Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File:                     WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier:          R8e0g8nsvAmfv7MCbWWn/1wBbr80BBL3gA513tkTewk=
Subject key identifier:   88:B9:A1:74:B0:28:ED:35:F7:C9:B0:89:29:61:62:27:34:0C:36:93
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer:       /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial:       019FFEA4D7AFAD39D72F8826985E010A8E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number:          06AF
Signing time:             Fri 14 Aug 2026 05:00:43 +0000
Manifest this update:     Fri 14 Aug 2026 05:00:43 +0000
Manifest next update:     Sat 15 Aug 2026 05:00:43 +0000
Files and hashes:         1: 7GMNamFaVxNl3WNisJcYkTD_zfs.roa (hash: HADPfR7/EErIN7lxD64OuOkMNhzpIIVuPWcxcLTTEgA=)
                          2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: gEKENuHvcEc5hqMy1Jjo7HDKWwssS/ulfLTdjTJAUMc=)
                          3: t59DTwtpsezlr8EDU-BygwzxAls.roa (hash: x2nikxPQqGzwSgfTDKs6YhYnWV/ZCJ22eSxvnYU38CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:a4:d7:af:ad:39:d7:2f:88:26:98:5e:01:0a:8e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
        Validity
            Not Before: Aug 14 05:00:43 2026 GMT
            Not After : Aug 15 05:00:43 2026 GMT
        Subject: CN=88b9a174b028ed35f7c9b08929616227340c3693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:2d:9d:26:f8:99:ad:73:4e:13:33:7c:04:
                    be:ef:56:a3:eb:7f:81:c7:c1:e8:d5:b9:d1:e4:ae:
                    98:29:00:4c:b0:b9:73:58:9b:24:9d:7b:c5:56:ea:
                    63:2d:93:a7:84:cf:07:1d:fa:ff:e5:29:f5:61:01:
                    49:09:48:0d:eb:1a:b2:82:3f:95:a5:23:53:fb:e6:
                    92:12:20:cb:76:65:83:bc:fa:43:eb:74:28:e8:42:
                    f4:d6:87:97:f5:90:15:36:03:cb:30:81:38:fa:c2:
                    7d:91:33:af:c3:d0:af:be:39:f6:4d:e2:b3:d7:9c:
                    7c:ca:8b:b8:d8:d3:3e:9a:bc:6e:29:c2:03:f2:8b:
                    e2:5b:11:41:00:bd:64:f6:ac:73:e4:4e:1b:4d:77:
                    76:6a:7e:b3:32:ec:09:87:c4:57:44:34:37:bb:bf:
                    87:c4:50:61:20:5e:e5:41:c4:69:9c:96:54:0b:23:
                    07:25:1b:2b:a1:1d:d0:18:29:6e:50:90:27:6f:bf:
                    c0:ea:a5:dd:65:53:cb:a7:24:e4:47:9e:2f:8e:15:
                    4b:c0:47:6a:35:ea:c7:47:58:88:7d:95:e7:22:fa:
                    b8:de:43:97:1d:6c:c9:f2:f8:df:25:4c:0e:23:c7:
                    d3:a1:c8:70:b8:e9:75:1e:4a:54:27:b8:33:31:0c:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B9:A1:74:B0:28:ED:35:F7:C9:B0:89:29:61:62:27:34:0C:36:93
            X509v3 Authority Key Identifier:
                keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:27:9d:c1:5d:d1:7f:a1:75:f5:23:e5:9a:25:34:2e:c1:e9:
         de:7e:26:55:e4:41:8b:ec:38:c2:2c:47:4f:25:df:61:8d:52:
         56:c4:c3:bd:2b:47:a0:8a:e6:ea:c7:be:b4:6e:3e:8b:a3:66:
         46:1c:82:80:20:94:df:78:7e:19:0a:4e:c2:a6:f4:66:fa:3d:
         24:f8:9a:66:6a:8a:8d:26:d8:0c:92:55:06:7a:4c:bb:3e:5d:
         2d:ad:5c:91:66:3c:81:96:04:6f:cb:d0:84:4c:0d:54:b0:3b:
         d3:38:2f:4a:f1:46:14:96:f9:15:e6:4d:9e:67:bc:67:43:db:
         63:bf:ef:24:1c:91:14:47:ce:23:fc:a3:4f:bf:ab:f0:61:4d:
         41:9a:c9:af:3a:26:8f:dd:b3:32:0f:51:ab:58:dd:f8:7a:1e:
         ae:98:5b:7b:9d:e7:f7:02:b7:06:3f:d1:ba:4e:51:18:59:3d:
         89:a3:f4:94:04:f4:87:07:1f:68:bd:82:f6:dc:f7:5e:cf:a0:
         56:bd:2d:45:51:1c:4d:70:fc:27:ca:8f:96:4b:1a:57:92:19:
         07:6f:70:06:d1:a0:1c:57:ee:53:4f:76:2d:6e:b9:47:b6:b2:
         43:dc:d8:11:64:30:62:5f:e7:d2:ea:ee:5d:1a:ab:ba:35:a3:
         3a:d7:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:48:29 2026 by rpki-client