d:d4:ab:dc:ba:7f:30:64:b6:
         dd:b6:40:67:f9:66:9a:37:c0:e4:f7:bd:8c:dc:0c:2b:24:7a:
         c3:fb:33:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLIH3hadXffV1suPbR9exMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0
ZWZiMWQwHhcNMjYwNzI5MDAwMDQ4WhcNMjYwNzMwMDAwMDQ4WjAzMTEwLwYDVQQD
EyhlZmFkZGVkMTA1NWY0MGY5M2ZlZjBhYTRjZTE2YjM1ZjRhNDAxZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOdU2NDYJjFUYVnXl/q3C5j7dy5G
EqjmFdNz9TMN8DOpumRWe2TDEgcmEbGguoC845p9+PsQqjCkq6PBcGDCEpWQCW5e
tnq7267CbKez07c9D5StAPDGVC10kPiIsWgLjwWP+cuOwpNkjx7lk4FyKs5Mj6ut
/4LTGwh2J6xT+4I178b3lxB0A2kCmXs5GmPz0UpkD00IXgTUYpcCu83l5JmI864u
jiI8sUQoVgbbLfjlcUBxeH/s1JhIUiWLI2ZpyeBA2Ef3HY6vmfH0F018kWs4kjGg
VNAZn+SXRl+Upu10bI4fJLm3TRBuD3KWbpHI1fw7A6Qfc73RTUGChqAiMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+t3tEFX0D5P+8KpM4Ws19KQB/CMB8GA1UdIwQY
MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt
ZDEyMDVlMGMwY2NlLzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl
LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeknRT+h
Tk/+b5UUoSi4fMx42TESpW7i1B5pj86xDxkR8Ykf6ON11e8cd5hoYeilYYC+wNzL
pLmn7TWisTyrkR3wjI2pMGwJ8wEwr7UZQ4+1hCEzyOo9+xSJncyO26MeOohZ8FBX
Zbt6KJZeAYurn1mVLjGiboDuYSGprxDYv7MxkcMUUj8/+iJVK51pHyQhSVRt/5ow
PItn++YNxljtUsIaNJNJ5lSC5ITUWS1mPsHgwguH7HT9/SfhJmJooGJQwc+ejVMw
cPkpNx+QTJKklGRDYqHEe8BXk/cIUXJzFt3PLdSr3Lp/MGS23bZAZ/lmmjfA5Pe9
jNwMKyR6w/szzw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:50 2026 by rpki-client