Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File:                     wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier:          KeLCeIl0WETAqD7zQmQBy5qlrWu7IhbURxDftcHmPEo=
Subject key identifier:   9B:FE:04:35:EF:76:BC:81:03:4C:5E:6F:23:55:00:B0:0D:20:26:86
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer:       /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial:       019FA9E2719CFB658D733528C66EFA44217F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number:          09A9
Signing time:             Tue 28 Jul 2026 18:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:17 +0000
Files and hashes:         1: _ACz8CA-TXwzIJE_d_RTaefJ03k.roa (hash: pXwd5dPhtVqhSSdIzOj+L8V8XokZaPGH3lcBSuKJrK4=)
                          2: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: XfhrH5QqrZiduinopY7ZyLAbkzm3+Q16oX6ZKhotBIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:71:9c:fb:65:8d:73:35:28:c6:6e:fa:44:21:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
        Validity
            Not Before: Jul 28 18:00:17 2026 GMT
            Not After : Jul 29 18:00:17 2026 GMT
        Subject: CN=9bfe0435ef76bc81034c5e6f235500b00d202686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:18:e3:7e:91:01:de:3d:bb:11:8a:8b:82:ba:
                    b2:d7:92:d9:01:dd:d0:0a:5d:27:46:8f:0b:c7:27:
                    27:e8:a4:d2:b9:db:ca:a1:7b:f9:e4:8a:c4:2c:6c:
                    79:f6:a0:53:60:97:f9:43:d3:f5:d1:96:e3:e2:98:
                    65:02:47:8e:f1:96:b3:4e:9b:9d:4a:fe:78:e0:29:
                    d5:88:d5:61:38:00:7a:14:fc:5a:37:f3:02:d2:53:
                    e7:f9:1a:a1:c5:22:8a:b7:b5:c6:91:8e:77:2f:6d:
                    aa:62:e7:cb:54:7f:6b:da:5b:05:ba:42:bb:48:01:
                    e4:0a:01:af:03:1d:7b:21:a7:87:92:40:bb:16:b5:
                    36:18:39:65:f1:c4:b5:0f:e6:11:58:fd:a3:67:46:
                    99:59:94:16:d7:7a:cf:7d:6b:39:e6:e2:ce:df:83:
                    9b:b5:5c:56:b0:f5:c5:24:03:97:d0:99:c2:da:31:
                    cb:bb:c2:50:ce:eb:bf:06:1f:6f:d8:79:7b:1d:63:
                    cd:8f:73:96:71:4a:4c:89:a9:58:6f:f7:68:6c:36:
                    07:72:5b:c1:4b:05:86:b1:08:dd:05:51:fa:04:48:
                    1b:7c:e5:5a:d8:9a:42:c9:5a:be:da:c6:2c:66:a1:
                    1b:dc:c6:a6:52:b8:76:cd:71:60:bf:f2:ab:eb:aa:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:04:35:EF:76:BC:81:03:4C:5E:6F:23:55:00:B0:0D:20:26:86
            X509v3 Authority Key Identifier:
                keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:ba:de:bd:e8:13:f0:16:98:e0:48:04:6e:3b:d8:93:66:d4:
         9e:43:2e:11:e3:a2:ac:36:06:80:27:40:8e:35:2b:6b:cb:d4:
         d3:29:6d:8b:2f:4e:cf:cb:91:b5:de:47:0f:2b:d0:4d:38:79:
         3d:61:5f:d8:52:c8:64:fa:18:f4:d5:ca:b5:02:53:be:db:32:
         3f:d2:37:e9:ca:d6:aa:f7:5b:73:c3:9a:d8:ae:87:21:7b:75:
         f9:94:b6:cf:b5:9f:fe:ff:12:ba:65:4e:3e:0f:3d:8a:95:0b:
         8f:e2:14:d6:29:c3:b9:83:f9:15:1f:46:aa:5c:8c:52:1b:ed:
         81:a4:6a:7d:84:58:50:c6:6e:ae:d7:05:23:45:7f:61:5b:6d:
         49:de:31:09:26:ec:21:4a:b5:06:f3:5f:99:7f:bc:97:17:46:
         1b:d3:0a:a9:96:3a:ce:5c:8c:9a:7d:a9:ff:89:a6:f0:e2:f7:
         2a:ff:20:01:9c:24:a2:0b:d2:d1:21:ba:0b:a2:32:4a:19:b3:
         41:8f:c8:68:0f:81:3a:39:69:f5:55:a9:13:68:00:45:dd:3a:
         1b:13:38:08:54:a1:f0:e0:41:1c:29:8f:ba:d5:73:a1:02:0b:
         ba:1e:0e:fc:dd:d1:6a:5e:65:94:e0:9e:ec:70:4c:25:ad:b2:
         68:d3:ad:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4nGc+2WNczUoxm76RCF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjYwNzI4MTgwMDE3WhcNMjYwNzI5MTgwMDE3WjAzMTEwLwYDVQQD
Eyg5YmZlMDQzNWVmNzZiYzgxMDM0YzVlNmYyMzU1MDBiMDBkMjAyNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BjjfpEB3j27EYqLgrqy15LZAd3Q
Cl0nRo8Lxycn6KTSudvKoXv55IrELGx59qBTYJf5Q9P10Zbj4phlAkeO8ZazTpud
Sv544CnViNVhOAB6FPxaN/MC0lPn+RqhxSKKt7XGkY53L22qYufLVH9r2lsFukK7
SAHkCgGvAx17IaeHkkC7FrU2GDll8cS1D+YRWP2jZ0aZWZQW13rPfWs55uLO34Ob
tVxWsPXFJAOX0JnC2jHLu8JQzuu/Bh9v2Hl7HWPNj3OWcUpMialYb/dobDYHclvB
SwWGsQjdBVH6BEgbfOVa2JpCyVq+2sYsZqEb3MamUrh2zXFgv/Kr66p9yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv+BDXvdryBA0xebyNVALANICaGMB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2rrevegT
8BaY4EgEbjvYk2bUnkMuEeOirDYGgCdAjjUra8vU0yltiy9Oz8uRtd5HDyvQTTh5
PWFf2FLIZPoY9NXKtQJTvtsyP9I36crWqvdbc8Oa2K6HIXt1+ZS2z7Wf/v8SumVO
Pg89ipULj+IU1inDuYP5FR9GqlyMUhvtgaRqfYRYUMZurtcFI0V/YVttSd4xCSbs
IUq1BvNfmX+8lxdGG9MKqZY6zlyMmn2p/4mm8OL3Kv8gAZwkogvS0SG6C6IyShmz
QY/IaA+BOjlp9VWpE2gARd06GxM4CFSh8OBBHCmPutVzoQILuh4O/N3Ral5llOCe
7HBMJa2yaNOt8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:17 2026 by rpki-client