Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          sQEubY3G/vKJvlKC3PFeg5G4kQSvLKcBNazz+RzRX+A=
Subject key identifier:   E6:33:FD:70:73:DC:24:41:77:17:4E:DE:21:87:34:B9:89:3C:A0:4A
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       019FA9ABFDEC64ABB52F23525E402228CB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          12A6
Signing time:             Tue 28 Jul 2026 17:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:48 +0000
Files and hashes:         1: 4nK7xMejEGysuibSYJIso6RlQpI.roa (hash: WFo/Wgq0Q0zz5SgRWVK30WfT98xnLcIsGWqhNlQwY78=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: Y8ZgHxuJC9yiNBSBgjZ85yOqFMKoJ+1SFrzQl0uZ8z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:fd:ec:64:ab:b5:2f:23:52:5e:40:22:28:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Jul 28 17:00:48 2026 GMT
            Not After : Jul 29 17:00:48 2026 GMT
        Subject: CN=e633fd7073dc244177174ede218734b9893ca04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:1a:14:7d:99:54:36:f3:31:fd:9a:0b:38:
                    78:06:59:2e:83:17:d2:86:1d:32:88:7b:e5:71:26:
                    53:18:dd:39:72:86:a0:8f:0c:4f:3f:42:ef:c6:c3:
                    13:8e:25:71:f1:a1:d3:72:87:9a:04:bd:42:ab:78:
                    e2:b0:d3:e6:c4:a4:2e:8b:32:6c:60:71:54:4c:d9:
                    af:3a:eb:67:3d:c7:3a:db:85:d7:1d:4d:27:1c:23:
                    96:8b:a6:27:e2:0d:b5:a5:c2:36:5f:dd:2b:00:dc:
                    b1:a2:72:c2:09:48:3a:30:ef:1b:c4:82:1a:bf:c7:
                    62:a2:32:b4:84:c9:d7:7f:8b:a4:c6:b1:3d:d4:c6:
                    64:18:58:45:87:15:e5:ae:b2:e0:e9:24:ea:ec:ed:
                    97:65:a2:74:7e:68:31:71:33:74:40:ee:df:93:35:
                    21:70:89:b4:4c:b5:62:df:21:9d:28:95:5a:31:8e:
                    4d:dc:49:fd:3b:9d:a6:72:9b:21:17:1d:5e:65:fc:
                    d2:67:66:27:01:33:14:35:a9:ab:ce:c4:e8:c5:0a:
                    b5:97:bb:a9:a4:5a:8d:c7:7c:29:e0:d9:b7:e5:08:
                    5c:f3:2f:8b:ef:70:77:67:49:c6:65:1d:c2:49:c2:
                    75:56:a8:0d:0f:79:fa:87:2b:00:65:e4:8d:8d:7c:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:33:FD:70:73:DC:24:41:77:17:4E:DE:21:87:34:B9:89:3C:A0:4A
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:c7:d5:05:b8:03:c4:9f:fa:03:0f:a4:dc:c9:bf:ae:b6:
         33:38:57:98:73:fe:3c:1b:e7:0b:13:0c:84:bd:7f:4b:0f:b4:
         56:c3:7a:05:81:65:e4:6a:41:a4:ae:92:39:69:c2:78:cc:bb:
         88:b8:9b:9a:1c:f4:38:cc:0b:66:6f:4d:12:65:a5:56:c9:ad:
         40:43:89:69:b5:47:be:95:c3:3d:2d:74:c3:7a:a3:9d:4c:98:
         ab:c7:fc:c1:3d:15:9c:40:5a:e5:8e:e5:28:85:fc:e0:c9:5c:
         d5:9a:8c:e0:00:3f:3e:39:4d:a2:04:3f:a4:74:22:bc:9c:ed:
         83:ab:fb:ed:f7:07:b6:d8:e5:1e:19:e7:06:50:4a:58:7a:43:
         0b:ba:0c:0e:34:66:ce:66:b5:be:7b:7d:b2:10:e9:bc:43:e0:
         f9:93:3f:90:9b:eb:25:a5:bf:10:29:91:48:0f:d6:a4:4e:01:
         18:89:c0:09:8d:f5:6d:fd:6d:87:7b:ff:d0:a3:a6:4a:3f:83:
         7f:72:ca:e4:69:67:ef:f4:ac:3a:7c:3a:1d:d0:e7:b0:9c:94:
         ac:b2:66:10:42:52:c8:33:37:fb:bc:06:20:0f:30:dd:51:13:
         47:2d:68:6c:d7:ae:f6:63:0b:28:1a:f9:34:01:8f:d6:bb:d0:
         43:ce:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:08:24 2026 by rpki-client