Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          b7wjfKMvLCKht8kStlpP3jwbkF92sdDUnpPsTXVy7nM=
Subject key identifier:   23:4C:D1:2C:9B:F2:29:A2:E9:87:70:6D:C1:66:7E:F9:16:A8:3E:1E
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019FA9E2E624F6F2306B4F2F429B2C14AE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          0A3F
Signing time:             Tue 28 Jul 2026 18:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:47 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: ZtDLmyHnAevgOZyGMTSC0/mkpiV8hBPQxM+1w/zZ/4E=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:e6:24:f6:f2:30:6b:4f:2f:42:9b:2c:14:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Jul 28 18:00:47 2026 GMT
            Not After : Jul 29 18:00:47 2026 GMT
        Subject: CN=234cd12c9bf229a2e987706dc1667ef916a83e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:2c:eb:bf:cc:a2:d7:f4:6d:ad:85:2c:5c:
                    72:13:49:75:9d:bd:31:ee:92:e2:61:ac:13:45:34:
                    61:e8:fa:e5:9c:c8:04:6a:b8:29:f5:f3:44:16:68:
                    55:d4:e9:ab:00:43:fd:89:2f:d2:f8:8c:21:ec:a8:
                    c2:f1:1b:d6:b6:a4:82:0e:d6:2b:0b:4b:f9:47:ef:
                    80:40:f7:1c:d4:0c:c8:1d:00:b4:01:98:74:fb:08:
                    8a:46:ab:24:0f:d1:3f:37:52:e4:ce:9e:be:d1:7d:
                    0a:ff:72:6d:91:f3:61:92:eb:eb:db:78:1a:7b:fc:
                    35:c0:b2:22:7a:03:db:47:e1:64:ee:bb:08:85:ee:
                    d1:19:60:08:1a:05:ae:67:3e:36:d2:3a:ba:8f:26:
                    4c:63:1e:46:ac:ec:5c:4e:08:ad:94:29:81:2a:a1:
                    4d:fb:e7:67:50:9b:7a:ab:fd:7b:d9:37:34:48:4c:
                    67:b9:e0:b7:a6:ce:de:48:bd:96:43:cd:3f:98:d7:
                    1c:af:fd:07:3f:04:57:23:42:fd:34:e9:92:e5:1f:
                    64:f8:09:be:ab:52:15:01:5b:5f:ef:d4:ec:52:a5:
                    54:80:70:83:de:e2:b3:9a:a6:e3:63:c2:f0:ff:73:
                    04:95:d3:f0:ce:ff:10:53:cf:4e:ad:91:8e:d8:4f:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4C:D1:2C:9B:F2:29:A2:E9:87:70:6D:C1:66:7E:F9:16:A8:3E:1E
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:58:f9:45:7e:24:88:36:c3:04:5f:6e:ee:25:a6:ae:e0:70:
         70:b5:da:ce:50:3c:e7:c3:72:d1:95:bc:98:58:a1:45:36:a4:
         32:61:5b:df:c9:f5:e2:db:a5:38:51:82:21:71:65:82:3b:b3:
         e6:f2:17:00:82:60:e8:e9:53:42:f4:7c:4d:d9:0d:f0:e0:65:
         8d:e2:54:4f:f0:6c:89:c4:e5:5a:46:b1:31:b9:44:64:a1:ee:
         ed:1f:16:35:39:c5:5b:4c:69:02:a9:89:39:d6:3d:db:ab:b2:
         d9:47:4b:53:9d:f9:bc:42:99:72:d2:e2:f1:08:d2:28:21:b9:
         79:5f:d8:c0:da:e5:c4:34:ac:16:7f:6e:83:51:2a:bd:1c:18:
         a1:77:16:7d:d4:c9:e3:b4:25:1f:03:d0:c4:11:ef:8a:6e:0f:
         45:01:02:cf:11:76:5b:cb:99:0f:89:96:2d:d2:f3:d4:eb:d4:
         a4:e7:20:32:57:c1:ab:59:cf:41:32:15:ed:b9:b4:4f:f5:a8:
         78:da:c6:22:b1:45:b3:d8:ab:5b:04:86:cc:80:92:6e:cf:3e:
         28:a5:0d:01:6b:53:53:be:f3:f3:c7:cd:eb:05:4a:52:79:d6:
         54:48:9b:8f:13:df:3c:1a:0b:7d:0b:4f:17:3f:b1:4b:00:09:
         6c:3e:a9:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4uYk9vIwa08vQpssFK4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2
OWU0ZmMwHhcNMjYwNzI4MTgwMDQ3WhcNMjYwNzI5MTgwMDQ3WjAzMTEwLwYDVQQD
EygyMzRjZDEyYzliZjIyOWEyZTk4NzcwNmRjMTY2N2VmOTE2YTgzZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLEs67/Motf0ba2FLFxyE0l1nb0x
7pLiYawTRTRh6PrlnMgEargp9fNEFmhV1OmrAEP9iS/S+Iwh7KjC8RvWtqSCDtYr
C0v5R++AQPcc1AzIHQC0AZh0+wiKRqskD9E/N1Lkzp6+0X0K/3JtkfNhkuvr23ga
e/w1wLIiegPbR+Fk7rsIhe7RGWAIGgWuZz420jq6jyZMYx5GrOxcTgitlCmBKqFN
++dnUJt6q/172Tc0SExnueC3ps7eSL2WQ80/mNccr/0HPwRXI0L9NOmS5R9k+Am+
q1IVAVtf79TsUqVUgHCD3uKzmqbjY8Lw/3MEldPwzv8QU89OrZGO2E9MZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNM0Syb8imi6YdwbcFmfvkWqD4eMB8GA1UdIwQY
MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt
MDlkYmQwOGNiZTJkLzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk
LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClj5RX4k
iDbDBF9u7iWmruBwcLXazlA858Ny0ZW8mFihRTakMmFb38n14tulOFGCIXFlgjuz
5vIXAIJg6OlTQvR8TdkN8OBljeJUT/BsicTlWkaxMblEZKHu7R8WNTnFW0xpAqmJ
OdY926uy2UdLU535vEKZctLi8QjSKCG5eV/YwNrlxDSsFn9ug1EqvRwYoXcWfdTJ
47QlHwPQxBHvim4PRQECzxF2W8uZD4mWLdLz1OvUpOcgMlfBq1nPQTIV7bm0T/Wo
eNrGIrFFs9irWwSGzICSbs8+KKUNAWtTU77z88fN6wVKUnnWVEibjxPfPBoLfQtP
Fz+xSwAJbD6p8g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:43:41 2026 by rpki-client