Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File:                     wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier:          8UUNSXWJlceuwRKW+leVZqXvRp/aNQ4bXr2AYD7iCsU=
Subject key identifier:   B7:39:35:6F:CB:68:70:0B:8C:D2:D4:C3:91:13:AD:43:2A:36:8E:93
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer:       /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial:       019FABD0F87A661D33F782258CF410794956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number:          0898
Signing time:             Wed 29 Jul 2026 03:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:26 +0000
Files and hashes:         1: Y7Cn6mOoxe1_7Uuyy59kXlBScLM.roa (hash: s2BCgbmOai4wgR+uR0rtMOzU4KIIRdOiikKKdKe67gk=)
                          2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: c+bE8eihZDDwyVpFLTI2Fk0vq97O1PiX2Nk/jExIFw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:f8:7a:66:1d:33:f7:82:25:8c:f4:10:79:49:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
        Validity
            Not Before: Jul 29 03:00:26 2026 GMT
            Not After : Jul 30 03:00:26 2026 GMT
        Subject: CN=b739356fcb68700b8cd2d4c39113ad432a368e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:c6:ce:58:09:6e:b7:36:df:d8:93:28:33:
                    27:1a:6b:3e:f2:b1:48:a4:a5:76:32:f7:b8:80:0f:
                    ca:7e:06:37:b8:30:2b:33:e1:7a:0b:63:08:d2:b7:
                    1a:0b:93:d6:d2:09:f8:a2:c3:70:9a:b9:eb:37:c4:
                    51:5e:62:3a:cc:96:cc:ed:24:33:a7:67:bf:93:cb:
                    58:ef:e0:41:6b:76:db:64:bb:37:47:d3:5f:b3:ae:
                    f0:a2:f1:03:aa:64:cf:d5:61:41:4c:d5:dd:77:ce:
                    94:78:3b:75:5c:8d:a3:dc:15:ca:d6:da:5f:aa:46:
                    c4:c2:c2:25:81:d8:3e:36:ea:23:d1:b4:81:28:ff:
                    cf:11:b2:f5:da:a9:39:da:5a:d1:12:ec:77:e0:13:
                    b7:3a:9a:a8:76:65:32:3b:4e:5e:4b:3a:ed:90:10:
                    38:01:41:f2:65:b9:31:d7:eb:5c:77:98:6c:95:ea:
                    b9:32:af:98:92:b8:43:58:a6:bf:f0:75:7a:bf:9e:
                    e2:a2:62:b8:1a:47:1d:3e:67:a0:fa:3f:59:bc:68:
                    8c:cb:ff:0c:49:ac:4c:63:85:94:15:8e:1c:70:39:
                    18:f7:77:be:50:93:aa:b1:83:c4:ec:57:37:e5:ea:
                    74:83:fd:2a:28:bb:e7:6b:d9:01:b4:9e:08:ca:eb:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:35:6F:CB:68:70:0B:8C:D2:D4:C3:91:13:AD:43:2A:36:8E:93
            X509v3 Authority Key Identifier:
                keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:c9:a9:57:38:0a:7f:76:50:aa:5f:2e:10:a6:9e:90:b3:
         fe:75:1e:98:2b:61:bb:b9:66:9b:04:d8:14:86:74:f8:d9:05:
         29:f8:6a:17:92:b4:06:13:e8:29:e9:ad:cf:29:0b:94:56:c8:
         77:86:40:7b:ae:f8:35:d3:ce:ac:57:21:be:cc:e6:d9:5e:67:
         b3:f4:4b:d0:a2:ef:9f:9d:7a:f8:c5:bc:5a:4f:8a:dd:54:d2:
         b6:6b:9b:cc:3f:42:2e:6f:4c:f9:1e:d9:78:df:fa:75:28:51:
         c6:37:ab:42:a7:9e:e5:0b:ec:1f:a8:47:7d:a7:3b:43:25:b2:
         25:1f:66:c6:ce:69:4d:e8:11:c9:e1:ba:c2:b5:c8:77:5f:3f:
         f2:ab:29:e5:06:de:13:8e:c5:1e:5e:78:72:c5:ed:db:16:56:
         b2:39:a9:55:ae:ee:f0:94:5e:b0:23:0b:8e:fe:94:2a:75:e4:
         31:b0:c0:63:2e:80:01:87:56:48:6b:73:de:8a:35:26:f1:73:
         7a:c1:6b:87:51:dc:94:9d:4e:d3:69:bf:16:d0:7c:dd:49:e9:
         c2:da:35:30:00:56:13:15:b0:37:02:f7:33:1e:2f:41:28:90:
         0e:f9:e3:38:13:ca:30:41:ff:b3:84:29:dd:b3:83:42:fa:9f:
         7a:66:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:55:43 2026 by rpki-client