Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          5xAAHRWqIqf2TtsKh7iprA8bChqO/wKfxVWlQHb+TTw=
Subject key identifier:   65:FD:32:C5:77:2B:6D:22:E2:75:FC:8B:5A:03:63:70:39:A6:BA:EC
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       019FAC3EC936B5EC50408F39920363F6A405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          0865
Signing time:             Wed 29 Jul 2026 05:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:23 +0000
Files and hashes:         1: KGrdlGc_X6Hki0LeSOU3SUEjdJY.roa (hash: xgbr933ze/YCtvnJPl14XndSL5VHe/+W5p0SIc3yhsI=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: 3b1zkWbKyXl1kzTzd1RHXqIy1ai5j7syvecwgpky4RU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:c9:36:b5:ec:50:40:8f:39:92:03:63:f6:a4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Jul 29 05:00:23 2026 GMT
            Not After : Jul 30 05:00:23 2026 GMT
        Subject: CN=65fd32c5772b6d22e275fc8b5a03637039a6baec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:1f:4d:91:8c:36:21:b8:7a:3e:f9:8c:9f:
                    c4:fd:82:88:80:2b:72:01:61:4e:79:0f:56:bc:1e:
                    0f:14:2e:65:8c:1d:e4:3d:57:37:c8:03:98:ac:95:
                    ab:ce:83:43:b9:78:27:bc:25:23:0f:9a:ee:c7:34:
                    2d:88:a5:e1:18:e5:fa:35:f3:02:70:d0:a2:4c:37:
                    d2:8b:40:43:52:9e:0f:e5:3c:bd:24:70:42:eb:a5:
                    53:97:8b:60:4f:b9:d9:8f:55:c1:37:4a:2d:a2:96:
                    62:cc:b8:44:2d:86:ec:21:1b:63:0b:e1:f1:86:a6:
                    06:12:86:ac:0b:5a:2f:0a:cd:09:44:56:35:65:9f:
                    be:45:41:8b:f5:90:c0:f8:bd:2f:56:81:a6:50:9f:
                    76:a6:72:8f:8a:3d:04:b9:ea:3f:3a:a1:ef:4d:34:
                    f6:5c:ac:f6:a5:52:92:18:44:c2:2d:32:48:45:30:
                    88:5c:2f:cd:5e:f4:d2:42:6f:a8:f4:45:10:ec:a0:
                    48:b2:e7:1d:43:e6:10:1c:a8:97:e9:12:2c:94:e8:
                    b7:5e:33:fd:fe:60:09:25:3d:b9:2f:40:34:3a:70:
                    36:04:a0:2d:dc:fc:55:77:4c:d2:3d:a9:bf:85:2b:
                    4c:db:f1:ea:f6:e3:2d:7b:67:54:47:4a:d7:3a:aa:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FD:32:C5:77:2B:6D:22:E2:75:FC:8B:5A:03:63:70:39:A6:BA:EC
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:cc:8c:01:87:e7:c2:12:3e:7f:00:a7:2a:0e:70:f1:05:
         16:52:2c:41:a6:be:f9:a2:50:1d:43:49:e6:ae:a1:61:4d:f3:
         d3:c1:a9:da:f7:f3:d7:72:6e:b8:eb:5d:9c:09:f5:03:69:0d:
         99:57:94:e5:96:cb:7b:c7:67:f5:87:43:9f:e4:90:3d:17:8a:
         c7:0e:4f:db:29:ad:91:e0:8b:97:03:3c:d8:6f:6c:7a:1a:91:
         1d:8b:dc:99:ee:eb:92:2d:50:8d:24:c0:2c:f9:48:72:0b:28:
         5a:f2:ba:74:94:54:1a:d8:16:3b:e4:3b:8c:cc:86:d9:ed:3d:
         e7:68:38:a0:8a:bc:0e:d4:aa:8e:77:9b:c8:a5:c7:26:f1:ab:
         1f:ed:ce:79:04:2d:d1:53:20:39:33:73:94:5e:a8:2d:e7:87:
         31:b0:0c:96:3a:19:a3:84:33:a4:f7:a4:f1:1b:26:f7:8f:4d:
         94:e7:ee:14:b5:fe:ce:c7:f4:cf:dd:17:9c:67:e7:ee:99:c3:
         01:e6:49:c0:08:6c:e0:e1:5f:4a:b5:ff:f6:13:3b:a8:c6:62:
         19:bb:14:5e:22:85:a3:55:59:48:4e:ed:8e:3b:05:12:01:60:
         d1:d9:ab:61:92:fb:1a:08:e8:28:4b:23:fb:5a:c2:ba:47:9f:
         cb:a4:eb:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPsk2texQQI85kgNj9qQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYjhlMjU3OTdhOWRjNDNjMmU0NjM5NGIwYzhiMWIxMDhh
YjQzYjkwHhcNMjYwNzI5MDUwMDIzWhcNMjYwNzMwMDUwMDIzWjAzMTEwLwYDVQQD
Eyg2NWZkMzJjNTc3MmI2ZDIyZTI3NWZjOGI1YTAzNjM3MDM5YTZiYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMAfTZGMNiG4ej75jJ/E/YKIgCty
AWFOeQ9WvB4PFC5ljB3kPVc3yAOYrJWrzoNDuXgnvCUjD5ruxzQtiKXhGOX6NfMC
cNCiTDfSi0BDUp4P5Ty9JHBC66VTl4tgT7nZj1XBN0otopZizLhELYbsIRtjC+Hx
hqYGEoasC1ovCs0JRFY1ZZ++RUGL9ZDA+L0vVoGmUJ92pnKPij0Eueo/OqHvTTT2
XKz2pVKSGETCLTJIRTCIXC/NXvTSQm+o9EUQ7KBIsucdQ+YQHKiX6RIslOi3XjP9
/mAJJT25L0A0OnA2BKAt3PxVd0zSPam/hStM2/Hq9uMte2dUR0rXOqqUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX9MsV3K20i4nX8i1oDY3A5prrsMB8GA1UdIwQY
MBaAFMC44leXqdxDwuRjlLDIsbEIq0O5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGIt
NTNlYWNkODk2M2ExLzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGItNTNlYWNkODk2M2Ex
LzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI7MjAGH
58ISPn8ApyoOcPEFFlIsQaa++aJQHUNJ5q6hYU3z08Gp2vfz13JuuOtdnAn1A2kN
mVeU5ZbLe8dn9YdDn+SQPReKxw5P2ymtkeCLlwM82G9sehqRHYvcme7rki1QjSTA
LPlIcgsoWvK6dJRUGtgWO+Q7jMyG2e0952g4oIq8DtSqjnebyKXHJvGrH+3OeQQt
0VMgOTNzlF6oLeeHMbAMljoZo4QzpPek8Rsm949NlOfuFLX+zsf0z90XnGfn7pnD
AeZJwAhs4OFfSrX/9hM7qMZiGbsUXiKFo1VZSE7tjjsFEgFg0dmrYZL7GgjoKEsj
+1rCukefy6Trqg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:47 2026 by rpki-client