Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          DK49p/zuTJl6BI8zmu7/DTrgBCLEh8chNmhs28Oza80=
Subject key identifier:   D0:F8:F5:AC:0A:28:77:2A:95:E7:EE:90:75:10:FA:03:B0:DB:D9:D0
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       019FA14E0BE07DA9C7AF73256CD98A29E924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          10B1
Signing time:             Mon 27 Jul 2026 02:01:14 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:14 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:14 +0000
Files and hashes:         1: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (hash: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: N0eBIYwUGqKIJDYEZGRDqq79DjI9/MAlSOBzkZLYQSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:0b:e0:7d:a9:c7:af:73:25:6c:d9:8a:29:e9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: Jul 27 02:01:14 2026 GMT
            Not After : Jul 28 02:01:14 2026 GMT
        Subject: CN=d0f8f5ac0a28772a95e7ee907510fa03b0dbd9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:18:9c:99:21:4e:14:de:ff:64:3d:13:6d:
                    fa:4c:47:28:7b:e5:67:0a:bc:07:73:2f:d0:50:ac:
                    a5:a7:86:c5:d8:50:0e:6e:87:a2:a6:c9:fa:4c:67:
                    5f:d6:ad:93:66:3f:b9:ad:6c:09:83:df:a9:e0:dd:
                    ea:05:5b:04:02:b5:76:cf:bc:27:e1:e3:40:6d:3f:
                    68:ac:f8:40:c4:67:ac:84:8d:ec:d1:88:ef:44:04:
                    df:34:2a:47:3a:be:de:b6:a0:d3:2d:f0:93:d2:45:
                    9d:d0:49:40:59:c1:94:20:87:f0:ff:c3:39:b3:43:
                    c6:bb:91:44:88:44:2e:9b:01:5f:04:37:1e:c3:a4:
                    da:9b:e7:18:04:cc:ee:fe:42:c3:7a:f0:4f:34:cd:
                    77:09:46:71:f8:fc:c1:91:56:ba:63:f7:7a:f3:71:
                    5c:d8:6b:7c:4a:b5:bf:54:f6:02:97:c1:5c:7f:e1:
                    3c:e2:df:5b:1f:9d:23:3f:29:13:ab:04:a7:b8:e1:
                    98:f8:58:d1:9d:78:97:38:40:c9:e7:33:13:cd:97:
                    5d:6d:3b:6c:01:42:38:bb:5e:0b:7c:01:c0:dc:6e:
                    ae:ad:a1:53:bf:77:dd:5c:43:26:f5:85:2d:6b:54:
                    12:6e:9b:3a:fb:b3:e4:39:cf:1f:0a:69:de:6f:b9:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:F5:AC:0A:28:77:2A:95:E7:EE:90:75:10:FA:03:B0:DB:D9:D0
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:a1:1a:fe:65:06:08:3a:a4:83:97:3d:95:26:40:4c:52:
         7b:82:86:b7:8b:e0:d9:bd:e0:5e:ad:70:4d:46:68:ad:ba:e1:
         9b:c5:c6:da:6c:36:c4:70:78:d0:1b:c0:c8:8f:65:2c:df:74:
         35:0e:8d:cf:cc:48:c0:ac:16:72:c3:d1:b5:e0:30:96:a7:18:
         f8:23:9b:ca:d1:39:fe:02:d5:5b:27:73:15:2a:43:fb:03:ef:
         b0:da:fd:b5:eb:fd:ee:ad:37:4e:d9:24:97:24:88:b8:43:03:
         61:85:27:41:9f:b8:c4:98:48:4a:77:cc:dd:b5:07:bc:87:88:
         b9:18:ac:72:bc:d9:0a:ca:78:9f:8e:56:36:19:45:a7:0b:3f:
         34:7f:4f:1c:d2:3b:0f:67:11:a5:fe:6e:71:3b:97:9e:71:79:
         3a:f5:bd:ab:e5:25:1e:bb:16:11:d0:74:3d:8b:3b:9f:ae:b7:
         5f:01:3b:e7:8b:d5:a5:fd:ef:76:54:8c:64:31:67:6f:ba:23:
         9b:08:d5:cf:76:a6:7d:da:9c:ea:a4:c6:a4:08:26:3a:6b:1a:
         10:6d:15:ff:a2:40:99:d6:ef:82:3c:5b:ff:e6:ea:b9:3b:66:
         9f:d0:ea:82:13:40:43:43:8c:db:2c:5b:86:88:84:78:b4:7e:
         1d:2d:bc:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTgvgfanHr3MlbNmKKekkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4
M2E3YjMwHhcNMjYwNzI3MDIwMTE0WhcNMjYwNzI4MDIwMTE0WjAzMTEwLwYDVQQD
EyhkMGY4ZjVhYzBhMjg3NzJhOTVlN2VlOTA3NTEwZmEwM2IwZGJkOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtywYnJkhThTe/2Q9E236TEcoe+Vn
CrwHcy/QUKylp4bF2FAOboeipsn6TGdf1q2TZj+5rWwJg9+p4N3qBVsEArV2z7wn
4eNAbT9orPhAxGeshI3s0YjvRATfNCpHOr7etqDTLfCT0kWd0ElAWcGUIIfw/8M5
s0PGu5FEiEQumwFfBDcew6Tam+cYBMzu/kLDevBPNM13CUZx+PzBkVa6Y/d683Fc
2Gt8SrW/VPYCl8Fcf+E84t9bH50jPykTqwSnuOGY+FjRnXiXOEDJ5zMTzZddbTts
AUI4u14LfAHA3G6uraFTv3fdXEMm9YUta1QSbps6+7PkOc8fCmneb7kGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND49awKKHcqlefukHUQ+gOw29nQMB8GA1UdIwQY
MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt
MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi
LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ92hGv5l
Bgg6pIOXPZUmQExSe4KGt4vg2b3gXq1wTUZorbrhm8XG2mw2xHB40BvAyI9lLN90
NQ6Nz8xIwKwWcsPRteAwlqcY+CObytE5/gLVWydzFSpD+wPvsNr9tev97q03Ttkk
lySIuEMDYYUnQZ+4xJhISnfM3bUHvIeIuRiscrzZCsp4n45WNhlFpws/NH9PHNI7
D2cRpf5ucTuXnnF5OvW9q+UlHrsWEdB0PYs7n663XwE754vVpf3vdlSMZDFnb7oj
mwjVz3amfdqc6qTGpAgmOmsaEG0V/6JAmdbvgjxb/+bquTtmn9DqghNAQ0OM2yxb
hoiEeLR+HS28wQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:46 2026 by rpki-client