Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File:                     wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier:          UhUN8x4rsGPOmKg+tPQOiFRaW1N6m/9iaLrcZeWTjtM=
Subject key identifier:   C9:FB:CB:37:B1:1A:30:1C:CF:C7:FC:EB:60:A6:F4:D7:F2:87:07:15
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer:       /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial:       019FAC089231F02AFB6707122097B056AEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number:          03DE
Signing time:             Wed 29 Jul 2026 04:01:10 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:10 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:10 +0000
Files and hashes:         1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
                          2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
                          3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: GC3j5G0tXXzQrsxsx89g3/Y5R3VeD6yD12sIvVyFqwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:92:31:f0:2a:fb:67:07:12:20:97:b0:56:ae:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
        Validity
            Not Before: Jul 29 04:01:10 2026 GMT
            Not After : Jul 30 04:01:10 2026 GMT
        Subject: CN=c9fbcb37b11a301ccfc7fceb60a6f4d7f2870715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:48:8e:72:89:3d:19:e8:3d:83:c5:18:a5:
                    2d:c3:11:23:6e:93:08:d2:6d:5d:7f:f1:84:c3:b2:
                    2d:01:96:75:6a:3a:9c:48:f7:76:77:67:12:1d:87:
                    4f:1c:c0:d2:e2:a7:4c:ab:db:24:f5:b0:d6:48:1b:
                    8f:0f:28:31:70:2a:5f:3b:f1:d7:eb:e8:ce:a7:fb:
                    97:42:ea:5f:ac:dd:43:d8:12:77:df:d8:d2:e3:be:
                    9b:5e:47:76:88:50:93:76:8e:f1:91:f3:67:5b:3f:
                    6e:f8:db:b9:f9:2e:db:75:a4:ce:cf:ab:d5:3f:c8:
                    77:2c:37:bd:c8:de:60:3d:7c:9a:94:e8:1d:0e:8e:
                    c5:98:12:63:48:6a:1f:67:f5:29:db:8c:d6:d0:ef:
                    e6:00:10:23:45:49:34:11:44:fa:94:72:6b:62:ad:
                    6b:cb:eb:56:9b:84:ec:cd:b0:26:8a:c3:10:42:a9:
                    c1:f4:72:68:01:f7:0b:df:f8:3f:85:8d:08:d0:b3:
                    08:18:c4:c5:f4:e6:fe:4d:c5:a8:9e:9f:c9:bb:4b:
                    fa:c3:d8:ab:23:24:90:e7:fe:e5:de:31:ad:b4:5d:
                    e8:0e:a1:e5:ef:79:15:b5:0c:98:ea:14:ac:4e:ab:
                    e0:2a:85:74:fc:f2:73:b7:72:19:dd:60:1b:6d:3b:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FB:CB:37:B1:1A:30:1C:CF:C7:FC:EB:60:A6:F4:D7:F2:87:07:15
            X509v3 Authority Key Identifier:
                keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9a:8c:1d:5a:77:60:1c:ef:43:eb:dc:80:9b:29:13:d9:f6:
         79:fe:d9:e3:df:64:e6:b6:00:ec:59:e8:f3:1b:98:ac:ae:a8:
         67:56:4a:30:f3:67:2c:97:20:6a:52:38:7a:cf:8f:c3:0c:4e:
         4e:68:25:74:73:d3:08:12:23:e0:91:bf:fb:32:0e:6c:80:f6:
         45:11:95:01:a5:51:29:bc:f3:c0:f3:5a:ba:24:8e:77:e8:4b:
         77:1c:e8:10:9d:fd:40:ac:f9:c7:f2:32:09:cb:73:be:83:93:
         39:a7:c3:a1:9c:54:86:0b:41:1e:e6:57:44:b9:41:0d:14:4e:
         93:d0:3f:df:1e:01:a7:53:95:b1:23:8f:b0:2e:07:99:d1:cd:
         e7:0b:bb:5b:d0:7d:63:74:61:4f:81:fb:24:21:21:60:41:6b:
         79:f4:38:46:e8:c1:eb:ea:42:ac:30:62:ac:25:89:fe:93:84:
         a3:63:1c:8d:fb:00:ae:21:c8:9b:6b:a0:b0:c3:56:1d:7a:10:
         0a:14:84:e7:ee:48:19:ef:3c:0c:ae:a1:e2:3e:52:f5:11:5b:
         9c:27:ae:93:14:04:6e:ed:7a:15:75:85:37:dc:81:73:ab:d3:
         dd:e1:ae:c7:3d:d3:bb:8a:0e:fe:48:bb:97:b9:f5:4a:a8:46:
         af:cb:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:55 2026 by rpki-client