Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File:                     wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier:          3l5WHer5NpLDb7adUeDXmXp7aRtlIguz93G/xeN192s=
Subject key identifier:   68:F6:D7:2D:E7:E4:80:8D:01:A0:85:20:8C:B7:3D:18:BA:7C:24:CC
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer:       /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial:       019FAB63FB915B924013621FBAFA96568F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number:          1312
Signing time:             Wed 29 Jul 2026 01:01:24 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:24 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:24 +0000
Files and hashes:         1: 3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa (hash: gAnkb8zd3PHjDZTfC8dT4Ka5LoLCtOrff/CEiB269iI=)
                          2: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (hash: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A=)
                          3: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (hash: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0=)
                          4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: j4szHzuqhBnGx0GmsS+hpu3T1EJ+qk1SQhOyDFRsqgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:fb:91:5b:92:40:13:62:1f:ba:fa:96:56:8f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
        Validity
            Not Before: Jul 29 01:01:24 2026 GMT
            Not After : Jul 30 01:01:24 2026 GMT
        Subject: CN=68f6d72de7e4808d01a085208cb73d18ba7c24cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:69:bc:16:0c:f0:cd:e5:fc:d1:55:00:9c:
                    af:93:d4:23:10:e4:b0:13:33:6a:70:ca:91:e1:bd:
                    75:9b:72:27:0c:3f:32:71:cf:b1:21:d0:ea:84:23:
                    40:bd:c6:34:b9:c7:b5:9f:f4:67:b1:8f:69:14:aa:
                    2c:23:5e:57:cf:93:5a:c1:c5:ab:2c:3e:81:c7:fa:
                    e4:bf:92:ee:dd:97:e4:44:14:68:08:95:fc:9f:0c:
                    fd:08:e7:50:79:cf:93:46:48:d6:97:98:23:82:f5:
                    b7:27:12:ba:46:d9:46:cc:31:fe:0a:0f:7d:be:09:
                    ab:2c:dd:e1:16:81:7a:98:cd:9c:9d:18:51:8e:8d:
                    04:1d:8b:6c:8c:97:26:b9:3f:8a:8a:6e:f1:23:6e:
                    30:a7:bf:3f:66:10:f3:24:d2:b0:26:73:8b:f3:2f:
                    53:89:cf:6e:e1:e0:0e:80:1b:f8:df:fd:bc:f5:e2:
                    4e:1f:44:99:03:76:7a:a5:7e:fc:bf:1f:fc:9d:99:
                    4a:5a:07:03:be:00:8c:f0:91:35:09:6a:27:8a:66:
                    03:29:b7:4d:86:dc:57:02:20:11:5b:e3:91:6a:b6:
                    84:bd:d6:c0:b7:1e:80:b2:f0:c9:29:c0:31:36:82:
                    80:05:d3:93:56:1f:1f:d7:02:3a:a3:63:5c:7e:4b:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F6:D7:2D:E7:E4:80:8D:01:A0:85:20:8C:B7:3D:18:BA:7C:24:CC
            X509v3 Authority Key Identifier:
                keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:d3:49:26:ac:b4:cf:07:92:5e:83:0d:10:f0:05:f3:cf:
         7e:82:6b:83:c8:90:26:6b:01:19:35:8f:c8:15:a0:9b:9e:59:
         bc:82:73:06:66:d6:55:7e:60:c6:00:e4:e1:1b:f0:37:82:a4:
         40:ac:06:62:9a:4b:01:c1:1c:09:5d:6c:af:56:c9:3c:c8:61:
         7e:ca:e8:6a:44:61:ac:d3:3a:ae:ef:08:34:13:80:1f:96:c5:
         ce:ef:5f:a8:63:ea:ef:8b:c7:14:f5:36:e4:6a:a2:b5:67:1a:
         ba:c7:e7:c5:6f:48:9a:f5:cc:aa:b4:e7:f3:c9:bc:2d:de:ca:
         fe:97:3a:11:f4:fb:39:85:f8:4c:14:f9:d3:85:8e:3a:49:06:
         ec:87:06:0c:8a:c9:63:a9:f5:d5:a7:61:1d:d2:48:ee:ab:de:
         2c:12:0b:c6:3b:52:9b:2a:cb:ee:eb:33:44:b9:8d:c2:a5:6e:
         19:a1:95:14:f2:8b:db:97:03:34:cd:3f:28:5d:d1:d7:fc:71:
         34:0a:bf:54:66:9a:3f:8d:be:b8:7e:0e:9f:85:75:ca:14:f7:
         a2:a2:f0:a0:0e:47:78:2c:c6:84:e0:6a:2b:12:d9:af:65:ac:
         16:e7:c9:c3:b9:80:73:4a:b1:c0:00:16:d1:84:48:c3:7a:67:
         a8:b9:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:32:29 2026 by rpki-client