Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          G/hY7ND3Ku6Ieu5774yZp2uNqMgb7C8b3fLWRLRLZ6Q=
Subject key identifier:   36:84:E6:58:DF:95:43:DD:ED:54:1F:36:F6:7A:66:4C:38:CD:45:69
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       019FAC3F5BDEC99587CB554463EFF8C469E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          0A84
Signing time:             Wed 29 Jul 2026 05:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 05:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:01 +0000
Files and hashes:         1: 4CeETaDbMmlemWxGvvx0_WuaR08.roa (hash: Ihn6EFoGwfYZmijHSSAZ4/aOa56nJlt5ht+N8FXjtEs=)
                          2: 8ojHQg-5gn_Du7oteDU3y4gT3eo.roa (hash: i3m9CQuoZX6ywBrI0Ffbx9GRfJOG6PI2xg9iGzfKe/A=)
                          3: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=)
                          4: UhhULK4VhHUpXbHrquJFK5XwzTM.roa (hash: cTOGj51BZIsKfKZvp1Y6kCOw9tCtCwH0h8hrKoSZm2w=)
                          5: UqpRL__Efeid9a8cIN4aVjD7btc.roa (hash: Jo0BVJIAZaCqo9aHwqKM5mX9gen1oqBNsGDUzTFR458=)
                          6: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: mWssl/JqhZJAKReZGLdOU6Xeo9niSTuWcz8YMl8GMVA=)
                          7: _d1c_IHHvO6uDgtUgM8v6NT-Glw.roa (hash: kRKEDuodtt5EkFPvSVIB0r4OcamCM+hlEDHgUbHAC8A=)
                          8: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=)
                          9: eiNx0hyWr9_GPT53IvxQM9d7nQM.roa (hash: 24M5NJX5qdMlDv9jNkA+N6M6xg4k0uj4d4NoagskJ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:5b:de:c9:95:87:cb:55:44:63:ef:f8:c4:69:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: Jul 29 05:01:01 2026 GMT
            Not After : Jul 30 05:01:01 2026 GMT
        Subject: CN=3684e658df9543dded541f36f67a664c38cd4569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:be:4a:49:90:cf:2d:50:10:b8:a8:21:80:
                    f6:b5:5d:16:9b:5c:44:d0:2e:e6:bf:07:53:43:b4:
                    2c:fc:41:08:23:8d:c3:ee:28:8f:74:c3:be:d0:e3:
                    53:11:14:8f:1a:bf:c9:a3:1c:c5:fc:f7:9b:d1:db:
                    fd:71:80:af:8c:40:4a:5c:9c:c0:87:e8:a7:11:c2:
                    45:a1:e4:e0:7a:83:75:5e:60:3c:df:39:9e:32:bb:
                    90:ef:cf:11:d7:76:a7:04:e0:e0:2f:62:96:98:c8:
                    44:eb:66:fd:ef:78:6c:30:7d:d7:ec:65:86:23:5a:
                    c3:7b:77:73:75:9e:2a:ea:85:01:42:f0:6f:ec:2c:
                    85:61:b1:0e:28:2e:08:ee:e3:96:81:5e:20:bc:82:
                    da:34:03:d1:05:f0:f4:99:72:cd:99:5e:3d:a5:be:
                    a6:4f:40:78:d9:ab:fd:c2:98:0e:48:ea:34:c0:e5:
                    08:d6:b9:3b:1f:ba:52:aa:54:4d:18:91:5f:db:c6:
                    3a:74:8f:82:8d:72:b1:b0:87:5a:d8:da:e3:c2:c2:
                    34:46:64:0c:cf:dc:cf:bc:bf:f9:f6:bc:97:a7:c2:
                    01:ad:a0:bc:fb:41:66:38:db:ff:bd:25:ff:87:f9:
                    21:7a:84:7e:1e:e7:56:21:f5:bf:bc:03:0e:a4:e0:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:84:E6:58:DF:95:43:DD:ED:54:1F:36:F6:7A:66:4C:38:CD:45:69
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:07:0f:a6:66:c3:de:eb:f8:a7:18:b4:26:df:09:ec:b4:d3:
         19:b2:15:28:f2:8d:21:9a:a7:c9:17:80:6b:5b:f8:60:fe:95:
         aa:55:a4:52:48:81:df:94:8a:59:3f:4c:3a:ae:56:d5:3c:d0:
         b1:87:25:e7:02:e8:82:5c:7e:54:aa:c9:63:32:0d:7e:b5:fa:
         5f:7f:aa:d4:86:3e:16:80:70:a4:62:8c:2a:4a:f3:eb:9d:69:
         4d:47:6b:49:4d:04:53:33:ce:7b:cd:3c:6e:1b:00:26:14:61:
         2c:e6:dd:f5:7f:e3:ec:be:60:a8:df:be:bb:fa:42:6a:92:0d:
         92:d3:30:a5:f3:e6:e6:4f:14:9c:4c:ee:a5:fe:53:b8:f8:d7:
         f2:cc:cf:28:4b:f7:96:88:79:d6:c9:13:d5:c9:03:7f:44:86:
         e5:6d:32:66:e4:5e:9f:df:41:2b:c5:22:92:c1:ec:f0:a4:d5:
         0e:bd:7c:a3:1d:c9:98:2c:63:b8:7d:ae:2f:db:50:31:dd:a4:
         36:1e:27:8b:a4:d5:77:0d:5c:67:11:60:38:a2:18:23:da:8a:
         69:ba:84:54:5b:dd:67:ec:86:e7:eb:97:03:bc:d6:a1:77:8b:
         5d:c5:b9:ca:60:08:3f:9e:b5:b4:84:eb:e7:3b:d3:0d:b4:2e:
         ce:ad:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:07 2026 by rpki-client