Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File:                     0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier:          vhLJCyWVDi6x5YLCj4vG1AsQ7U5JJ5v2IRaqwrnUzok=
Subject key identifier:   29:59:98:AB:E0:BE:84:A5:5D:39:F8:F6:B2:0D:A9:A5:FE:1E:8B:6D
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer:       /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial:       019FA7BD799F845B5A7E961D0C527D35FB5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number:          07E7
Signing time:             Tue 28 Jul 2026 08:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:40 +0000
Files and hashes:         1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: kcSrcP5O293fCh+WCwyUGGefaIZip/gttXZgUKTQq3U=)
                          2: HrnyfGcv9Sfocm0wEGAfceFq9V8.asa (hash: SGcSiNA09hzLvNRrjOccbxyQktZ5lS+27BWdLxQPqhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:79:9f:84:5b:5a:7e:96:1d:0c:52:7d:35:fb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
        Validity
            Not Before: Jul 28 08:00:40 2026 GMT
            Not After : Jul 29 08:00:40 2026 GMT
        Subject: CN=295998abe0be84a55d39f8f6b20da9a5fe1e8b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:78:f7:27:0f:68:93:8b:a6:6d:7e:73:bf:
                    fd:7d:f1:1a:d2:e5:77:59:cb:58:15:56:33:a6:a8:
                    47:64:e3:e0:4b:c7:3a:f0:4f:36:c0:55:8a:c2:61:
                    3a:3b:8f:8a:d5:3c:75:11:94:5b:9e:c0:06:ab:ef:
                    33:54:54:5b:5d:1c:53:82:34:a7:69:e6:43:27:6f:
                    b1:6e:e0:77:21:81:e9:4a:aa:15:b8:ad:7b:2e:bd:
                    21:38:6a:e8:ec:10:7e:b3:8d:22:e2:1e:1a:41:85:
                    ce:fe:41:b0:f4:66:47:5d:2c:96:00:5c:d6:23:64:
                    89:c5:20:0e:62:2e:73:ca:88:d7:a6:bf:28:89:88:
                    e4:12:d4:f8:ea:81:5a:8f:b3:7f:59:5b:e8:61:ff:
                    40:c5:f2:62:05:ec:da:7b:24:29:f3:4f:9b:f6:d9:
                    9c:d0:c0:6e:d7:47:07:42:58:65:8c:39:a4:75:d3:
                    20:6c:92:24:89:3d:39:2a:22:2d:ce:6e:61:8e:8e:
                    13:c3:4c:ce:64:6b:e9:c6:a3:bc:a5:df:a3:16:a1:
                    1a:67:90:7f:2d:7a:24:a1:6d:e9:c9:a0:f1:c1:87:
                    41:a3:e3:27:49:c8:7f:6c:9b:3f:f5:98:fb:4d:58:
                    17:97:f1:c0:28:81:6b:e6:b9:3b:6b:6a:2d:2a:9f:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:98:AB:E0:BE:84:A5:5D:39:F8:F6:B2:0D:A9:A5:FE:1E:8B:6D
            X509v3 Authority Key Identifier:
                keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:30:94:0c:49:1b:81:37:40:d9:4f:68:60:08:3c:f6:d9:
         9d:a8:e3:2f:64:80:ce:f7:b0:e2:25:19:c2:28:a5:ed:60:e7:
         57:98:bd:ba:91:21:44:0c:65:fd:65:90:70:88:43:0a:a8:8f:
         b1:5d:63:8f:20:43:9f:6a:09:89:07:c3:cc:19:6b:ff:14:a1:
         63:57:ec:4a:1a:60:91:43:be:dd:b4:aa:de:d9:c7:06:64:da:
         ca:35:fd:2c:69:91:3f:c2:e4:a3:44:68:c7:73:f3:07:3a:2d:
         8e:bc:96:b4:fd:ac:6b:24:f3:dd:7f:b0:ff:8f:73:62:7a:e4:
         b6:a2:11:be:85:ed:c8:c3:97:f8:86:c8:a2:6f:28:1c:54:2f:
         53:76:0b:04:9b:97:eb:8b:e8:34:67:9c:bb:e5:c1:7a:65:60:
         8e:f2:58:bc:78:f4:1a:8b:1c:2b:4d:bb:73:de:3d:64:aa:33:
         c1:9b:2e:cc:3f:3a:e5:48:d0:eb:3a:80:7c:d5:d3:46:12:13:
         39:fd:e5:86:30:56:29:63:21:5c:66:bd:92:0f:81:b4:ac:0e:
         df:6b:d7:53:c4:f1:a1:d2:13:b6:58:f1:80:ca:ca:10:68:20:
         68:15:9b:e8:c8:cb:5d:52:bb:e5:bd:3e:1a:ed:1d:d9:a5:5c:
         41:50:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:50:34 2026 by rpki-client