Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File:                     wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier:          Fwr/1dEGjjYFp7skXh/5xqTwEbcxMceohy73y8ZoG8U=
Subject key identifier:   C2:FA:61:06:D2:8D:95:31:FD:FD:05:51:19:F4:8E:49:CD:0C:07:31
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer:       /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial:       019FAD52474E266691C32E0369FAA271C362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number:          0495
Signing time:             Wed 29 Jul 2026 10:01:18 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:18 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:18 +0000
Files and hashes:         1: SOx3AgvmBANgGuRBvGIZv19ZcA0.roa (hash: 6aOAX3w5YQajoC0CEbqRBxH+zCfnhhkE4sDztjd3jWI=)
                          2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: ylgMm9nZGhcHklVANPi8EIQD2BzR9WgAiNFXz8fKFC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:47:4e:26:66:91:c3:2e:03:69:fa:a2:71:c3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
        Validity
            Not Before: Jul 29 10:01:18 2026 GMT
            Not After : Jul 30 10:01:18 2026 GMT
        Subject: CN=c2fa6106d28d9531fdfd055119f48e49cd0c0731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:af:38:73:cd:0a:aa:88:b8:ae:bd:00:e0:
                    ae:86:c9:6d:49:01:6f:61:4c:8a:0e:73:55:32:99:
                    b9:cc:e1:d6:69:03:df:3c:90:a2:3e:3d:ff:fe:76:
                    6d:af:3b:64:88:40:63:7d:91:91:01:f7:8d:58:f4:
                    d6:12:68:69:50:8a:61:ef:08:ee:10:1b:8e:04:bf:
                    4a:19:1c:e5:2d:eb:c2:1f:5a:83:bf:fa:8c:f3:1b:
                    dc:1b:37:b5:a2:66:fb:77:6b:6d:b6:aa:aa:ba:b0:
                    f1:6f:d2:59:88:97:54:4f:01:43:fd:f2:8f:98:10:
                    c2:70:c1:47:7a:aa:7f:9c:f4:9a:eb:c0:ea:f5:18:
                    54:1e:cb:1d:74:ae:cf:6f:c7:ea:57:4d:3b:75:81:
                    80:0d:54:5a:dc:2e:9d:a7:3d:3a:67:7e:59:e2:ce:
                    0e:a0:f6:f1:23:b5:32:10:ee:4b:ec:a0:96:96:8d:
                    96:ec:f6:e9:eb:79:3a:b4:93:c5:67:3b:b8:29:6f:
                    54:b5:70:93:56:45:e7:53:f8:9d:0d:40:96:b8:be:
                    51:47:57:38:0c:1d:c5:62:cd:fe:56:ab:7f:b3:c4:
                    be:26:d7:6c:e6:a5:c5:bb:27:35:2c:63:4a:73:98:
                    a2:09:75:28:7e:d6:7e:91:5d:72:7d:c0:3d:08:a0:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:61:06:D2:8D:95:31:FD:FD:05:51:19:F4:8E:49:CD:0C:07:31
            X509v3 Authority Key Identifier:
                keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:82:e2:a3:de:b6:5f:1e:f2:29:a7:95:94:13:af:fc:8b:9c:
         a7:aa:36:16:6b:f9:80:41:ac:b5:f2:42:5c:c9:14:ea:ff:8d:
         ba:ed:0c:31:28:b5:0e:1b:25:01:45:53:56:4d:4c:cb:d1:ab:
         02:eb:8f:4d:aa:32:99:e4:46:46:65:77:87:2e:ae:95:05:7d:
         86:30:16:83:12:cc:20:20:24:bf:d3:d8:8a:72:1e:d4:74:cc:
         5f:3c:d0:aa:97:b4:36:19:6f:a1:9a:ca:e4:4c:6b:69:fe:9c:
         49:72:13:58:01:dc:f8:e2:57:50:6e:77:8b:e9:91:93:b2:53:
         80:c4:66:4e:ef:81:7f:dc:04:9b:3a:63:cb:25:22:63:20:d9:
         2c:de:a6:b7:b7:db:69:14:a6:47:ec:61:c3:f9:40:69:73:32:
         dc:93:3a:87:51:16:c1:2a:89:c2:12:67:e3:7f:6e:ef:fe:cc:
         bb:6e:c9:a5:e5:37:05:d6:ea:24:b4:79:da:f4:94:fa:c5:7f:
         c2:7f:32:eb:af:dd:77:d9:77:ef:5f:f6:e6:33:77:a8:cd:35:
         f3:ab:25:58:3e:59:e0:90:05:63:45:79:40:3e:ec:1e:e5:a1:
         45:9f:64:d5:8a:c5:84:db:6c:79:55:b8:dc:0b:37:a7:6c:9c:
         cc:01:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:05 2026 by rpki-client