Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          2yO1dQPQ3jJqhJRtlKSACNFxKuRmJ71t09If84jY/XM=
Subject key identifier:   B6:A8:0A:A5:0C:0C:DE:00:A1:27:00:90:C2:6E:6D:32:C5:C8:C2:1C
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019FAD1A95FAE8A341DC725A917B54EA26AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          1455
Signing time:             Wed 29 Jul 2026 09:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:28 +0000
Files and hashes:         1: 9DlZGfzkGJH9pt3tlUtwbDIgZmE.roa (hash: BgtptWZDSzp28tC4nLvBq9ONf2sr0vsAGvBczOwVSY4=)
                          2: La12rr_K1ZSbuhi7wlgaOCIF5ZA.roa (hash: Z2Rpf1e0zKOJjF1IX+pQ5F4oluN25ApbSFfygu3hh5I=)
                          3: id2BlqzstTY2zcF89y0tqtXsAAg.roa (hash: YUgnEyxwSsXkOSDh0+NOmEVHAoUbYwAOfZybL6l7VVs=)
                          4: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          5: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          6: q6VI7hOuPNwkA5OfPLZgeMAzcLc.roa (hash: 4kKMTMijEB9eXMczmF8YRDpforyaG1mUNsBXXMgMmCc=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: 6nqbBTdsB3UlSMGaMzOqPLc6x9KRKijKUOgHEZO3p3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:95:fa:e8:a3:41:dc:72:5a:91:7b:54:ea:26:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Jul 29 09:00:28 2026 GMT
            Not After : Jul 30 09:00:28 2026 GMT
        Subject: CN=b6a80aa50c0cde00a1270090c26e6d32c5c8c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:89:bd:d3:d6:97:89:a9:a5:ef:3e:e4:5a:
                    5e:08:da:dd:95:31:a4:b1:fd:9e:59:b8:a0:29:76:
                    70:60:b9:17:55:3d:f0:09:78:26:2f:40:5d:b7:6b:
                    5c:89:72:2d:0f:97:c7:df:79:39:d5:4f:5c:ba:1c:
                    96:0f:7e:e8:03:0e:30:d3:15:b4:de:e4:92:ef:83:
                    7d:20:df:41:18:2d:73:cb:dc:3c:96:07:9a:c0:dc:
                    0a:ed:87:08:64:6c:f9:13:60:4f:b6:45:3a:14:2b:
                    ce:27:51:0e:ef:c5:e0:28:80:bd:48:b9:49:93:30:
                    8e:a7:16:29:bb:a5:31:e0:0e:50:09:8a:65:d9:5b:
                    02:82:51:d3:7e:35:bb:33:63:5b:44:28:b3:99:8e:
                    3f:42:26:20:ad:ea:e9:d9:ec:7a:08:f5:c1:9c:7c:
                    49:dc:25:cb:e1:a0:9f:e0:30:7b:2a:86:05:18:dd:
                    4f:8f:69:5b:c7:4f:b6:0f:cb:23:5d:ad:5a:bd:21:
                    60:08:18:0e:41:e6:1c:60:d8:f7:e1:24:ed:93:b5:
                    31:30:66:22:53:2d:b3:6c:69:a5:f6:4d:c9:5b:b0:
                    e9:fa:67:27:ca:ad:33:ef:c1:8a:d3:32:28:64:c3:
                    19:35:1d:57:12:41:18:86:e9:a8:ca:52:59:23:5e:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:0A:A5:0C:0C:DE:00:A1:27:00:90:C2:6E:6D:32:C5:C8:C2:1C
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:20:78:b3:ea:45:3e:b3:9f:82:58:44:ad:21:a6:51:d6:
         be:92:f3:a6:12:d5:bf:41:bc:55:f9:c5:5e:93:1c:bf:5d:bc:
         9d:2f:a7:18:89:23:03:93:e0:3a:af:4b:86:9e:1d:6b:15:54:
         1a:5b:42:32:8f:93:6f:ab:18:f2:d0:b2:99:8c:f4:ae:76:34:
         18:0f:dd:85:ef:d8:ee:3b:a0:f1:0e:2a:aa:ec:35:53:13:70:
         f2:aa:0e:a7:37:cb:5e:c4:e6:b8:7d:2c:36:f0:74:e0:cb:22:
         38:c9:b0:b8:cc:74:d5:f9:33:73:77:b6:66:fa:64:73:52:e0:
         0f:9b:06:26:f1:b6:0d:d6:f3:bf:53:cb:31:02:02:e7:b8:e0:
         ad:fa:97:df:bb:0a:60:eb:35:39:83:96:12:a1:fe:e8:cd:ed:
         5a:05:8d:44:07:6c:86:05:d3:b1:70:b2:0b:d4:b9:1d:27:b2:
         a1:82:9f:7c:5e:24:ca:52:86:96:6e:62:7c:c3:d5:62:d8:f4:
         76:79:b4:dc:68:57:5c:89:8c:32:65:05:01:dd:ea:aa:ae:7b:
         bc:79:dc:f0:b9:2b:32:2a:5c:d0:10:af:4b:80:71:18:3d:0d:
         ff:9e:68:aa:a5:a9:a0:98:f2:b6:db:f0:d4:b3:89:2a:ba:8e:
         af:1e:56:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGpX66KNB3HJakXtU6iaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjYwNzI5MDkwMDI4WhcNMjYwNzMwMDkwMDI4WjAzMTEwLwYDVQQD
EyhiNmE4MGFhNTBjMGNkZTAwYTEyNzAwOTBjMjZlNmQzMmM1YzhjMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfyJvdPWl4mppe8+5FpeCNrdlTGk
sf2eWbigKXZwYLkXVT3wCXgmL0Bdt2tciXItD5fH33k51U9cuhyWD37oAw4w0xW0
3uSS74N9IN9BGC1zy9w8lgeawNwK7YcIZGz5E2BPtkU6FCvOJ1EO78XgKIC9SLlJ
kzCOpxYpu6Ux4A5QCYpl2VsCglHTfjW7M2NbRCizmY4/QiYgrerp2ex6CPXBnHxJ
3CXL4aCf4DB7KoYFGN1Pj2lbx0+2D8sjXa1avSFgCBgOQeYcYNj34STtk7UxMGYi
Uy2zbGml9k3JW7Dp+mcnyq0z78GK0zIoZMMZNR1XEkEYhumoylJZI14VzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaoCqUMDN4AoScAkMJubTLFyMIcMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwQgeLPq
RT6zn4JYRK0hplHWvpLzphLVv0G8VfnFXpMcv128nS+nGIkjA5PgOq9Lhp4daxVU
GltCMo+Tb6sY8tCymYz0rnY0GA/dhe/Y7jug8Q4qquw1UxNw8qoOpzfLXsTmuH0s
NvB04MsiOMmwuMx01fkzc3e2Zvpkc1LgD5sGJvG2Ddbzv1PLMQIC57jgrfqX37sK
YOs1OYOWEqH+6M3tWgWNRAdshgXTsXCyC9S5HSeyoYKffF4kylKGlm5ifMPVYtj0
dnm03GhXXImMMmUFAd3qqq57vHnc8LkrMipc0BCvS4BxGD0N/55oqqWpoJjyttvw
1LOJKrqOrx5WiQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:50 2026 by rpki-client