Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
File:                     wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json)
Hash identifier:          un/cUGBAZ7ymwjg/zCZ8Iayo1jNxpTPBqsRQnZaavNo=
Subject key identifier:   E2:F0:55:77:F5:DE:BF:6E:EE:4F:5D:EE:82:A9:89:EB:92:48:37:89
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Certificate issuer:       /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial:       019FA9E338EB1B3108AEA485193AC3826B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
Manifest number:          06F4
Signing time:             Tue 28 Jul 2026 18:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:08 +0000
Files and hashes:         1: J2ac7yBZ1rddlP4OYM3qXYokeC4.roa (hash: 661rctvmo5buxvwD1rNnJJOMy13YlgHsaEVyiDN+3aA=)
                          2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: mBWtmLRsMRgHj5mVoK5tY9PsE/Zof+S3snaUn3jGZzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:38:eb:1b:31:08:ae:a4:85:19:3a:c3:82:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
        Validity
            Not Before: Jul 28 18:01:08 2026 GMT
            Not After : Jul 29 18:01:08 2026 GMT
        Subject: CN=e2f05577f5debf6eee4f5dee82a989eb92483789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:7c:d8:d5:b9:04:58:c1:b6:7f:2c:61:d7:
                    fd:34:24:71:8f:b5:d7:41:05:11:1c:e5:95:bc:89:
                    a1:47:e4:fb:2f:3a:2a:c5:65:45:88:61:4f:a9:5c:
                    56:92:ca:85:24:5e:c8:06:cc:13:01:e3:69:35:49:
                    b7:49:c8:d7:18:b8:96:ef:60:6e:47:f4:f6:e3:3b:
                    ae:1e:91:2d:12:e3:0f:6c:47:cf:8d:bd:3a:1c:6e:
                    08:b5:83:19:d7:aa:b7:09:21:9e:ec:1d:01:59:52:
                    7b:a6:ed:21:06:6b:df:e3:d5:55:fe:93:43:e8:a2:
                    20:21:bc:af:e8:8f:ae:64:ba:0d:70:2c:cf:5a:83:
                    a1:9e:ec:88:e6:90:ad:da:b5:fb:43:9b:38:a2:75:
                    4e:43:8c:a6:be:76:ef:4e:fc:b6:7f:b7:4b:00:66:
                    34:91:9c:76:f1:76:37:00:b9:ad:cf:1a:b8:8a:2a:
                    33:30:e4:45:97:38:eb:ca:89:02:8d:2f:ab:72:a6:
                    17:66:70:91:9a:7d:44:ed:44:10:6c:98:6f:54:e4:
                    fe:6e:86:ba:cf:73:bb:5d:5b:b0:88:57:f4:b7:0e:
                    1c:8f:64:84:a1:24:c8:b9:0a:8d:25:30:cd:55:47:
                    42:c8:e0:97:83:ef:35:4a:fe:df:89:4d:57:b6:a7:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:55:77:F5:DE:BF:6E:EE:4F:5D:EE:82:A9:89:EB:92:48:37:89
            X509v3 Authority Key Identifier:
                keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:17:ef:d5:ce:76:f3:b0:3d:68:c4:67:fb:44:f4:e4:27:5a:
         d8:96:3b:08:16:96:27:0b:43:82:9b:b5:2c:53:2f:5c:d2:4f:
         c8:30:08:64:ba:2a:c0:9b:6d:c9:44:ff:92:5b:6b:7b:9e:45:
         86:a1:45:14:a8:9e:5b:db:7f:52:f6:82:9f:73:8f:bb:c4:35:
         a9:b9:db:f6:8c:18:cf:f6:07:8d:aa:93:e3:0d:e2:35:a4:24:
         b7:de:74:82:2f:0a:9b:d1:39:07:d5:eb:21:7d:bf:32:cc:43:
         5c:59:9c:ee:fd:b6:8c:fb:1d:70:3d:99:ac:a9:8e:ff:b0:19:
         18:96:98:ed:5a:b2:24:ed:b2:4e:35:76:46:63:00:c0:1e:05:
         e8:1b:8c:34:25:eb:37:86:d0:e7:57:b2:6f:41:2f:4c:81:f0:
         71:7f:4e:b9:d6:6c:d2:c1:ea:9e:5d:ad:0c:23:88:d6:f8:ce:
         72:50:c4:8d:b6:1e:a9:43:64:4c:04:db:35:fc:03:d1:cf:67:
         e3:5f:16:f1:08:2f:51:1e:be:b7:0f:5a:ed:2b:d7:3a:84:dc:
         97:7c:67:dd:c1:25:7a:69:31:65:7b:db:63:1b:1c:43:9a:9c:
         18:7f:18:73:ee:2d:4d:8c:1f:14:b3:1a:9f:8e:33:c3:f9:87:
         62:cf:b8:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4zjrGzEIrqSFGTrDgmsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTczZjQ3ZWMxZDkyZTc4ODZlYTI5MDdmZjkyN2VlMTdj
YmYyZjQwHhcNMjYwNzI4MTgwMTA4WhcNMjYwNzI5MTgwMTA4WjAzMTEwLwYDVQQD
EyhlMmYwNTU3N2Y1ZGViZjZlZWU0ZjVkZWU4MmE5ODllYjkyNDgzNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoJ82NW5BFjBtn8sYdf9NCRxj7XX
QQURHOWVvImhR+T7LzoqxWVFiGFPqVxWksqFJF7IBswTAeNpNUm3ScjXGLiW72Bu
R/T24zuuHpEtEuMPbEfPjb06HG4ItYMZ16q3CSGe7B0BWVJ7pu0hBmvf49VV/pND
6KIgIbyv6I+uZLoNcCzPWoOhnuyI5pCt2rX7Q5s4onVOQ4ymvnbvTvy2f7dLAGY0
kZx28XY3ALmtzxq4iiozMORFlzjryokCjS+rcqYXZnCRmn1E7UQQbJhvVOT+boa6
z3O7XVuwiFf0tw4cj2SEoSTIuQqNJTDNVUdCyOCXg+81Sv7fiU1XtqducwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLwVXf13r9u7k9d7oKpieuSSDeJMB8GA1UdIwQY
MBaAFMEXP0fsHZLniG6ikH/5J+4Xy/L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lZjE4OGItNjJlOS00ZmQ2LTk3ZjAt
YmIzOTMyOWY4N2YzLzEvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lZjE4OGItNjJlOS00ZmQ2LTk3ZjAtYmIzOTMyOWY4N2Yz
LzEvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBfv1c52
87A9aMRn+0T05Cda2JY7CBaWJwtDgpu1LFMvXNJPyDAIZLoqwJttyUT/kltre55F
hqFFFKieW9t/UvaCn3OPu8Q1qbnb9owYz/YHjaqT4w3iNaQkt950gi8Km9E5B9Xr
IX2/MsxDXFmc7v22jPsdcD2ZrKmO/7AZGJaY7VqyJO2yTjV2RmMAwB4F6BuMNCXr
N4bQ51eyb0EvTIHwcX9OudZs0sHqnl2tDCOI1vjOclDEjbYeqUNkTATbNfwD0c9n
418W8QgvUR6+tw9a7SvXOoTcl3xn3cElemkxZXvbYxscQ5qcGH8Yc+4tTYwfFLMa
n44zw/mHYs+4LA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:33 2026 by rpki-client