Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File:                     w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier:          FOhPVVZYuOPuEMIJeQNSu9I3VWWJAS2odwLgpnXR3OM=
Subject key identifier:   54:7A:14:2E:8F:C5:88:65:F6:11:DB:88:7E:6C:53:11:A4:1F:A1:1B
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer:       /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial:       019FACACCFA8B44F4BF0AD7C803828AE9514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number:          0E3F
Signing time:             Wed 29 Jul 2026 07:00:34 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:34 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:34 +0000
Files and hashes:         1: sAIO_MWUbGWxy0ejjFhZrGzjwYE.roa (hash: 59vuLy/DBthumMO0fIPh8IDMHcczhFPPgcfUlSNwyd4=)
                          2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: t7FPaP4daa1WsBH15f4Z6U5H0lBkSUFPHYhnMAx7D+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:cf:a8:b4:4f:4b:f0:ad:7c:80:38:28:ae:95:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
        Validity
            Not Before: Jul 29 07:00:34 2026 GMT
            Not After : Jul 30 07:00:34 2026 GMT
        Subject: CN=547a142e8fc58865f611db887e6c5311a41fa11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:b3:d5:a5:d1:0d:a8:30:e9:95:ad:16:e0:
                    f1:c3:4d:2c:5e:ed:26:83:cb:67:cb:a9:a6:a7:a6:
                    07:c3:3a:d8:32:35:fd:42:af:5f:2e:ae:9a:76:1f:
                    77:74:93:5c:b4:ac:76:8a:c4:9f:9c:32:db:ce:99:
                    a1:ec:c5:8b:11:b5:b1:15:41:bd:b9:3d:be:6c:5d:
                    66:e8:7c:62:4e:0b:09:c1:1a:fd:13:bc:eb:f5:ef:
                    92:df:75:c3:d2:22:3f:29:1d:01:44:43:5b:d0:5e:
                    fb:3b:65:26:c9:cb:ef:2a:87:7e:8e:62:89:5f:27:
                    b4:0a:55:d0:8d:af:15:c2:2d:14:88:4e:f9:d4:33:
                    ef:3c:d6:7d:15:2c:c6:22:34:12:36:89:0d:25:c1:
                    9b:10:b8:c9:bb:79:8d:ee:89:77:89:01:3a:ed:72:
                    9e:3c:5a:e8:f4:cb:54:b4:4e:03:b5:d3:d9:8e:08:
                    96:9c:01:55:3d:3b:a9:17:24:08:06:03:b6:ca:4c:
                    9b:e7:1c:ad:ff:a2:e6:c2:b8:04:69:64:bd:3f:37:
                    8f:08:21:d2:d3:55:cc:1b:5b:de:01:80:d9:7e:b4:
                    7f:c1:32:0e:f4:8e:23:27:54:d8:c2:8d:ca:9b:49:
                    e3:9e:76:a3:b7:94:31:1f:fc:62:ed:51:1d:10:ca:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:14:2E:8F:C5:88:65:F6:11:DB:88:7E:6C:53:11:A4:1F:A1:1B
            X509v3 Authority Key Identifier:
                keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:33:27:34:dd:fb:be:17:76:9b:3e:07:23:65:0f:a2:b9:
         6a:b0:4b:e9:5a:3e:cc:12:47:91:7f:e2:53:00:94:fb:6a:1d:
         2e:c2:be:21:a8:1c:1e:ce:10:a8:9f:53:5b:f5:71:73:79:e0:
         16:4d:8e:e7:09:e0:ee:61:42:a5:63:e0:91:b2:68:9e:27:ef:
         49:65:ea:13:27:db:de:0f:38:92:be:27:22:f6:7f:27:ed:b3:
         81:b5:ff:06:7e:ef:1d:9c:ba:46:0f:ba:41:cc:01:21:8e:75:
         c2:f7:37:67:36:23:8e:db:51:ee:c3:1a:c5:fe:d2:20:c8:88:
         a2:f4:c1:cc:48:90:f2:dd:1c:5c:23:fc:2f:45:43:11:e0:5e:
         cf:37:b8:ce:7f:03:27:3d:46:1b:70:b5:1b:a8:3f:f7:42:99:
         a4:bc:52:f9:68:72:70:20:08:77:cf:91:76:a0:27:0e:02:9d:
         ae:81:2b:06:fd:6e:9a:d8:18:29:d1:91:fe:17:56:3f:74:28:
         ce:68:83:04:3c:8b:47:e9:fc:4a:98:1a:aa:81:08:f5:b8:c6:
         86:20:e7:2d:96:b9:67:ae:49:10:2f:53:d4:cb:62:cd:d1:20:
         8c:1f:c6:35:e7:91:bc:e5:3d:fd:d3:27:fd:04:2a:5b:f7:5e:
         ee:62:39:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srM+otE9L8K18gDgorpUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNGJkZmY4OGU4ZTg5ODk4NzFlMTM0MDgxMTFhZDE0MzNi
MzBjNjMwHhcNMjYwNzI5MDcwMDM0WhcNMjYwNzMwMDcwMDM0WjAzMTEwLwYDVQQD
Eyg1NDdhMTQyZThmYzU4ODY1ZjYxMWRiODg3ZTZjNTMxMWE0MWZhMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM6z1aXRDagw6ZWtFuDxw00sXu0m
g8tny6mmp6YHwzrYMjX9Qq9fLq6adh93dJNctKx2isSfnDLbzpmh7MWLEbWxFUG9
uT2+bF1m6HxiTgsJwRr9E7zr9e+S33XD0iI/KR0BRENb0F77O2UmycvvKod+jmKJ
Xye0ClXQja8Vwi0UiE751DPvPNZ9FSzGIjQSNokNJcGbELjJu3mN7ol3iQE67XKe
PFro9MtUtE4DtdPZjgiWnAFVPTupFyQIBgO2ykyb5xyt/6LmwrgEaWS9PzePCCHS
01XMG1veAYDZfrR/wTIO9I4jJ1TYwo3Km0njnnajt5QxH/xi7VEdEMrx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR6FC6PxYhl9hHbiH5sUxGkH6EbMB8GA1UdIwQY
MBaAFMNL3/iOjomJhx4TQIERrRQzswxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMt
NmFjMWQxNTU1NGFiLzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMtNmFjMWQxNTU1NGFi
LzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaozJzTd
+74Xdps+ByNlD6K5arBL6Vo+zBJHkX/iUwCU+2odLsK+IagcHs4QqJ9TW/Vxc3ng
Fk2O5wng7mFCpWPgkbJonifvSWXqEyfb3g84kr4nIvZ/J+2zgbX/Bn7vHZy6Rg+6
QcwBIY51wvc3ZzYjjttR7sMaxf7SIMiIovTBzEiQ8t0cXCP8L0VDEeBezze4zn8D
Jz1GG3C1G6g/90KZpLxS+WhycCAId8+RdqAnDgKdroErBv1umtgYKdGR/hdWP3Qo
zmiDBDyLR+n8SpgaqoEI9bjGhiDnLZa5Z65JEC9T1MtizdEgjB/GNeeRvOU9/dMn
/QQqW/de7mI5Bg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:02:01 2026 by rpki-client