Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File:                     wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier:          XcHeEeFTVnQHM2ikPfo3Hvvy2uC80F4CBxgCzullaxA=
Subject key identifier:   70:6F:3A:BA:9B:4E:9D:6C:DF:DC:8F:75:C7:41:EB:CF:B0:14:52:E5
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer:       /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial:       019F92115ABE86AFE766333B5DEBDA3BF03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number:          0B0B
Signing time:             Fri 24 Jul 2026 03:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:38 +0000
Files and hashes:         1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
                          2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
                          3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: EEuXA12P+Brq7QSsq3TB93+kQDSaVyDMTv1pGBAJzmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:5a:be:86:af:e7:66:33:3b:5d:eb:da:3b:f0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
        Validity
            Not Before: Jul 24 03:00:38 2026 GMT
            Not After : Jul 25 03:00:38 2026 GMT
        Subject: CN=706f3aba9b4e9d6cdfdc8f75c741ebcfb01452e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:8c:99:cb:c4:00:d7:84:34:a7:74:bc:e0:
                    2d:65:71:1e:ac:4b:40:71:ef:62:5d:da:6e:47:fc:
                    93:f7:48:14:a1:e5:22:c7:c8:52:d1:87:c4:09:a2:
                    c7:3d:02:af:b5:e0:e2:2b:fb:33:42:06:09:fb:84:
                    1a:65:3c:b2:15:62:59:d2:fb:ac:78:0c:fb:66:2a:
                    01:5e:6b:0a:a8:fb:83:1a:96:75:89:2b:5f:6a:f3:
                    c3:40:9f:05:01:ab:bc:9d:ac:11:45:06:91:79:f9:
                    06:23:fa:88:75:67:d1:2c:fa:5b:f5:f5:be:e8:dd:
                    c8:23:d1:f6:bf:38:b0:eb:5a:ad:59:c2:3f:ac:c3:
                    25:8d:fe:a4:34:6f:09:75:86:3b:2a:ed:4c:fe:a1:
                    08:fb:75:ee:30:ec:69:3e:5b:e9:f1:c1:78:fe:e4:
                    5e:3b:ca:c8:bc:6b:04:52:34:0b:32:05:fc:c1:55:
                    ce:d3:ca:53:b9:dd:3a:ae:ec:6b:b8:c6:9c:b0:4b:
                    19:a1:5b:65:84:e9:4b:46:48:2b:66:0b:f5:bf:21:
                    ee:cb:c7:80:1e:7f:b3:f2:b3:1b:97:49:0b:51:5a:
                    f5:d3:dc:64:b9:e6:58:4a:4a:e4:41:b7:95:32:5e:
                    cb:48:b3:5e:ca:ee:9b:31:c2:6c:87:6d:df:cc:cf:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6F:3A:BA:9B:4E:9D:6C:DF:DC:8F:75:C7:41:EB:CF:B0:14:52:E5
            X509v3 Authority Key Identifier:
                keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:45:80:4b:99:3e:21:f9:3e:17:1e:2c:20:7d:c2:07:5a:5e:
         8b:fc:34:3b:b5:b2:bc:60:fa:d4:52:bb:e6:f0:05:b7:53:7f:
         d7:b8:9d:23:14:8e:13:d7:a0:66:36:6c:4f:1f:e4:b8:e4:06:
         ff:b9:5b:5d:5a:aa:4c:95:98:e9:9a:d1:9a:de:72:18:e0:f0:
         21:11:7e:8a:67:ac:56:48:73:4b:2c:d7:30:90:84:3d:7c:31:
         77:82:5d:88:55:75:fd:55:8d:8f:19:38:89:99:f7:30:bd:0b:
         00:26:bd:b9:21:ad:0f:fd:03:13:6f:b8:81:eb:52:e8:58:67:
         63:07:03:a9:f4:dc:f2:4e:12:59:0c:73:51:b4:dd:2b:5a:e4:
         da:de:ff:46:cd:ca:37:37:54:5a:5c:cf:d5:6f:89:de:b4:49:
         71:90:a3:16:4a:8b:fa:68:1c:c9:ce:90:00:48:9e:f3:c5:2b:
         1a:97:f9:b3:de:00:23:69:7f:16:47:61:e0:f8:7e:ce:3b:9a:
         9d:0b:3d:8e:6d:8b:2b:d6:a9:2b:8c:c1:de:0a:c4:d6:1c:e5:
         cc:f5:2c:9d:32:be:e9:d2:f4:cb:c1:95:e7:6b:d2:88:86:97:
         29:cb:11:49:e6:86:cc:b2:ed:29:20:4a:15:de:04:52:51:f8:
         52:8a:db:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEVq+hq/nZjM7XevaO/A8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTkwOTU0ODY5NWYxOGMwNGNiODk1ZTJhY2VlYjExMDNl
MDNlMTIwHhcNMjYwNzI0MDMwMDM4WhcNMjYwNzI1MDMwMDM4WjAzMTEwLwYDVQQD
Eyg3MDZmM2FiYTliNGU5ZDZjZGZkYzhmNzVjNzQxZWJjZmIwMTQ1MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCeMmcvEANeENKd0vOAtZXEerEtA
ce9iXdpuR/yT90gUoeUix8hS0YfECaLHPQKvteDiK/szQgYJ+4QaZTyyFWJZ0vus
eAz7ZioBXmsKqPuDGpZ1iStfavPDQJ8FAau8nawRRQaRefkGI/qIdWfRLPpb9fW+
6N3II9H2vziw61qtWcI/rMMljf6kNG8JdYY7Ku1M/qEI+3XuMOxpPlvp8cF4/uRe
O8rIvGsEUjQLMgX8wVXO08pTud06ruxruMacsEsZoVtlhOlLRkgrZgv1vyHuy8eA
Hn+z8rMbl0kLUVr109xkueZYSkrkQbeVMl7LSLNeyu6bMcJsh23fzM9xmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBvOrqbTp1s39yPdcdB68+wFFLlMB8GA1UdIwQY
MBaAFMEZCVSGlfGMBMuJXirO6xED4D4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JrSlZJYVY4WXdFeTRsZUtzN3JFUVBnUGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zYjMzZTctMzBiNC00MTQ5LTkwNDUt
YTA1NjRjOWQ2ZmRlLzEvd1JrSlZJYVY4WXdFeTRsZUtzN3JFUVBnUGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zYjMzZTctMzBiNC00MTQ5LTkwNDUtYTA1NjRjOWQ2ZmRl
LzEvd1JrSlZJYVY4WXdFeTRsZUtzN3JFUVBnUGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkWAS5k+
Ifk+Fx4sIH3CB1pei/w0O7WyvGD61FK75vAFt1N/17idIxSOE9egZjZsTx/kuOQG
/7lbXVqqTJWY6ZrRmt5yGODwIRF+imesVkhzSyzXMJCEPXwxd4JdiFV1/VWNjxk4
iZn3ML0LACa9uSGtD/0DE2+4getS6FhnYwcDqfTc8k4SWQxzUbTdK1rk2t7/Rs3K
NzdUWlzP1W+J3rRJcZCjFkqL+mgcyc6QAEie88UrGpf5s94AI2l/Fkdh4Ph+zjua
nQs9jm2LK9apK4zB3grE1hzlzPUsnTK+6dL0y8GV52vSiIaXKcsRSeaGzLLtKSBK
Fd4EUlH4UorbBw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:06 2026 by rpki-client