Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          UME3wySUW9cB9i+G7n63kKKg7bap43r/HBVCaSstSMY=
Subject key identifier:   A8:0F:46:AA:D8:99:0E:D2:F4:3B:DA:28:54:DF:DE:40:2B:5D:86:EB
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       019FABD163A7BB27A02B5D577D56AF1F9E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          064A
Signing time:             Wed 29 Jul 2026 03:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:54 +0000
Files and hashes:         1: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (hash: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: RZwraArjmeNMsXrroBBFChob22G+CTayzzpZ9Y8O2UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:63:a7:bb:27:a0:2b:5d:57:7d:56:af:1f:9e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Jul 29 03:00:54 2026 GMT
            Not After : Jul 30 03:00:54 2026 GMT
        Subject: CN=a80f46aad8990ed2f43bda2854dfde402b5d86eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:ab:aa:0d:4e:e6:cc:b8:c7:7e:6e:78:bc:
                    61:e8:2b:e9:df:9f:7e:e6:65:4f:11:45:a1:de:aa:
                    87:3a:07:c1:3e:ab:14:37:16:32:e4:81:1a:15:84:
                    cb:56:d3:7e:c1:6f:56:ba:3f:73:58:cc:8f:0f:6f:
                    93:44:bf:c7:95:67:df:78:e4:da:c4:17:80:f7:9a:
                    10:e0:54:e8:f8:2e:ca:31:69:28:00:9a:5d:9e:d4:
                    0c:60:50:65:d1:f0:69:85:ec:10:5b:62:28:b4:46:
                    fe:37:ba:5a:18:0f:57:b3:6c:86:49:d9:23:eb:2e:
                    eb:a1:02:e7:20:81:27:e1:f2:8d:0c:3d:50:b5:89:
                    5f:06:fe:57:4f:20:5f:c7:48:3a:a2:46:ff:4b:fb:
                    84:b7:9b:4d:b8:d2:8c:d2:66:20:ad:b8:e4:64:b0:
                    80:5b:36:e1:16:cc:61:8f:7d:11:80:ac:03:64:20:
                    04:68:b7:01:d7:df:40:65:f9:da:c4:9d:f9:cd:09:
                    cc:5d:b8:1f:96:7b:df:db:d6:36:7c:1b:65:93:fe:
                    3b:d3:ba:31:2e:40:3f:86:3f:91:2b:da:59:53:17:
                    b6:d9:8d:fe:05:87:f1:55:9f:e2:16:fe:79:ec:78:
                    7f:61:03:82:41:df:ae:e5:ef:9f:61:c5:f1:af:d9:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0F:46:AA:D8:99:0E:D2:F4:3B:DA:28:54:DF:DE:40:2B:5D:86:EB
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:65:14:69:56:15:67:0f:d1:0b:43:37:07:1a:ad:d8:4e:ce:
         93:16:e0:6b:0c:8d:6c:a3:ba:2b:93:80:f8:dd:8c:ed:87:c7:
         33:aa:68:24:e8:aa:58:c5:8a:ad:91:0d:9a:2d:7f:ac:ff:46:
         63:ab:4d:6d:00:75:85:00:52:ca:6e:c2:ed:95:62:f9:9a:37:
         f8:79:50:0f:06:04:08:d8:8c:37:28:33:3d:05:92:87:2a:e4:
         70:d6:ef:ab:b9:fd:2d:a3:3a:e5:9b:9d:fe:84:5b:ff:dc:a8:
         d6:f8:62:2d:03:57:4f:49:d8:ee:5d:e4:a6:ae:68:df:1d:08:
         0b:f7:92:63:71:9c:f0:9f:90:bb:fa:df:e7:c0:c1:ba:a8:01:
         56:b0:7f:f3:e5:27:38:9b:85:fc:60:4c:65:50:a7:92:a0:29:
         e2:da:b5:7c:0b:ac:e3:7d:bd:ec:3c:59:99:71:b4:af:72:a3:
         1c:4e:e3:4f:05:ad:e4:48:b8:a5:db:b5:1e:6e:4b:c5:97:82:
         dd:da:77:39:47:43:4f:61:61:9d:03:98:6e:c2:89:18:1c:02:
         bb:f1:1f:19:8b:67:44:6d:28:a9:d1:86:5b:a7:22:6a:04:69:
         1b:14:ad:93:fc:19:71:40:63:9e:5c:e1:b2:6b:01:e6:5f:98:
         3e:f0:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:15:35 2026 by rpki-client