Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
File:                     wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json)
Hash identifier:          PfNuu27TcEhGA3BsikGjAYGBCwlt4yrHMF2xnF3Xxpk=
Subject key identifier:   E4:30:35:B8:A9:38:0B:D2:B1:00:A2:8B:23:E9:7F:B9:3B:0C:EA:0F
Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
Certificate issuer:       /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Certificate serial:       019F8F110D976D130B23790D0BDAF7CCAC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
Manifest number:          01E8
Signing time:             Thu 23 Jul 2026 13:01:27 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:27 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:27 +0000
Files and hashes:         1: b68wUGWBseMkcjS44Gr7jhy5Jqo.asa (hash: +m+tsXbOZCdRGi1rCes1IS9Kt7hkM0KJcsusakEBgHY=)
                          2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: nx9LKqq+/nGfxOtSjqBiIMJafhQn0nxJRPtrWCBvCOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:11:0d:97:6d:13:0b:23:79:0d:0b:da:f7:cc:ac:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
        Validity
            Not Before: Jul 23 13:01:27 2026 GMT
            Not After : Jul 24 13:01:27 2026 GMT
        Subject: CN=e43035b8a9380bd2b100a28b23e97fb93b0cea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:6b:d0:84:ce:3a:d2:cf:9a:57:2b:26:4c:
                    23:c2:80:7c:34:ce:96:92:4d:71:08:bc:cd:cd:e5:
                    66:85:be:f5:9f:41:90:f6:68:a9:53:ab:75:5f:f9:
                    a5:0f:a2:26:b8:57:37:ec:28:ce:18:61:62:33:be:
                    5e:70:3d:49:e8:eb:c2:20:ca:98:5d:16:59:a5:b5:
                    e3:2e:a2:ae:53:4c:8d:f9:45:19:82:7b:9c:0a:c2:
                    45:42:25:55:0f:e0:fe:04:aa:a2:f2:8b:e5:29:de:
                    ca:01:c2:d0:50:36:e5:f4:51:b9:c4:fa:6d:ab:58:
                    c6:1d:8b:52:a4:76:24:69:b8:b9:c9:92:a4:63:9a:
                    45:89:0c:b1:39:b5:2b:05:aa:ff:01:60:53:43:16:
                    39:d2:d9:29:61:8e:4b:ff:15:5d:a3:ad:6a:cc:f1:
                    3d:96:4a:fb:34:24:42:69:c5:57:ab:e5:ef:96:59:
                    d8:5a:f3:ad:78:e9:85:7d:14:c0:7f:45:c3:a9:92:
                    d9:c8:62:c7:4d:ab:fa:a1:0b:6e:66:9d:ab:d0:8e:
                    12:64:69:a7:d3:c4:a1:06:5e:f5:3d:02:38:07:b1:
                    6c:a5:5e:fe:07:92:d5:d6:de:59:8c:33:32:95:d6:
                    f4:b2:eb:46:a4:ac:20:9c:1e:dc:9e:8c:15:8c:0c:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:30:35:B8:A9:38:0B:D2:B1:00:A2:8B:23:E9:7F:B9:3B:0C:EA:0F
            X509v3 Authority Key Identifier:
                keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:5d:47:a5:ec:8a:ec:1d:cd:db:53:b7:c0:04:cb:e3:6d:
         6d:05:f8:7b:f1:43:46:18:e0:83:b2:25:eb:13:36:bf:d5:58:
         df:3a:c8:2d:55:97:cc:0b:a3:ca:f5:44:47:9c:01:e5:54:3c:
         e2:31:f0:e1:da:20:ed:0d:3f:1e:42:de:f5:8a:45:5f:19:f7:
         c4:7e:7b:3a:f7:0c:50:29:c1:3f:c4:61:a2:78:6a:60:9d:75:
         e2:3a:e2:0b:eb:a1:7e:7d:b6:7e:d7:a9:90:52:c4:51:70:72:
         20:bb:56:ae:0c:d9:22:2b:25:0a:57:e9:8b:44:7d:83:0c:6b:
         b1:08:fc:d2:83:76:bf:02:53:39:c9:69:07:71:c3:2d:73:6b:
         29:89:4b:e0:49:d5:ba:1d:2e:37:73:fe:ef:70:c5:3c:65:22:
         95:79:0b:d8:80:d8:5a:21:96:d4:bb:d6:45:df:5a:b7:8d:fa:
         49:c8:f3:59:c5:aa:e3:86:98:ce:73:a3:e6:78:a3:81:47:c7:
         92:37:0d:28:0d:b9:6c:d3:b4:0c:aa:eb:a3:e8:a0:4e:ed:87:
         d2:94:bf:47:fd:33:66:1a:ae:a8:5f:7c:76:c8:1b:37:73:42:
         d1:7a:dd:25:c9:24:f9:1b:da:59:3d:37:b9:2e:76:5b:a9:14:
         d4:9f:d4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEQ2XbRMLI3kNC9r3zKxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzEzMWFmN2ZhMDI5NzljNmVhMWRkZTA5ZDhjNzYyZDhh
ZWE0MWQwHhcNMjYwNzIzMTMwMTI3WhcNMjYwNzI0MTMwMTI3WjAzMTEwLwYDVQQD
EyhlNDMwMzViOGE5MzgwYmQyYjEwMGEyOGIyM2U5N2ZiOTNiMGNlYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJVr0ITOOtLPmlcrJkwjwoB8NM6W
kk1xCLzNzeVmhb71n0GQ9mipU6t1X/mlD6ImuFc37CjOGGFiM75ecD1J6OvCIMqY
XRZZpbXjLqKuU0yN+UUZgnucCsJFQiVVD+D+BKqi8ovlKd7KAcLQUDbl9FG5xPpt
q1jGHYtSpHYkabi5yZKkY5pFiQyxObUrBar/AWBTQxY50tkpYY5L/xVdo61qzPE9
lkr7NCRCacVXq+XvllnYWvOteOmFfRTAf0XDqZLZyGLHTav6oQtuZp2r0I4SZGmn
08ShBl71PQI4B7FspV7+B5LV1t5ZjDMyldb0sutGpKwgnB7cnowVjAzbfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQwNbipOAvSsQCiiyPpf7k7DOoPMB8GA1UdIwQY
MBaAFMMxMa9/oCl5xuod3gnYx2LYrqQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0Yjct
NDliNjY1MWQ5MmRiLzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0YjctNDliNjY1MWQ5MmRi
LzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdRdR6Xs
iuwdzdtTt8AEy+NtbQX4e/FDRhjgg7Il6xM2v9VY3zrILVWXzAujyvVER5wB5VQ8
4jHw4dog7Q0/HkLe9YpFXxn3xH57OvcMUCnBP8RhonhqYJ114jriC+uhfn22ftep
kFLEUXByILtWrgzZIislClfpi0R9gwxrsQj80oN2vwJTOclpB3HDLXNrKYlL4EnV
uh0uN3P+73DFPGUilXkL2IDYWiGW1LvWRd9at436ScjzWcWq44aYznOj5nijgUfH
kjcNKA25bNO0DKrro+igTu2H0pS/R/0zZhquqF98dsgbN3NC0XrdJckk+RvaWT03
uS52W6kU1J/UUw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:48 2026 by rpki-client