Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File:                     wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier:          DiCNH6xM/bK427pytclaXjlWLU795ZAgymRGKlHb34I=
Subject key identifier:   CE:C8:04:7B:15:43:87:F4:A6:D1:FC:59:7C:92:39:5D:12:17:AC:2E
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019FA96F0B0EF2883BA6F397CD3D773F5662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number:          0E8F
Signing time:             Tue 28 Jul 2026 15:54:14 +0000
Manifest this update:     Tue 28 Jul 2026 15:54:14 +0000
Manifest next update:     Wed 29 Jul 2026 15:54:14 +0000
Files and hashes:         1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=)
                          2: 37DSb3PoQONs4UHGxU4wU20BEFs.roa (hash: OlnOwrbkS8dmY5i8N9bx/W1dQv1dfIcZBaKLZ3sLd7Q=)
                          3: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=)
                          4: 4c6KH4m5JyBANb9oOy99vsDIdpM.roa (hash: Vau4v3YfR5YHaHhHOoSzdszkBq78658OuV6gr/q3rxE=)
                          5: 5ICsFrquvX49HjEzOQU7S93GVkQ.roa (hash: dNzwPe5ZKIgncVs1sWSuSbTrhXj7p0vAUSyPZCigSn0=)
                          6: 6-4zWGnIR-C1798fnpiFbscWIME.roa (hash: OCyRLE+b/m/XR38UgcQGMiT8oc39s0bet+zMo7PHL9I=)
                          7: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=)
                          8: 8lPw_ga_FoSSpmboRwfajYdx-go.roa (hash: JloEp5W3jYXSF6n1lKX3TTBhUm7QwMzhp+1X0sR8wMg=)
                          9: 9RXrdD1qJMf_8xNn3HnZaLopyak.roa (hash: KfZruuWMflD9yqrnDRJtXO3IL4kig+hFeQaQ1JiQO/w=)
                          10: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=)
                          11: HKmOA4kYZLilOR3lns1zO5ipEbU.roa (hash: Yz7lQttPSDYdbYbtexTLUwIiQDzr90HjmuYUCaHlIKw=)
                          12: M1q9NGALl_5zWyIsBUUB6ElwUw0.roa (hash: P6viUgEvhrKdeTf5i8KPv7U8+f6vJ2sUgXvC3nzTpOU=)
                          13: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=)
                          14: X9F7v4AXG7bPpuEkvPpmXb8iQng.roa (hash: iwWDtcquwV309wrQ4g5VKIsUxyjbCcTHSbr+j3QYLgw=)
                          15: Ya7gHcOJW_wjSJWa4WLFKiSUkcU.roa (hash: zf47OzJ7ZBqDdrfAJUX5U6MlyOVPwuqS2R07zroieCs=)
                          16: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=)
                          17: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=)
                          18: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=)
                          19: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=)
                          20: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: /Ern2CyGHbOE6Nq7LrI477mLzOHAg3BaJ+rH4cPHkss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:6f:0b:0e:f2:88:3b:a6:f3:97:cd:3d:77:3f:56:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jul 28 15:54:14 2026 GMT
            Not After : Jul 29 15:54:14 2026 GMT
        Subject: CN=cec8047b154387f4a6d1fc597c92395d1217ac2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:59:5e:8c:77:cf:60:3f:85:29:b1:f1:c6:
                    33:54:de:35:52:ed:5d:0b:7c:fc:88:13:56:d5:79:
                    83:f6:3a:a9:93:40:c3:1f:88:90:91:76:74:b0:5d:
                    24:06:bd:63:ab:4c:87:62:a6:60:c5:94:22:bf:50:
                    41:d4:81:f3:b0:02:8e:95:a3:3f:ce:d8:a5:9c:b2:
                    50:a3:33:41:d7:75:c5:77:2a:46:13:ab:7d:eb:f9:
                    11:24:87:0e:44:61:86:f1:c4:32:4b:4e:e6:72:3f:
                    45:48:86:c7:64:81:0b:ae:a2:04:5f:2e:0e:06:d5:
                    29:4c:50:bc:a2:f7:0f:9d:be:28:8c:83:84:6c:ad:
                    b3:00:ec:02:03:43:fe:22:59:df:bf:7d:2c:07:dd:
                    f2:be:8f:72:3a:60:68:fb:be:b4:7c:48:46:51:98:
                    39:c4:6a:9f:f0:d6:41:f1:13:3c:3d:8e:b2:ec:ee:
                    bb:2d:c8:5f:3e:44:92:d0:e8:47:c9:a8:6f:92:e3:
                    f8:29:52:83:59:4f:27:97:fa:dd:b9:ec:3e:77:4f:
                    99:80:db:45:1d:b2:c5:75:14:9f:44:c0:a4:38:7c:
                    ab:bc:91:31:60:1f:09:5a:f1:37:a2:77:f0:08:5f:
                    f8:1c:07:57:4e:64:f1:f5:d6:2e:82:dd:4a:b8:5f:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:04:7B:15:43:87:F4:A6:D1:FC:59:7C:92:39:5D:12:17:AC:2E
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:80:9b:86:9d:26:07:88:11:d3:00:4a:0c:c8:ed:18:4f:
         62:e2:72:83:63:01:4e:39:41:0f:70:29:c2:14:8a:6f:6a:65:
         bc:f1:6d:93:28:34:df:bf:13:a1:06:dc:cb:b1:63:50:af:5d:
         13:8c:58:c6:28:78:4a:20:94:d8:64:a8:b5:cb:1b:f4:b3:7d:
         7e:66:ed:ce:12:ce:26:f9:bb:bb:66:54:d6:f4:a3:65:84:e3:
         dd:1e:b5:db:ee:15:b3:3d:52:a3:6f:77:2d:52:1b:6e:fd:98:
         78:b4:60:19:3a:9b:7f:51:08:81:16:fb:38:2d:bc:7f:d1:21:
         77:d9:80:b6:98:22:9d:0b:32:43:14:51:4b:31:6d:2f:74:e3:
         d3:99:80:d4:f5:51:a4:79:a1:32:09:0b:d3:9c:b8:00:8e:58:
         30:c2:db:06:34:41:79:fd:dd:ec:ff:85:1a:ec:6a:69:c5:24:
         a5:15:94:0e:bc:ed:7e:87:fe:33:5c:15:ee:76:25:a6:fd:1d:
         32:03:da:b6:9d:d2:78:91:bf:0d:9e:a8:37:f4:05:99:50:ba:
         a0:fd:dc:39:67:e2:b5:95:d1:78:f5:12:6e:42:7a:12:e6:f6:
         8c:3a:98:a4:e9:43:08:2f:78:87:a9:55:8d:15:94:82:65:03:
         7e:e6:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:44 2026 by rpki-client