Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          LQib9nkXsSCZwP3K+69zw1GdchmGO8kBXSEk5ggoTeE=
Subject key identifier:   F1:6A:06:98:E9:75:AF:A5:3F:06:D3:12:66:82:53:80:F1:A4:73:FF
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       019F87577D473792B64AC732F1B816BD4228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          19C5
Signing time:             Wed 22 Jul 2026 01:01:25 +0000
Manifest this update:     Wed 22 Jul 2026 01:01:25 +0000
Manifest next update:     Thu 23 Jul 2026 01:01:25 +0000
Files and hashes:         1: XhVmXM4K4HCBlMG1ngBraE1XDdo.roa (hash: Lr9nUJJLPlvbbArNTq9/86G0Uy2dThr703k1XnKZ2HU=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: xISfyxzO7A4QMFd4BunMx31/GlDZWkMp1WOXml7KNoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:87:57:7d:47:37:92:b6:4a:c7:32:f1:b8:16:bd:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Jul 22 01:01:25 2026 GMT
            Not After : Jul 23 01:01:25 2026 GMT
        Subject: CN=f16a0698e975afa53f06d31266825380f1a473ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:a8:46:d1:0a:24:d3:4c:70:c7:bc:7b:7a:
                    5d:62:69:37:4b:19:20:09:11:df:cd:24:7f:ad:13:
                    03:e5:bd:aa:03:79:36:b5:9d:f0:c2:f4:de:f7:5e:
                    1c:fe:88:ea:84:a2:61:f5:1c:f8:a7:8d:fe:01:3e:
                    ba:ea:2b:76:04:f0:56:d2:d8:08:96:0b:3f:e5:c3:
                    0d:8b:76:fb:c8:93:2a:29:63:88:1f:54:ec:ed:9f:
                    a9:70:d5:f4:19:3d:d6:ea:10:67:21:9f:61:de:63:
                    50:d1:1a:25:18:09:17:64:f7:11:c4:1d:c2:32:a5:
                    d8:af:60:16:2e:a0:59:3d:51:cc:34:b4:fb:bc:56:
                    c6:58:29:24:46:ad:bb:6e:80:5c:41:99:5f:2a:85:
                    e9:56:8f:f3:e4:d7:15:82:5b:45:1f:c1:ee:a3:69:
                    94:70:9b:dd:82:42:20:fb:8e:2f:a9:af:79:ff:20:
                    31:08:a3:6f:61:ee:3d:d8:ac:f1:f0:f9:6b:dd:d2:
                    25:75:04:d5:a7:d2:cc:a2:9b:31:3e:14:52:37:88:
                    a7:81:a0:9e:d3:3a:a4:e6:b9:29:59:60:6f:00:ba:
                    40:bd:49:8f:4c:e2:10:5d:9e:55:73:b0:2b:ac:7b:
                    91:8e:6d:d4:e5:47:7b:1b:96:f0:ef:b0:84:9d:bb:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:06:98:E9:75:AF:A5:3F:06:D3:12:66:82:53:80:F1:A4:73:FF
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:f3:54:97:e3:12:60:e2:6e:4c:78:a7:0e:33:35:e0:43:
         a1:9a:62:98:a0:4c:73:84:ca:3d:7a:d5:3c:2d:31:de:d1:1f:
         cf:22:5e:9f:24:b6:61:8b:19:34:7c:5c:50:b7:c2:c4:fa:08:
         de:ba:66:65:18:cb:57:94:21:0e:19:1f:dd:e4:30:a4:83:b3:
         39:43:83:d1:45:0a:b7:72:69:7f:04:f2:76:9e:22:1e:30:22:
         92:4d:76:14:95:b6:5f:9b:c6:c1:07:3a:3f:b9:77:69:c3:3d:
         7d:f4:d4:50:db:b2:2a:34:5e:bf:1c:47:7c:bf:2f:33:cd:69:
         3c:0a:8e:bb:a2:19:0a:ff:65:d7:d3:c9:e8:70:e2:3a:95:db:
         e3:77:94:6e:b7:a0:c2:85:5f:82:ed:57:8f:1d:c2:04:80:54:
         91:dd:59:23:29:ef:f2:74:fe:06:14:b1:60:47:ff:52:9c:d7:
         ed:eb:fe:36:77:4e:2b:18:19:cc:e4:b8:35:63:2b:f6:6f:b9:
         10:4d:fa:2e:62:07:c7:77:a0:79:3b:b1:5d:27:0d:d0:23:15:
         f5:60:3e:de:b4:ce:6d:36:b9:e5:40:43:01:83:68:f5:66:78:
         81:87:96:f5:08:91:75:b6:8f:a6:26:09:3d:a7:89:a1:db:bc:
         55:f7:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:46:10 2026 by rpki-client