Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          It7DaYEenK5kbJLmHS8n+XoNRfrS/18kaQ/t/Dx4fTE=
Subject key identifier:   96:40:F0:22:C8:41:1A:62:4F:AC:41:7F:4C:CF:72:6D:9F:57:00:B4
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019F916CCF7CA9FB48E938390E42AB842D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          0361
Signing time:             Fri 24 Jul 2026 00:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:55 +0000
Files and hashes:         1: W9NokyXaMzMGQz2rT0ueVLsJj_c.roa (hash: H8qWbLTHoDh177+NLvlgjLRNqnjZkh6wnZIU1T8Kptk=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: 3oG7OdqUtqMDZenyGcEBtSIXSo0+GEFnJQSdR8MkKvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:cf:7c:a9:fb:48:e9:38:39:0e:42:ab:84:2d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Jul 24 00:00:55 2026 GMT
            Not After : Jul 25 00:00:55 2026 GMT
        Subject: CN=9640f022c8411a624fac417f4ccf726d9f5700b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:17:a6:27:f6:93:54:cb:64:69:28:96:67:
                    60:47:9e:8a:b6:2c:29:7b:ef:26:bc:a2:cd:29:e5:
                    60:6f:f8:3e:67:a1:48:fa:b3:a5:34:41:a4:6c:de:
                    db:06:67:4f:13:2c:3b:cd:1e:50:83:cb:a7:0f:3a:
                    d4:96:be:2c:d2:a3:19:6f:29:3c:72:10:51:8e:75:
                    da:35:ce:af:54:05:58:cc:2b:93:76:47:5b:9e:3c:
                    7e:2f:a3:b6:3e:58:fc:23:96:a0:30:96:23:d5:93:
                    4c:38:d9:ff:da:fa:28:37:e9:c9:7e:07:41:23:42:
                    38:aa:34:02:49:1b:e3:d3:7a:df:27:e7:87:d7:fd:
                    ca:25:35:2a:ba:9c:b1:66:b2:a0:f3:10:e1:66:ea:
                    4c:6d:bb:f0:54:54:aa:76:0c:97:72:e5:87:36:e6:
                    93:80:54:37:2c:3c:65:2b:27:97:9f:9d:dd:d4:a3:
                    e3:5f:a1:c0:20:1b:45:12:ec:08:33:0a:df:76:46:
                    63:f6:25:b3:d1:26:e6:0f:95:04:96:45:8f:b6:51:
                    4d:c3:13:c1:90:fc:35:af:53:1b:30:a3:8f:81:19:
                    e7:9b:d5:74:3c:83:e1:6f:15:e9:0b:14:72:8f:ef:
                    02:1e:86:ad:78:64:d1:6c:d6:de:e1:73:cb:eb:3b:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:40:F0:22:C8:41:1A:62:4F:AC:41:7F:4C:CF:72:6D:9F:57:00:B4
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:55:c1:33:43:68:29:f7:c0:9c:2a:e3:ed:f9:88:8c:49:
         55:7b:5b:21:51:50:c9:7c:7f:22:2c:23:98:aa:32:29:ec:81:
         d2:22:0c:3f:0c:cf:5f:88:8b:fd:12:12:b0:c9:48:d1:5e:2b:
         63:27:51:d4:a4:4d:cf:e0:d3:7f:9c:da:a0:44:fb:62:a1:c7:
         cc:ac:62:b2:73:f9:b2:77:be:e1:be:5a:19:b8:80:6f:29:c2:
         73:8b:f7:39:70:5d:fc:b8:cf:2a:7d:64:de:46:ca:73:2f:25:
         ca:9a:ad:25:5b:8c:b1:68:6e:cb:9d:b5:34:61:a6:bc:e8:ee:
         af:3c:05:7e:fc:10:b1:06:c6:27:29:23:15:c2:4c:c3:4b:dc:
         a5:f3:04:fb:8a:d6:4e:d0:ee:4a:5e:97:65:81:84:c1:da:23:
         24:8c:0b:e8:90:ee:be:5a:85:79:65:07:8b:04:8b:f0:90:fb:
         22:fc:fd:8b:a9:44:ac:28:5a:24:a0:fc:26:44:3e:65:01:f6:
         b9:2d:c9:82:59:7a:c5:4e:08:dc:43:fa:8a:82:7c:99:00:49:
         d9:3c:7f:c4:bf:8b:1d:0a:82:84:30:18:48:29:e2:39:50:27:
         86:62:68:ca:e7:db:0a:7d:9f:18:b3:c7:be:2f:21:d0:4f:9b:
         66:e1:f6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbM98qftI6Tg5DkKrhC0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYwNzI0MDAwMDU1WhcNMjYwNzI1MDAwMDU1WjAzMTEwLwYDVQQD
Eyg5NjQwZjAyMmM4NDExYTYyNGZhYzQxN2Y0Y2NmNzI2ZDlmNTcwMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c8Xpif2k1TLZGkolmdgR56Ktiwp
e+8mvKLNKeVgb/g+Z6FI+rOlNEGkbN7bBmdPEyw7zR5Qg8unDzrUlr4s0qMZbyk8
chBRjnXaNc6vVAVYzCuTdkdbnjx+L6O2Plj8I5agMJYj1ZNMONn/2vooN+nJfgdB
I0I4qjQCSRvj03rfJ+eH1/3KJTUqupyxZrKg8xDhZupMbbvwVFSqdgyXcuWHNuaT
gFQ3LDxlKyeXn53d1KPjX6HAIBtFEuwIMwrfdkZj9iWz0SbmD5UElkWPtlFNwxPB
kPw1r1MbMKOPgRnnm9V0PIPhbxXpCxRyj+8CHoateGTRbNbe4XPL6zunIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZA8CLIQRpiT6xBf0zPcm2fVwC0MB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibtVwTND
aCn3wJwq4+35iIxJVXtbIVFQyXx/IiwjmKoyKeyB0iIMPwzPX4iL/RISsMlI0V4r
YydR1KRNz+DTf5zaoET7YqHHzKxisnP5sne+4b5aGbiAbynCc4v3OXBd/LjPKn1k
3kbKcy8lypqtJVuMsWhuy521NGGmvOjurzwFfvwQsQbGJykjFcJMw0vcpfME+4rW
TtDuSl6XZYGEwdojJIwL6JDuvlqFeWUHiwSL8JD7Ivz9i6lErChaJKD8JkQ+ZQH2
uS3Jgll6xU4I3EP6ioJ8mQBJ2Tx/xL+LHQqChDAYSCniOVAnhmJoyufbCn2fGLPH
vi8h0E+bZuH2FQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:28 2026 by rpki-client