Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File:                     wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier:          9qIX0U5HasVsSOPxOFJ0MH2Q1dVe6PfXa1mL4+DIn4w=
Subject key identifier:   CC:1C:07:0F:0D:A0:85:3B:0F:B9:9B:3E:F6:3D:BC:2E:94:4F:EC:75
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer:       /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial:       019FAB2C4427C36E9E9DA942FF2F9A98998A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number:          0FD8
Signing time:             Wed 29 Jul 2026 00:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:32 +0000
Files and hashes:         1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
                          2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
                          3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: P0T5uC3tJp9/v7W4N82Ng50IDA/ki9UmHktyx21hgF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:44:27:c3:6e:9e:9d:a9:42:ff:2f:9a:98:99:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
        Validity
            Not Before: Jul 29 00:00:32 2026 GMT
            Not After : Jul 30 00:00:32 2026 GMT
        Subject: CN=cc1c070f0da0853b0fb99b3ef63dbc2e944fec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:55:f8:16:bc:00:16:78:bb:ae:2a:c3:c4:
                    bc:a0:93:b4:c1:92:3c:50:25:f2:1d:d0:73:0d:e0:
                    b8:a8:3c:16:2e:c6:b7:4c:6a:5d:d0:95:6b:43:cd:
                    ea:83:e6:c9:52:7c:74:3f:fa:0a:04:f9:2a:64:ff:
                    db:b6:11:3a:1d:5a:54:ba:bc:91:fe:aa:4f:a3:98:
                    de:6e:62:d7:cf:27:1f:4e:f9:29:34:20:c5:78:c9:
                    7d:39:42:bc:bd:64:f4:5d:ed:88:10:3f:65:47:a7:
                    75:b3:5f:ad:46:63:8a:0f:7d:ae:b0:d0:69:f9:0b:
                    e8:36:db:2d:a7:04:ca:76:56:3e:df:79:67:d9:36:
                    af:8e:7d:21:8e:6f:9b:e2:a6:97:b9:c8:b8:4e:c3:
                    0f:40:e0:67:92:f7:45:d8:51:d0:85:dd:08:a6:78:
                    ee:a4:f0:90:42:98:40:7d:11:a6:a5:f1:da:2d:00:
                    d4:f7:ec:b7:bf:fe:14:9f:75:12:11:d2:4e:b3:69:
                    86:ec:01:3a:3e:b7:46:35:6d:55:f0:03:1e:bc:e8:
                    19:aa:5b:2a:ae:69:b7:31:0a:d8:a1:c7:8a:24:d4:
                    e3:58:a9:3d:54:d1:23:2d:b6:35:a7:35:17:e7:c6:
                    4d:d8:f2:ed:81:0f:9f:0e:f3:61:8d:1b:f7:c5:37:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:07:0F:0D:A0:85:3B:0F:B9:9B:3E:F6:3D:BC:2E:94:4F:EC:75
            X509v3 Authority Key Identifier:
                keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:95:74:a3:23:82:d0:bb:d8:c2:a4:81:21:2d:50:dc:bd:3f:
         15:d8:8b:28:f6:24:37:12:9a:54:7d:91:46:12:9f:3f:24:f6:
         e9:53:1b:0b:72:cb:48:48:56:06:09:50:63:8c:62:2e:0b:70:
         78:8a:37:04:dc:4f:6e:13:81:bb:28:e2:51:c7:2c:d1:16:11:
         05:bc:b6:7d:f6:b3:97:59:43:ef:79:76:20:54:96:94:5b:a7:
         6b:69:ae:85:e3:68:44:67:c0:01:f6:61:ea:c1:50:98:f4:2f:
         96:41:da:77:07:99:5f:77:0f:2e:19:21:0e:ef:7d:66:a2:df:
         6d:4e:8d:1b:29:b4:07:b7:df:4b:a7:c6:63:9f:e3:c2:04:46:
         61:f3:93:53:80:9b:b1:ca:49:a1:ba:ab:92:81:e6:b4:cd:1e:
         79:cd:7a:b9:e8:a8:40:e4:c2:a3:ca:67:79:d3:01:20:25:7a:
         26:a7:61:fd:e2:2f:41:9a:cf:30:5b:da:a3:2e:05:92:d4:f8:
         c7:96:79:dc:c7:2a:0f:ee:ba:3e:5a:e8:fe:0d:86:57:a5:b9:
         fb:11:54:80:20:ae:76:5d:38:e5:5f:9d:f7:ef:b0:ee:d4:b1:
         8b:84:15:79:07:95:c0:51:7c:ca:bd:0e:96:41:19:47:4d:73:
         1f:55:ee:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLEQnw26enalC/y+amJmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZmQyYzc0YWQ2ZmFlMmRkZDBmNmU5YzM5ZmRlODMxODkz
YWU2ZjkwHhcNMjYwNzI5MDAwMDMyWhcNMjYwNzMwMDAwMDMyWjAzMTEwLwYDVQQD
EyhjYzFjMDcwZjBkYTA4NTNiMGZiOTliM2VmNjNkYmMyZTk0NGZlYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPdV+Ba8ABZ4u64qw8S8oJO0wZI8
UCXyHdBzDeC4qDwWLsa3TGpd0JVrQ83qg+bJUnx0P/oKBPkqZP/bthE6HVpUuryR
/qpPo5jebmLXzycfTvkpNCDFeMl9OUK8vWT0Xe2IED9lR6d1s1+tRmOKD32usNBp
+QvoNtstpwTKdlY+33ln2Tavjn0hjm+b4qaXuci4TsMPQOBnkvdF2FHQhd0Ipnju
pPCQQphAfRGmpfHaLQDU9+y3v/4Un3USEdJOs2mG7AE6PrdGNW1V8AMevOgZqlsq
rmm3MQrYoceKJNTjWKk9VNEjLbY1pzUX58ZN2PLtgQ+fDvNhjRv3xTcvawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwcBw8NoIU7D7mbPvY9vC6UT+x1MB8GA1UdIwQY
MBaAFML9LHStb64t3Q9unDn96DGJOub5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQt
NTM1Y2MwYzEwMmYwLzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQtNTM1Y2MwYzEwMmYw
LzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpV0oyOC
0LvYwqSBIS1Q3L0/FdiLKPYkNxKaVH2RRhKfPyT26VMbC3LLSEhWBglQY4xiLgtw
eIo3BNxPbhOBuyjiUccs0RYRBby2ffazl1lD73l2IFSWlFuna2muheNoRGfAAfZh
6sFQmPQvlkHadweZX3cPLhkhDu99ZqLfbU6NGym0B7ffS6fGY5/jwgRGYfOTU4Cb
scpJobqrkoHmtM0eec16ueioQOTCo8pnedMBICV6Jqdh/eIvQZrPMFvaoy4FktT4
x5Z53McqD+66Plro/g2GV6W5+xFUgCCudl045V+d9++w7tSxi4QVeQeVwFF8yr0O
lkEZR01zH1XuKw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:09 2026 by rpki-client