Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
File:                     Wrwbfji657xjxdrqq71J5yKJX_8.mft (raw, json)
Hash identifier:          onJT1OFY5fE4OEU34VaAupSjqeGp5OFomBd45Px+xHE=
Subject key identifier:   76:80:5C:4D:D1:53:A3:CE:FE:AF:06:58:92:15:AA:6B:C7:88:1D:1C
Authority key identifier: 5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
Certificate issuer:       /CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
Certificate serial:       019FAA88AF540DCB11C67AEE4A4D5619DC7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:52 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:52 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:52 +0000
Files and hashes:         1: LCoUEax47kGqGiCuqcBQi2GTesU.roa (hash: IJOb0EvYMFxU2/6v/RPKM6efNRAz/BdqHodx1dKoF9M=)
                          2: Wrwbfji657xjxdrqq71J5yKJX_8.crl (hash: jvdhom8EUAPseq1fDtG9AsuhDr0sKUHV3bhyxBtXSts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:af:54:0d:cb:11:c6:7a:ee:4a:4d:56:19:dc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
        Validity
            Not Before: Jul 28 21:01:52 2026 GMT
            Not After : Jul 29 21:01:52 2026 GMT
        Subject: CN=76805c4dd153a3cefeaf06589215aa6bc7881d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:5b:1c:de:db:53:94:c4:73:5b:86:3b:6d:
                    8d:25:1d:ff:e2:9b:81:ad:ee:aa:35:62:5e:2c:9a:
                    d7:f7:44:af:49:63:26:90:12:3d:a3:9b:8d:28:42:
                    c3:f3:0a:7a:92:dc:75:f0:f5:bc:81:53:5b:3e:6b:
                    88:9d:19:76:53:0b:1d:1c:29:ae:3e:13:80:2b:89:
                    7a:29:16:22:20:ff:8d:43:ee:7a:36:3a:f7:b4:c8:
                    a5:16:4b:a1:17:98:b7:7a:79:25:58:cc:a4:8c:46:
                    d8:2c:92:c7:fe:fa:89:44:c7:5e:66:df:ca:c0:e7:
                    f0:1f:80:fc:30:39:11:9d:41:4b:5d:c6:d8:a9:4e:
                    41:c8:e5:0e:0d:13:a5:bc:34:8d:31:78:89:ec:e3:
                    66:19:30:01:e3:bc:3f:0d:73:cb:ef:c7:d7:b4:9a:
                    fc:09:f2:08:fb:9c:19:64:21:0c:0f:64:a1:15:10:
                    32:cf:55:19:30:0e:99:39:3d:37:51:5b:82:f7:81:
                    44:cf:6d:8e:a0:27:8c:69:8b:2d:ab:f9:77:4a:9f:
                    7d:5d:1b:00:75:b9:c3:db:af:4d:c5:69:28:0f:98:
                    dd:54:e2:ee:f5:4b:04:0e:64:90:15:c6:77:e4:7a:
                    29:74:0e:99:97:8e:28:33:2d:04:6b:78:24:f3:3d:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:80:5C:4D:D1:53:A3:CE:FE:AF:06:58:92:15:AA:6B:C7:88:1D:1C
            X509v3 Authority Key Identifier:
                keyid:5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:32:4f:ae:22:93:fa:03:69:92:c1:70:38:21:92:cf:c0:
         f6:16:fa:22:44:7b:9d:0c:2b:c9:2f:8f:c0:4e:e5:78:5d:32:
         a8:fb:47:b8:45:93:50:34:95:51:39:99:c7:34:18:69:4b:89:
         1f:e5:e7:21:7d:d4:70:93:50:66:f6:9a:ec:c2:04:87:ff:5f:
         a5:4f:5a:ca:22:a3:14:2f:45:97:3e:46:e2:06:5e:fb:3e:f3:
         7a:a6:9f:86:01:0e:53:d6:9d:5e:b8:26:60:28:53:4e:74:33:
         67:08:13:95:38:41:d8:7a:44:45:01:a8:14:e5:53:c0:10:40:
         48:b6:4c:1d:d0:8a:23:f8:b5:c9:13:1b:08:6f:5e:af:19:56:
         c0:6a:4a:24:b6:e6:2b:b8:ed:f8:ab:88:d4:30:ab:29:a6:f6:
         54:69:45:a3:93:24:4e:3d:22:f1:3c:be:c8:56:5e:6f:b0:92:
         7c:15:1c:18:e6:fa:dd:d5:30:a8:43:af:03:2e:21:05:08:84:
         71:9e:61:d7:cd:ee:42:c4:fb:aa:a0:6e:43:25:61:44:c1:07:
         ec:8a:ca:ff:6e:88:94:64:ea:9a:10:51:8e:a0:17:ac:52:a4:
         a4:9b:b9:3d:9a:7c:f2:fe:4e:aa:60:39:d5:40:a6:f8:e5:97:
         62:a2:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:08 2026 by rpki-client