Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
File:                     wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json)
Hash identifier:          KNaZRoN2Fa6lS6uIuuNyqecTCLyS6VUAq6tL/nQ2Py8=
Subject key identifier:   D4:88:B0:D3:64:85:FC:01:D3:C6:E9:07:40:E5:EB:5A:C1:10:99:26
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Certificate issuer:       /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial:       019F969335059884F5CFFEC5ED50CF99B448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
Manifest number:          06EA
Signing time:             Sat 25 Jul 2026 00:00:57 +0000
Manifest this update:     Sat 25 Jul 2026 00:00:57 +0000
Manifest next update:     Sun 26 Jul 2026 00:00:57 +0000
Files and hashes:         1: J2ac7yBZ1rddlP4OYM3qXYokeC4.roa (hash: 661rctvmo5buxvwD1rNnJJOMy13YlgHsaEVyiDN+3aA=)
                          2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: /NIbUN82NXYVLZ2onFp5zG4woatAp3DK4Gw0KG+ZJD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:93:35:05:98:84:f5:cf:fe:c5:ed:50:cf:99:b4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
        Validity
            Not Before: Jul 25 00:00:57 2026 GMT
            Not After : Jul 26 00:00:57 2026 GMT
        Subject: CN=d488b0d36485fc01d3c6e90740e5eb5ac1109926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:d9:72:51:01:e4:62:45:b0:b7:79:a1:7b:
                    c5:ec:2a:dc:fb:31:c4:5e:d8:19:e5:3b:61:4a:ce:
                    c5:51:85:7f:dc:be:4b:05:84:c8:9d:21:df:4f:8a:
                    27:c5:7f:2a:b3:4a:13:e8:5d:7e:5f:15:f4:55:0d:
                    f7:5c:f0:e5:e7:b6:ff:3b:cc:23:38:24:81:8b:7a:
                    f1:77:a1:2e:77:19:7f:d1:51:d5:ba:b2:c1:0a:b2:
                    7d:69:4f:7f:e1:37:af:73:31:08:2e:a1:c1:73:db:
                    5c:4d:9a:4c:cc:2c:88:83:d9:e5:09:c0:79:21:db:
                    af:44:4a:c8:ae:4f:63:93:c3:6b:88:cd:b9:1c:c5:
                    6e:b4:67:a3:d1:4f:9e:fd:22:5e:a9:29:59:fd:56:
                    36:08:6f:8f:e4:62:e6:75:f2:fc:67:7f:0a:00:70:
                    ba:c1:11:93:af:2b:28:b3:78:2a:3c:37:99:40:08:
                    d1:fa:8f:cf:a7:07:14:d3:7f:77:7d:1e:78:12:e2:
                    b4:be:c9:17:93:52:78:e6:21:85:46:c9:cd:29:22:
                    80:e7:8b:4d:3a:11:3a:cf:76:81:99:cb:10:92:49:
                    e9:5c:4b:24:f0:31:81:a8:5f:33:5a:ae:9f:5a:72:
                    92:71:31:fb:63:8e:92:f2:db:9f:fe:ea:3a:b4:59:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:88:B0:D3:64:85:FC:01:D3:C6:E9:07:40:E5:EB:5A:C1:10:99:26
            X509v3 Authority Key Identifier:
                keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8c:8c:e2:48:87:4e:01:bc:19:90:51:4a:c3:0b:7b:25:f8:
         eb:3e:b2:52:ea:71:e8:14:41:d2:44:66:97:f1:67:b5:44:da:
         ea:e9:27:5c:3b:39:ee:86:08:f3:79:32:af:28:ab:62:19:be:
         73:41:cc:41:df:e1:0a:54:71:da:4b:e1:c1:e7:da:3b:08:57:
         75:55:e2:e1:2d:b9:ba:2f:8f:79:a1:1a:f1:20:c4:e5:70:ca:
         da:4d:6b:2c:a5:d2:d5:ed:cd:df:b6:82:6f:41:57:76:f0:98:
         1b:5e:55:1f:8e:15:4c:69:d8:63:ef:6e:1a:0b:6c:7a:b5:71:
         5c:c5:a9:98:c1:a7:95:27:75:31:a0:27:7f:d0:ca:58:41:9b:
         37:3f:8f:cf:e1:b9:16:4e:a2:50:cd:8e:ed:06:9d:0e:86:c6:
         92:e4:24:94:94:38:19:0c:fd:6c:1c:89:18:f5:c1:de:e4:95:
         44:4e:a3:3f:ab:a6:af:c3:e9:c7:6c:a9:90:3d:69:6f:8f:f3:
         5c:48:2f:42:7b:7b:46:74:0a:71:3c:74:23:66:80:95:1b:6a:
         0a:52:c4:05:29:1d:ab:13:0b:d9:fc:f3:46:92:02:8a:12:a9:
         0a:c6:8e:a9:3a:81:9d:74:5c:62:29:d1:b7:05:61:21:64:1b:
         d5:df:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:37 2026 by rpki-client