Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          GiUD2ZPUOM8VuK4Q9q3poEs8lvE6xNXGmyK9ktVkWTI=
Subject key identifier:   8C:51:02:5C:8D:2E:BD:DF:7D:C8:FA:A7:9B:0A:99:3F:67:9B:1A:C1
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       019FACE3C00DC7154AC9372BEADCEA9C974E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          12D6
Signing time:             Wed 29 Jul 2026 08:00:34 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:34 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:34 +0000
Files and hashes:         1: WAm_tIyDAPRV3BNqWG57uTp7CzY.roa (hash: qS+vZJ+Ti9+HN+VBxaCgQjtizbbFP3FemK3D8+0KoO4=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: nFMZ+X879pegWtISPYKhofKm+5zbGEpzo2r+pXR6RQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:c0:0d:c7:15:4a:c9:37:2b:ea:dc:ea:9c:97:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Jul 29 08:00:34 2026 GMT
            Not After : Jul 30 08:00:34 2026 GMT
        Subject: CN=8c51025c8d2ebddf7dc8faa79b0a993f679b1ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:e2:20:ef:74:7d:e4:41:d3:86:6c:f5:b6:
                    77:e2:08:aa:90:c9:87:f4:dc:10:d7:45:8a:fa:61:
                    84:c8:58:e2:24:e4:62:ce:b6:75:29:51:2f:92:34:
                    5a:37:1b:ee:78:2c:80:0e:80:4f:0a:a8:04:e0:63:
                    24:6d:7b:f5:b5:d3:c9:99:a3:68:44:c2:57:d2:d7:
                    2d:bf:39:b8:40:7b:0e:c4:af:bd:00:3b:7d:2f:d2:
                    d4:a6:e6:2c:bf:48:b6:ba:70:90:72:e0:db:33:1f:
                    1e:0b:4b:e6:e9:ba:ec:2d:a4:7e:2a:16:0e:94:19:
                    18:ab:20:6a:86:a7:d0:aa:09:27:05:10:dc:70:ef:
                    f8:f5:03:3e:9e:3b:db:d4:a4:38:4e:62:51:9c:59:
                    b8:ca:fd:cd:e1:9b:fe:fb:e2:b6:e8:7f:51:6d:ac:
                    d0:b2:43:0b:64:4e:66:0d:b4:6e:16:f2:ff:24:36:
                    80:57:25:17:0b:05:39:46:79:b0:14:3c:7e:3a:cc:
                    f8:d7:8b:f1:9c:e6:fe:88:16:e9:3c:e2:de:ae:35:
                    a3:5a:95:17:e0:e9:1d:d5:d4:ca:2e:64:9c:a3:99:
                    ee:96:4f:d3:5f:76:64:af:2a:93:f1:19:f1:0c:98:
                    01:dd:9d:f4:60:f3:56:4c:e2:0a:8b:dc:3c:fa:46:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:02:5C:8D:2E:BD:DF:7D:C8:FA:A7:9B:0A:99:3F:67:9B:1A:C1
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:17:c9:39:00:23:2a:a8:22:ef:8e:72:2b:58:e9:db:bf:06:
         2a:95:99:7e:a3:cf:43:75:4e:c5:43:b3:77:52:d6:dd:44:90:
         b1:0b:9e:8c:a7:ec:e8:5c:0d:50:4a:eb:ac:b4:b8:93:36:97:
         b4:bf:42:f2:c7:02:c8:b8:ef:f8:17:8f:91:93:2b:90:8a:03:
         e6:84:cc:cd:c7:89:65:0b:cb:7d:7b:cc:4a:9d:94:5e:eb:0d:
         e6:fa:2d:bf:28:ee:f6:3d:9c:02:dd:53:68:a7:f9:f9:d5:9a:
         44:dc:5d:f8:16:a8:91:91:f1:3d:d8:60:6c:a5:c9:dd:3c:7c:
         d3:cf:70:d0:86:e9:9e:d8:03:07:ca:fc:a5:81:09:3c:f0:91:
         e0:5c:0f:c0:7a:eb:c8:c9:81:c8:18:8a:b1:50:27:2b:60:f7:
         c3:58:a1:ba:4b:d6:11:4c:27:68:76:a7:c2:cb:06:3f:95:a3:
         c9:d3:c9:d9:3b:97:1f:46:96:2c:59:7f:7e:15:fe:93:25:c1:
         a3:43:45:0c:94:51:6a:9d:cb:96:5f:ff:f8:19:f9:b2:26:af:
         75:76:46:34:74:ca:d5:0c:4f:80:c8:ba:98:87:8e:d9:6a:fc:
         b0:28:71:97:93:ec:05:90:aa:4d:41:5e:1d:e1:b9:8f:ff:ec:
         20:4d:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:25 2026 by rpki-client