Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          sUuXsYiZYNb6gYFWn2Y/MoGwdxD69X5ODavooKl+/2A=
Subject key identifier:   2F:F9:C7:8C:05:AA:A8:58:CE:D8:32:28:18:9F:05:10:1F:0C:51:2C
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019FAC7616471C58C446EC978FC238EA5DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 06:00:47 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:47 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:47 +0000
Files and hashes:         1: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (hash: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY=)
                          2: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (hash: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=)
                          3: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (hash: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: BiZzUxdZYgjG0Cae8SfGpa0amNqTqPjEVX754bXQxmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:16:47:1c:58:c4:46:ec:97:8f:c2:38:ea:5d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Jul 29 06:00:47 2026 GMT
            Not After : Jul 30 06:00:47 2026 GMT
        Subject: CN=2ff9c78c05aaa858ced83228189f05101f0c512c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:78:d2:c7:74:84:89:0b:02:08:15:79:e7:
                    3d:38:3b:6e:b5:28:f4:bf:83:7b:54:65:89:fe:c2:
                    92:43:26:be:72:6d:32:f8:d9:7e:63:cd:0a:3b:5a:
                    f6:f0:75:13:10:d1:17:16:52:e6:2b:72:82:00:19:
                    93:e9:1c:e4:cb:7f:bf:78:b1:5b:1b:b8:0d:d0:4e:
                    ac:9b:23:17:42:1b:23:0a:82:e0:d7:ed:ca:0e:df:
                    b1:dc:7c:d4:80:26:0b:94:48:b5:82:f3:99:d2:ad:
                    ca:cc:7c:fb:f6:21:27:91:13:5c:7f:83:be:e7:a1:
                    9b:2f:ee:a4:33:96:13:56:a0:93:17:bc:d5:b2:f3:
                    4a:07:0c:5a:cb:f1:b4:91:92:0f:c4:4b:4e:73:30:
                    40:5c:2a:00:25:1d:c3:22:50:56:ad:64:fc:a3:4c:
                    5b:55:3c:3e:f0:2b:da:bf:39:84:62:f9:b7:cd:51:
                    cb:1b:c7:7f:ac:6b:73:da:ca:c2:e6:e2:d6:09:9b:
                    45:04:11:73:8d:fd:93:bf:91:fb:85:e4:09:a6:21:
                    a2:22:f5:d9:e7:3e:46:d2:30:6d:d4:83:ec:75:e8:
                    56:68:89:d6:20:a9:bc:83:cc:11:fe:b1:c7:e0:82:
                    56:67:20:85:51:52:72:06:34:82:7b:a1:4b:59:26:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F9:C7:8C:05:AA:A8:58:CE:D8:32:28:18:9F:05:10:1F:0C:51:2C
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:48:10:f0:ee:9f:c0:75:8d:3f:cf:30:cf:b4:48:7f:0f:d5:
         da:b9:7b:f9:a0:3c:45:03:29:5e:8d:c8:a8:42:14:9f:25:09:
         40:29:90:bf:86:dc:c2:63:c9:de:40:f0:69:6e:08:6a:ef:b0:
         9e:73:a8:9a:71:9b:85:64:26:57:64:b5:95:35:2f:67:42:c4:
         d5:54:5c:3b:80:75:e0:91:b2:7a:62:94:4c:4b:ee:90:c3:3d:
         0f:4d:01:b9:b3:24:fd:b3:a2:f3:98:52:32:6a:99:8c:83:30:
         1a:e1:a0:21:36:bc:0b:45:95:aa:ca:22:3a:52:c1:38:cf:74:
         bf:61:03:5e:b0:22:39:45:c9:01:09:82:f9:83:e4:3e:da:2e:
         46:43:0f:2b:c6:86:76:43:d6:bb:dc:28:14:1e:d2:76:26:b5:
         15:79:44:97:62:ba:fc:5c:83:a4:2e:43:df:cd:f8:46:70:8c:
         69:72:df:62:86:d7:d2:66:8c:26:c4:04:07:e4:73:85:35:83:
         9b:79:b6:b2:c1:a8:a2:ac:ed:7c:c2:11:b0:3d:dd:9a:5b:9d:
         c1:28:81:40:bf:c8:4d:a1:21:74:c5:b4:e0:de:b5:07:44:94:
         e3:4c:cd:b4:2b:90:cb:24:f3:8f:f8:4d:2f:74:50:39:d4:df:
         b1:38:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:01 2026 by rpki-client