Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          QgGg9m2dIKHjeevhwZH2XGIJ1gDG1C841r4zkMbF52U=
Subject key identifier:   6E:68:EA:1B:06:1D:54:95:2D:59:58:A6:02:67:0E:50:89:B8:8D:A0
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       019F8BA2B6346FFEA26574ADA8488D3F0702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          0686
Signing time:             Wed 22 Jul 2026 21:02:04 +0000
Manifest this update:     Wed 22 Jul 2026 21:02:04 +0000
Manifest next update:     Thu 23 Jul 2026 21:02:04 +0000
Files and hashes:         1: B-ORof5U5KffpAVQvuFpkPz0N4c.roa (hash: 7Bdce+7dVfpsrP9CGNTqOXrt+QvlnjsVsauoFzbSuFo=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: qta74YdCTkmDekXotnUbzg8FCMm3fegH3rGb2ntAVik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8b:a2:b6:34:6f:fe:a2:65:74:ad:a8:48:8d:3f:07:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Jul 22 21:02:04 2026 GMT
            Not After : Jul 23 21:02:04 2026 GMT
        Subject: CN=6e68ea1b061d54952d5958a602670e5089b88da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:0b:03:7f:fb:43:e5:cf:18:c7:bb:ea:c8:
                    4e:a3:fc:d6:c3:0c:1d:a3:c9:d2:6f:19:51:89:b1:
                    01:b0:8a:27:a2:68:08:31:23:55:b1:fd:f5:6b:55:
                    d0:b4:af:bf:0c:95:17:40:b1:57:e6:65:80:68:8f:
                    b5:23:19:c5:4d:40:8a:58:94:aa:76:c6:71:b1:92:
                    e3:ca:5f:63:05:9d:36:58:37:24:00:0f:c3:b0:5a:
                    4d:32:e0:00:49:9f:11:69:f5:39:08:9a:17:5e:58:
                    7c:c3:b7:04:2d:24:b3:48:e5:3b:d4:2e:f6:60:a0:
                    ea:bf:dc:ef:44:fd:65:68:2b:0a:28:62:1c:54:4b:
                    fe:b0:5d:0d:6e:3b:6d:cf:81:66:bf:71:cb:db:f5:
                    b5:ca:34:07:d3:12:94:7e:ae:0f:ae:c6:b6:bc:15:
                    3c:33:bf:69:55:c4:67:3b:b7:39:f4:ad:a8:12:62:
                    5e:79:e4:b2:69:28:b7:5e:8c:37:2f:dc:70:8c:9f:
                    98:9a:9d:09:45:ec:a7:8d:43:f1:66:8c:01:05:52:
                    23:61:9b:4b:c2:ea:a3:83:ae:93:98:6c:50:85:05:
                    66:47:3c:c7:af:be:3d:05:4c:17:0c:a4:48:d2:39:
                    18:36:c1:65:86:88:65:4b:d3:c9:be:1f:65:dd:d9:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:EA:1B:06:1D:54:95:2D:59:58:A6:02:67:0E:50:89:B8:8D:A0
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a0:66:c6:e0:11:f4:5f:c7:f7:e3:06:d4:ad:7d:8d:34:ba:
         63:aa:8b:a0:e2:4a:6c:42:f8:07:20:fd:12:ca:91:39:78:e5:
         e8:5f:5c:c7:23:fa:fb:93:70:1f:39:46:2e:fe:43:06:cb:bb:
         10:f0:85:1c:08:fb:4c:0a:88:8e:d8:db:33:6e:71:8a:4e:95:
         36:a2:06:99:64:74:d6:11:2a:55:92:1e:e8:40:69:fb:c4:8e:
         8a:04:66:df:6e:04:5a:42:ab:e5:80:9a:94:35:eb:64:50:a6:
         44:eb:e3:45:44:29:9f:f7:ea:2c:e4:8a:61:14:58:b2:a5:07:
         10:32:6f:dc:dc:37:06:2e:9e:2e:28:83:af:f0:2e:2e:9b:eb:
         56:de:ab:79:4b:29:b7:f4:92:0a:0d:2c:9b:78:91:75:44:24:
         6e:db:69:2a:6f:99:fd:e7:3e:01:7b:04:e7:e8:07:ca:22:57:
         1f:17:f4:e8:f2:83:b5:07:96:a6:6a:c7:1b:bb:8d:f3:27:c6:
         b6:b6:ba:b0:09:02:3b:04:82:9d:61:ee:83:ba:d1:43:ec:ee:
         8b:58:8f:92:36:54:24:d3:68:50:ec:9c:07:35:64:d7:c8:d2:
         ef:80:79:40:d1:bb:8c:88:27:c5:32:b0:b5:bd:1e:7d:92:86:
         33:ef:c3:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+LorY0b/6iZXStqEiNPwcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTU3NGNiOWUwZTM1YmY5NzU0ZWY5MTc1MDE0YmM3NDYw
MDhmMGUwHhcNMjYwNzIyMjEwMjA0WhcNMjYwNzIzMjEwMjA0WjAzMTEwLwYDVQQD
Eyg2ZTY4ZWExYjA2MWQ1NDk1MmQ1OTU4YTYwMjY3MGU1MDg5Yjg4ZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2MLA3/7Q+XPGMe76shOo/zWwwwd
o8nSbxlRibEBsIonomgIMSNVsf31a1XQtK+/DJUXQLFX5mWAaI+1IxnFTUCKWJSq
dsZxsZLjyl9jBZ02WDckAA/DsFpNMuAASZ8RafU5CJoXXlh8w7cELSSzSOU71C72
YKDqv9zvRP1laCsKKGIcVEv+sF0Nbjttz4Fmv3HL2/W1yjQH0xKUfq4Prsa2vBU8
M79pVcRnO7c59K2oEmJeeeSyaSi3Xow3L9xwjJ+Ymp0JReynjUPxZowBBVIjYZtL
wuqjg66TmGxQhQVmRzzHr749BUwXDKRI0jkYNsFlhohlS9PJvh9l3dkl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5o6hsGHVSVLVlYpgJnDlCJuI2gMB8GA1UdIwQY
MBaAFMAVdMueDjW/l1TvkXUBS8dGAI8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMt
OGZlZTdlYzdjM2NkLzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMtOGZlZTdlYzdjM2Nk
LzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0qBmxuAR
9F/H9+MG1K19jTS6Y6qLoOJKbEL4ByD9EsqROXjl6F9cxyP6+5NwHzlGLv5DBsu7
EPCFHAj7TAqIjtjbM25xik6VNqIGmWR01hEqVZIe6EBp+8SOigRm324EWkKr5YCa
lDXrZFCmROvjRUQpn/fqLOSKYRRYsqUHEDJv3Nw3Bi6eLiiDr/AuLpvrVt6reUsp
t/SSCg0sm3iRdUQkbttpKm+Z/ec+AXsE5+gHyiJXHxf06PKDtQeWpmrHG7uN8yfG
tra6sAkCOwSCnWHug7rRQ+zui1iPkjZUJNNoUOycBzVk18jS74B5QNG7jIgnxTKw
tb0efZKGM+/D5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 22 22:39:00 2026 by rpki-client