Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          LTxN/6aSepMWe2Y6ZjqAOjASc8LBYpaYIssvK7wY+DA=
Subject key identifier:   18:58:0E:E3:E4:80:96:9E:46:BA:D2:60:2E:0D:BE:8E:C0:59:11:67
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       019F95B6D91DE73174DA614BF1CE52D33916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          12CA
Signing time:             Fri 24 Jul 2026 20:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:15 +0000
Files and hashes:         1: WAm_tIyDAPRV3BNqWG57uTp7CzY.roa (hash: qS+vZJ+Ti9+HN+VBxaCgQjtizbbFP3FemK3D8+0KoO4=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: M40XZkj6SIoQ6piXyKA+WLrBgPMU+bHG/IP4tN9QoF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b6:d9:1d:e7:31:74:da:61:4b:f1:ce:52:d3:39:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Jul 24 20:00:15 2026 GMT
            Not After : Jul 25 20:00:15 2026 GMT
        Subject: CN=18580ee3e480969e46bad2602e0dbe8ec0591167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:7a:8c:79:62:86:36:e1:1c:36:5d:12:ec:
                    10:fd:41:7f:db:c5:c4:b4:a8:ff:1c:74:5f:53:63:
                    ba:78:ee:19:6a:e2:1c:4d:ca:51:a4:08:a9:37:49:
                    6b:5b:f1:f4:72:11:c2:2c:66:ab:4a:0c:6e:a8:b8:
                    34:29:88:90:70:48:32:b9:11:d6:62:a6:56:c0:25:
                    89:5c:85:1b:88:8b:cb:28:70:9d:86:48:3c:44:97:
                    10:98:3e:68:47:d6:fa:d3:8f:1a:9c:9c:06:bc:60:
                    5e:e8:b3:80:84:19:6f:00:d1:7f:d5:87:79:50:e7:
                    3d:43:96:68:7e:d6:fd:eb:37:cf:09:8c:50:b2:2f:
                    df:7d:9b:1a:fc:52:74:53:7d:a3:3f:2d:0c:da:2b:
                    e5:36:42:ff:14:62:54:24:45:95:90:31:48:0c:ac:
                    d7:e7:a7:55:17:f6:38:7b:c1:9f:79:ff:39:c0:70:
                    9c:4f:59:ff:53:6c:c0:e4:8e:27:3c:21:74:31:55:
                    fa:59:12:cd:17:d6:11:06:9c:b8:7a:a6:2c:b1:e1:
                    e0:55:b0:65:7a:74:76:23:87:7f:8b:d0:a0:4a:cd:
                    03:a5:e7:bb:af:f9:be:65:eb:35:bb:9d:09:f3:3e:
                    08:7e:08:d1:f3:fa:bd:1a:c1:0b:cd:33:c6:85:53:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:58:0E:E3:E4:80:96:9E:46:BA:D2:60:2E:0D:BE:8E:C0:59:11:67
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:51:5f:9e:36:9f:15:f1:26:12:91:60:aa:8f:37:bc:49:
         35:b5:ef:40:23:dc:29:9e:71:37:0e:9d:8b:4b:21:8a:42:c1:
         a5:b7:f8:a6:79:a9:45:8b:3e:8d:cf:72:c5:bb:84:62:f5:c0:
         e5:5b:1e:77:f1:b7:ba:2a:5c:5d:5b:5b:f4:b7:c5:50:ec:ca:
         3c:fa:c8:5f:89:21:57:ab:81:b5:00:54:91:12:52:f4:8e:b8:
         ca:79:4b:f1:e2:26:8e:6f:7e:7a:24:e9:6f:3a:29:6c:b5:43:
         15:73:80:7a:03:64:72:de:b1:96:b7:b3:50:9b:8d:e2:30:27:
         bd:d3:d3:bc:7d:c9:8f:d9:6d:36:cb:6d:a5:cf:15:ea:3a:14:
         0f:79:60:66:73:64:48:50:ba:03:0b:93:f2:2a:72:8d:0a:d9:
         81:0b:5f:db:ba:0a:5a:a2:dd:e4:10:6c:8b:13:d9:95:18:e7:
         0b:38:de:a7:90:42:3b:7c:0b:a2:f7:c6:b9:d6:39:41:7b:ad:
         b6:31:d6:fd:58:41:d9:7d:fc:4b:13:7b:a9:44:a4:2f:cf:06:
         ad:59:38:de:e5:56:62:b5:f5:12:18:95:f2:58:2b:10:2b:74:
         05:e2:6c:a9:ef:af:9d:6a:17:86:66:c9:ea:72:52:33:45:75:
         46:d0:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:37 2026 by rpki-client