Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          /uFawm8LLzbFyHgvZiN46Knd7PMs877WGLJbVGZtYIc=
Subject key identifier:   9D:F9:D1:A5:93:4E:A0:12:0A:42:EB:69:5A:1C:AA:8B:F5:28:F7:09
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       019F90FE8C98B53395E9CA302942CEF8AB54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          0A96
Signing time:             Thu 23 Jul 2026 22:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:28 +0000
Files and hashes:         1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
                          2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: DRVYilusncNGtX0+5FPs2lIbdcpvZwFd5kdHk7U65sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:8c:98:b5:33:95:e9:ca:30:29:42:ce:f8:ab:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Jul 23 22:00:28 2026 GMT
            Not After : Jul 24 22:00:28 2026 GMT
        Subject: CN=9df9d1a5934ea0120a42eb695a1caa8bf528f709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:c8:ac:32:65:29:45:eb:ab:90:4e:d3:00:
                    73:a4:db:1c:7e:63:2d:77:f9:2c:e4:0f:e0:9f:11:
                    74:0b:56:1b:0d:c6:14:95:66:2b:d2:85:43:69:db:
                    2d:e4:b6:39:0d:cf:21:ef:b2:30:7c:90:a6:1e:52:
                    06:fe:b6:74:f6:69:f3:5f:81:d1:02:87:f4:f5:93:
                    02:ea:11:3a:42:f2:52:62:df:b4:18:79:3d:d2:cc:
                    6b:5a:20:84:67:d3:b3:9c:68:a0:12:30:a7:9d:07:
                    92:e1:a3:c3:65:26:1f:6c:2e:4c:82:e4:e7:64:2d:
                    e7:8f:2e:83:d8:39:e1:78:f2:80:43:ed:de:25:2d:
                    9d:9c:f3:6c:f0:3d:0e:18:99:6e:98:e5:8b:29:59:
                    43:a5:31:76:6e:69:25:71:b9:df:6b:94:de:5e:a3:
                    5a:18:e6:a3:98:b7:eb:2e:98:9f:03:d1:da:c1:2b:
                    d6:5a:b5:d8:96:f8:99:75:e4:cb:76:74:63:7c:94:
                    cd:7a:94:23:23:e9:14:d8:4e:fd:4a:e5:23:11:83:
                    c8:b3:4e:9f:39:d2:58:ce:ca:41:3c:9a:87:e8:fb:
                    34:9c:84:ab:0f:4e:cb:7d:c8:37:73:8c:ad:7e:c6:
                    3d:82:0d:ee:1b:b1:43:e2:0e:f0:9d:fd:2d:2e:3a:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F9:D1:A5:93:4E:A0:12:0A:42:EB:69:5A:1C:AA:8B:F5:28:F7:09
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:7e:17:ba:f6:2c:cc:3b:ba:b5:c6:4c:0f:53:a0:e5:03:
         31:c0:c5:82:1a:ac:51:c4:45:02:e1:5a:ce:c3:87:df:50:c9:
         36:2b:f0:96:b8:fb:f8:ac:a8:82:6e:40:28:60:91:d9:c2:90:
         a2:f2:8c:14:6a:c1:b0:ea:a0:83:1b:91:c9:2f:59:73:e8:ed:
         62:5d:5b:08:16:6f:81:a9:a7:44:fc:85:58:f7:21:9e:3d:61:
         f8:6d:dd:65:dc:ee:5c:30:11:07:86:1f:3a:7e:85:99:55:fd:
         f3:01:45:85:a3:a0:36:3e:c9:4c:7b:c5:75:79:bb:73:2e:dd:
         7c:78:b6:8a:2b:9e:b0:19:e2:fe:7f:e5:c7:c6:10:68:cb:1b:
         75:d5:09:32:68:41:28:45:cb:81:31:d8:bc:ad:20:e1:8f:f0:
         50:5f:1a:9c:98:e1:bf:f8:70:9e:75:10:e2:74:4f:e4:b4:1e:
         c5:73:0b:d1:58:5d:9d:17:80:15:a5:16:87:91:b4:7f:b8:04:
         3f:53:07:d9:c2:cb:43:34:41:f7:75:e6:6c:c9:a4:53:f3:3e:
         41:6b:16:b8:c8:07:26:29:aa:ac:13:17:80:e7:9f:92:de:8a:
         15:0c:26:52:13:46:1f:de:61:32:b6:df:54:b7:94:77:f5:a9:
         30:1f:c4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/oyYtTOV6cowKULO+KtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl
ZWQ2OGIwHhcNMjYwNzIzMjIwMDI4WhcNMjYwNzI0MjIwMDI4WjAzMTEwLwYDVQQD
Eyg5ZGY5ZDFhNTkzNGVhMDEyMGE0MmViNjk1YTFjYWE4YmY1MjhmNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3bIrDJlKUXrq5BO0wBzpNscfmMt
d/ks5A/gnxF0C1YbDcYUlWYr0oVDadst5LY5Dc8h77IwfJCmHlIG/rZ09mnzX4HR
Aof09ZMC6hE6QvJSYt+0GHk90sxrWiCEZ9OznGigEjCnnQeS4aPDZSYfbC5MguTn
ZC3njy6D2DnhePKAQ+3eJS2dnPNs8D0OGJlumOWLKVlDpTF2bmklcbnfa5TeXqNa
GOajmLfrLpifA9HawSvWWrXYlviZdeTLdnRjfJTNepQjI+kU2E79SuUjEYPIs06f
OdJYzspBPJqH6Ps0nISrD07Lfcg3c4ytfsY9gg3uG7FD4g7wnf0tLjqmSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ350aWTTqASCkLraVocqov1KPcJMB8GA1UdIwQY
MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt
MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni
LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE5+F7r2
LMw7urXGTA9ToOUDMcDFghqsUcRFAuFazsOH31DJNivwlrj7+Kyogm5AKGCR2cKQ
ovKMFGrBsOqggxuRyS9Zc+jtYl1bCBZvgamnRPyFWPchnj1h+G3dZdzuXDARB4Yf
On6FmVX98wFFhaOgNj7JTHvFdXm7cy7dfHi2iiuesBni/n/lx8YQaMsbddUJMmhB
KEXLgTHYvK0g4Y/wUF8anJjhv/hwnnUQ4nRP5LQexXML0VhdnReAFaUWh5G0f7gE
P1MH2cLLQzRB93XmbMmkU/M+QWsWuMgHJimqrBMXgOefkt6KFQwmUhNGH95hMrbf
VLeUd/WpMB/EIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:44:37 2026 by rpki-client