Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          UF3XJhiC++gOkxekCReqCMGs/034D0Yr21JYWwt5TCQ=
Subject key identifier:   E8:12:E5:DF:29:23:03:96:F0:2C:C2:D6:64:30:12:F3:C3:B1:E5:6C
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019F951272ABC166E045547071354C0B34A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          01C5
Signing time:             Fri 24 Jul 2026 17:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:41 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: xsNHnNNb7D/c3nb64y+KJLUpGOa4CznABlav+6DK088=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:72:ab:c1:66:e0:45:54:70:71:35:4c:0b:34:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Jul 24 17:00:41 2026 GMT
            Not After : Jul 25 17:00:41 2026 GMT
        Subject: CN=e812e5df29230396f02cc2d6643012f3c3b1e56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:5a:3e:45:65:dc:6b:99:4f:5f:48:c1:15:
                    ba:7a:b5:12:d1:4a:97:29:c3:b9:e5:24:9a:91:8e:
                    2e:61:5c:ed:e0:fc:a6:42:91:b1:c7:24:52:2d:4f:
                    05:45:ba:b7:67:8a:d4:cb:9c:8b:8c:f5:9c:66:d3:
                    b5:18:4a:c7:93:e5:b2:dc:4a:ee:ff:c9:64:fe:69:
                    c3:b4:6f:88:c9:1c:af:43:b0:2a:8d:dc:d9:07:d2:
                    bd:e2:ef:4c:87:fb:ef:df:a5:1a:05:9a:8b:37:35:
                    3d:62:14:45:f1:56:7f:9b:1f:e4:b1:6d:f4:ce:64:
                    33:f7:32:fd:f5:b3:47:2e:d1:32:d0:e6:0d:c1:2e:
                    b1:1a:e4:cc:42:94:4b:86:41:29:38:4a:8c:c1:33:
                    d5:5a:a9:51:11:68:ab:57:6a:b4:2a:75:2a:47:d7:
                    78:b3:16:ff:fa:28:c6:2d:99:3d:31:04:9d:42:1e:
                    13:11:7a:29:65:2b:56:2a:42:1b:ef:3d:83:a9:37:
                    52:3e:9e:ad:e6:51:0b:eb:f1:2c:9a:7f:b5:2f:7b:
                    e2:d0:5c:fa:01:5e:ef:3a:18:b6:5b:d6:88:6b:15:
                    69:49:3c:28:3c:35:e7:8a:89:bf:0d:66:8c:12:c4:
                    be:1c:21:07:d3:99:db:47:ca:7f:ea:f1:aa:d5:8a:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:E5:DF:29:23:03:96:F0:2C:C2:D6:64:30:12:F3:C3:B1:E5:6C
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:83:a1:2d:d3:aa:b3:0b:90:46:72:52:52:93:aa:ab:49:
         c8:0e:ba:5e:cf:6e:25:cc:2c:d1:f2:e6:2c:a2:41:3a:c7:6f:
         0a:55:8e:1e:ea:31:fe:22:bf:17:25:0e:c7:eb:d8:3b:61:f1:
         b7:d2:c9:aa:1e:5d:ad:12:bc:3d:52:45:17:f3:77:13:fb:95:
         60:84:15:b8:e7:dd:69:8e:69:9c:3f:6f:7a:b9:b2:93:2c:c4:
         5f:9c:28:87:48:52:70:93:63:11:29:5f:64:02:bd:fc:b9:dc:
         83:e2:45:cf:82:fb:35:d2:3b:cc:ae:7e:78:18:9c:1e:b4:7a:
         96:51:b9:26:77:35:36:f9:60:00:4f:bb:0d:c7:96:a1:2d:78:
         46:b9:24:a4:01:a8:fc:5f:f9:56:df:fb:f3:3e:80:bf:11:35:
         78:66:90:98:86:3f:05:fd:a9:45:f7:12:8e:e1:63:08:f1:a3:
         85:8c:a9:70:6a:a3:dc:69:43:f0:81:50:1e:00:02:b7:57:7a:
         ca:1b:16:c8:60:e0:e8:f7:9a:01:bc:dc:cf:b7:1d:0b:dc:e0:
         9a:9c:54:d4:e5:fe:d7:e3:c8:44:64:5a:e9:0b:92:6f:30:f0:
         8c:60:3d:ff:8e:3a:35:11:68:15:7f:42:72:d2:a0:e3:58:68:
         35:b8:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:28 2026 by rpki-client