Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          SCeEfq0TKmav4+0zqy7utIHn6zJ9MhPSeN5q+yFp31c=
Subject key identifier:   63:D6:ED:D0:B5:E7:72:E1:D8:01:A0:5A:BD:4B:2C:61:E2:09:54:BC
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019F94DB2E6A3A9D7560F4E291DD5003ED21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0B10
Signing time:             Fri 24 Jul 2026 16:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:19 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: S0Z-QG3S6OWhct2R_ZOJmi2BN2s.roa (hash: DcFFFIgBF5pA0VbXRYkO/MxP7tMxGBn3QzgWRQGPawY=)
                          6: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: 6AqgyOcVN6ouC2fGoj35KFhMwSwRq0INcK/gYo/LMWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:2e:6a:3a:9d:75:60:f4:e2:91:dd:50:03:ed:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Jul 24 16:00:19 2026 GMT
            Not After : Jul 25 16:00:19 2026 GMT
        Subject: CN=63d6edd0b5e772e1d801a05abd4b2c61e20954bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:4b:8f:bb:76:8d:f7:29:4f:86:e7:2e:57:
                    bd:60:70:3d:75:94:ea:5b:8d:3e:d2:b9:ba:69:4d:
                    2f:d4:d0:f3:3b:ec:aa:44:27:5d:b2:16:9d:0e:e6:
                    d8:54:11:c2:06:f8:4a:1f:97:09:f0:58:db:60:17:
                    b7:18:23:24:69:58:4c:9a:c9:54:a3:c4:99:e6:3c:
                    dd:5d:85:ec:32:b1:0b:7b:73:33:a4:fa:01:a1:73:
                    12:8e:e1:0c:78:82:27:3a:ed:8f:ae:59:72:48:4d:
                    2e:e7:26:f6:64:40:d3:48:4e:fd:e9:fd:61:b0:a6:
                    44:47:a6:6c:d6:1d:cb:a6:e7:37:93:e4:48:c5:8c:
                    15:d0:81:73:d1:77:1e:bf:40:2b:40:f8:86:e3:d4:
                    2a:83:d2:9a:3d:40:e8:47:21:17:d8:ca:63:9b:0a:
                    b1:46:77:97:b6:1e:65:95:75:66:87:1f:1a:c1:bb:
                    20:e6:fb:a5:47:71:71:76:26:1e:50:2c:02:d7:98:
                    6b:5e:01:f5:be:24:01:06:88:dd:95:d9:61:b2:54:
                    4b:10:8a:74:01:e5:21:b5:d6:18:1b:20:73:e4:d6:
                    fa:11:f1:89:34:10:ab:96:90:7b:bb:b3:34:17:d4:
                    5a:39:e5:5d:93:6e:3f:f9:9e:ca:cd:07:a1:d0:0f:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:ED:D0:B5:E7:72:E1:D8:01:A0:5A:BD:4B:2C:61:E2:09:54:BC
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:21:5e:9e:83:fb:5d:24:10:81:9f:7d:1b:dc:90:59:7e:
         70:ff:87:57:69:53:c1:f2:ab:79:27:f2:be:ce:cf:cf:9d:28:
         ad:f9:b6:37:84:06:8b:18:31:e0:8e:d1:97:2b:49:ca:38:4a:
         b0:c6:a3:2f:16:f4:ca:bc:ed:44:90:94:ba:bf:e5:dd:85:1f:
         39:45:5c:9c:97:fb:5b:08:4e:e7:10:ae:ac:05:76:69:9f:c4:
         0f:ec:4f:c3:0d:d1:91:66:56:0e:8f:e1:94:ce:40:c9:67:3e:
         e3:dd:62:eb:d8:b7:2d:98:18:34:ca:48:da:cf:bb:22:4f:57:
         46:d3:65:64:cf:9d:67:96:6e:6e:eb:c2:ef:6e:1f:84:24:de:
         bb:bf:ee:e1:f8:ef:99:ef:ab:0d:26:10:86:5c:86:d0:6f:c2:
         72:e6:4b:31:2c:cb:de:cb:70:b6:8e:44:a3:1b:2a:31:4d:3b:
         0c:fc:2f:6b:eb:2b:d2:7a:bb:9c:d9:75:3a:64:53:b8:41:62:
         9a:a7:dd:8f:f9:24:a2:4a:d2:fb:b3:2e:0c:5c:af:59:bb:ec:
         72:7d:6f:27:3b:32:9c:a8:b9:9b:c2:39:5f:78:63:92:f3:c1:
         24:20:07:68:ac:93:d6:b5:ba:89:20:23:5d:1a:74:9e:18:d2:
         7f:3e:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:13 2026 by rpki-client