Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File:                     wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier:          OvlbG75KlO3pzCFEvkmrY8gqTfzIumiLdfhTuAQ/ts0=
Subject key identifier:   08:29:1F:C0:EA:32:58:98:3E:97:C8:DA:0D:C4:F1:BB:2D:4D:4A:BE
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer:       /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial:       019FAB6355A7C979467B6DADA5A4A79E7404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number:          02E0
Signing time:             Wed 29 Jul 2026 01:00:41 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:41 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:41 +0000
Files and hashes:         1: 9NpMCQPTdYLM6RigPHbxPRz98fA.roa (hash: ioCoSDv35er7fovn3uLODbMUmoh4IJiyFfj+GFkzs9c=)
                          2: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
                          3: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
                          4: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: ETKgBFGkcLNZXOCG4KM1DpPGqWWWc54kHhsCPqVpZK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:55:a7:c9:79:46:7b:6d:ad:a5:a4:a7:9e:74:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
        Validity
            Not Before: Jul 29 01:00:41 2026 GMT
            Not After : Jul 30 01:00:41 2026 GMT
        Subject: CN=08291fc0ea3258983e97c8da0dc4f1bb2d4d4abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:cb:d6:28:5c:e5:e5:50:b0:f1:17:6e:d2:
                    44:34:8d:b0:db:e9:1d:af:1c:8f:e1:15:40:d0:c5:
                    3f:29:29:9d:b1:d6:fa:1a:0b:4a:fc:28:b9:a6:ef:
                    c4:40:74:67:71:03:2e:e3:5c:f2:0a:87:7a:c0:27:
                    12:cf:81:34:0a:33:98:40:1c:26:ee:c6:45:54:74:
                    ad:75:db:8d:86:b7:ca:b0:01:8d:6c:e5:f3:5b:f1:
                    cf:17:6d:70:67:35:ba:91:ee:f9:95:58:1a:29:13:
                    8f:e9:97:0a:d7:b5:04:31:f9:c2:14:e1:1e:a9:97:
                    b0:50:f9:4f:1a:59:4c:90:65:69:f1:0c:a8:eb:27:
                    8b:49:ac:9b:33:a8:ee:69:ce:a6:6a:da:af:3c:4d:
                    f4:9a:b6:0d:aa:12:01:13:bc:d8:52:39:e7:ca:80:
                    f3:eb:53:22:d9:c6:04:08:06:af:a8:f2:8e:bc:d6:
                    84:9c:47:73:76:64:af:77:63:5a:6b:39:ea:f0:42:
                    20:81:fa:25:64:ec:0c:a8:fb:6c:be:ab:4e:37:ce:
                    d2:6e:2c:bb:28:5e:95:99:e9:c7:36:d0:75:f0:1e:
                    48:42:6d:bf:6c:ec:b0:ca:b5:38:95:0a:5b:d2:12:
                    24:83:68:e4:b5:5f:34:27:5b:56:79:e7:46:30:06:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:29:1F:C0:EA:32:58:98:3E:97:C8:DA:0D:C4:F1:BB:2D:4D:4A:BE
            X509v3 Authority Key Identifier:
                keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:c9:ef:76:00:9f:2f:00:ce:e0:9b:95:80:9d:e9:c7:65:
         89:33:8b:12:cb:48:01:3f:83:45:f1:60:a5:bd:0d:70:fb:17:
         73:13:a7:ce:34:4e:d9:8d:45:cf:b9:21:b1:47:e7:c5:fa:5a:
         35:b4:8b:03:46:bb:65:55:59:9d:c0:2c:3c:5d:40:c6:32:a7:
         23:58:85:f3:73:9e:07:c6:57:40:18:b9:9b:3d:34:71:43:b8:
         6a:dd:f3:f4:2a:13:28:fc:3d:ad:f5:c2:73:e2:f5:a3:44:f9:
         52:38:c0:e3:09:b4:83:27:c5:13:a8:34:ab:7e:d7:84:0a:e7:
         fd:74:e3:b7:17:1e:e6:20:cb:b6:a2:1a:b4:4c:6b:b5:df:d2:
         0f:24:de:f7:cd:53:89:27:3c:6e:b2:25:1a:c4:22:b9:ba:37:
         18:af:0f:12:1c:7c:07:ef:da:91:07:8b:c9:16:0d:13:5c:1e:
         c0:19:34:6f:ef:b1:06:78:ee:d7:78:46:10:bb:3f:43:45:f1:
         7d:4b:d9:36:7a:cd:c2:1c:c3:9b:a8:e7:f2:c9:bd:41:e2:09:
         88:c5:05:28:f9:d7:72:7d:b4:1d:cf:2a:a7:c3:cc:42:fd:86:
         5b:7d:3a:92:19:43:6a:05:89:71:16:9c:f6:2a:42:17:c3:37:
         94:bc:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:55 2026 by rpki-client