Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File:                     wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier:          FriYDhixpJWGKoGfxgpTVfPJHl8U3xafJt3/YEjy4os=
Subject key identifier:   56:D9:D5:72:B4:9A:F9:93:1E:3A:88:74:3E:55:04:EF:FA:00:87:76
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer:       /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial:       019FA14D66AEA14CB41DAAB98B8139B33CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number:          0E2E
Signing time:             Mon 27 Jul 2026 02:00:32 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:32 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:32 +0000
Files and hashes:         1: _7mKcHkP3uOTS3kjipFm2tPGwgM.roa (hash: ngQx3yfqLseWqUcTbW2AyI+1iXtC1eJXGPQDz+lGjDw=)
                          2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: V7la/3rbyn0BEk8DqChChBWisInLnJTo10TJHP8EUMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:66:ae:a1:4c:b4:1d:aa:b9:8b:81:39:b3:3c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
        Validity
            Not Before: Jul 27 02:00:32 2026 GMT
            Not After : Jul 28 02:00:32 2026 GMT
        Subject: CN=56d9d572b49af9931e3a88743e5504effa008776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:3e:40:7c:21:dd:ba:ce:4e:4d:50:ac:15:
                    e3:e6:9a:3f:49:8d:f4:5b:26:22:1f:bd:05:32:9a:
                    4d:66:2d:f9:ab:37:d9:71:ac:a6:65:25:c5:c5:df:
                    cc:17:51:10:e9:8a:03:53:61:57:18:c6:2d:ad:0b:
                    41:cf:ec:e1:1c:70:1e:40:01:99:05:e6:69:17:73:
                    8c:39:8f:92:b7:28:07:68:08:99:af:a6:0b:dc:8f:
                    80:73:bd:ee:5b:5f:fc:fa:a4:f6:48:cb:81:d0:fb:
                    95:67:ba:88:5f:2e:f9:8b:d9:2d:28:69:25:6b:b9:
                    55:f0:2d:3b:94:80:86:ad:b2:d1:ad:09:2c:64:06:
                    f8:83:9f:cc:30:c1:3b:b3:da:da:39:83:58:26:67:
                    0c:2e:1e:81:fd:2b:10:55:df:5d:36:bc:1b:91:5e:
                    75:ba:71:30:4f:91:cd:08:6c:33:8b:f3:cc:c8:e0:
                    5c:37:82:64:a4:e4:e3:42:bc:aa:3b:cc:62:9c:77:
                    3b:be:4e:d9:4a:63:65:58:63:a0:01:3f:cc:41:37:
                    b2:c2:cb:8e:21:53:1b:06:8b:74:7a:d0:c8:0a:0e:
                    25:d3:c2:52:b9:c4:c6:08:18:7c:80:07:22:40:43:
                    15:26:12:e2:75:d7:5c:28:a7:90:b2:6e:7d:e5:a9:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D9:D5:72:B4:9A:F9:93:1E:3A:88:74:3E:55:04:EF:FA:00:87:76
            X509v3 Authority Key Identifier:
                keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:11:1d:52:59:fc:f9:6b:02:79:a7:85:42:77:eb:e5:da:
         2c:49:13:12:53:34:7a:76:f2:78:52:8f:77:37:cb:d8:be:ee:
         d1:d2:98:bc:45:5e:45:90:a8:7c:bf:13:91:9c:10:65:15:0f:
         8c:97:b4:d5:5f:32:98:61:fe:6a:29:82:7e:91:49:f7:88:c7:
         d5:36:53:40:2d:b7:47:c2:d7:6c:0f:ce:35:09:c3:ff:49:93:
         0e:18:70:0b:c0:f9:db:c3:5b:9a:8f:92:0e:ce:61:1a:3a:6d:
         47:f5:bb:d4:58:54:28:7d:dc:b9:e9:bf:2d:f4:bc:ab:4f:e2:
         ec:e2:7c:83:3c:99:62:0a:25:91:84:b8:5d:4e:48:63:71:d5:
         43:3d:6e:38:2f:1f:78:45:fd:f2:87:7d:b2:80:fe:98:0e:cb:
         31:2f:d3:de:f3:fe:95:7d:67:4e:01:22:65:35:b7:41:ab:b6:
         e9:d8:b1:ec:0e:56:c0:77:fe:ad:e5:f5:e8:cf:4d:fc:f5:36:
         5a:7b:3e:0b:0c:53:16:bb:16:e5:61:2b:f5:b2:74:24:55:51:
         bd:fe:ec:f0:de:16:1e:dc:a6:d4:89:83:5f:e5:19:e7:db:5b:
         e8:10:d0:53:9d:80:c9:7f:14:1e:0f:a1:45:96:ab:43:84:76:
         6f:50:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:36:59 2026 by rpki-client