Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          5cI24nRDdPSGVgKr9nemcCc+QYG0SzUPf/rKUquF5wY=
Subject key identifier:   06:5A:13:FE:78:0E:9A:BD:10:81:DC:8A:39:AB:17:4D:AF:21:2D:DB
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019FFBA4382D0D14E53A54BB4FF33C678896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          1A01
Signing time:             Thu 13 Aug 2026 15:01:11 +0000
Manifest this update:     Thu 13 Aug 2026 15:01:11 +0000
Manifest next update:     Fri 14 Aug 2026 15:01:11 +0000
Files and hashes:         1: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (hash: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY=)
                          2: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (hash: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=)
                          3: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (hash: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: 8biuB6sc9fpR7LOd6yR3LTnS3QQ5Scqo4CvZPmsQRTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:a4:38:2d:0d:14:e5:3a:54:bb:4f:f3:3c:67:88:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Aug 13 15:01:11 2026 GMT
            Not After : Aug 14 15:01:11 2026 GMT
        Subject: CN=065a13fe780e9abd1081dc8a39ab174daf212ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:8b:dc:14:49:49:12:b7:21:38:7e:e5:4a:
                    08:a6:4b:74:c5:3c:95:da:22:b6:3a:eb:10:76:3a:
                    8d:bf:71:34:f0:8a:e0:7a:35:ed:8d:0a:87:80:6f:
                    10:0b:60:88:1d:77:ea:b7:6e:83:f7:62:ae:13:10:
                    d8:79:9f:fd:1e:d2:12:6f:c9:e4:74:09:10:ba:bd:
                    db:6d:7d:26:40:50:d0:b9:76:21:e1:67:f7:d2:a9:
                    07:7a:e0:36:51:c5:fc:32:f5:82:47:dc:c4:66:dd:
                    3c:72:bc:5b:7e:c0:da:c5:28:b5:df:60:f5:88:92:
                    34:a7:2f:b5:c6:8f:e9:50:02:76:ba:c5:26:ee:c9:
                    df:37:5b:35:56:d8:4b:b6:1c:e8:34:dd:40:94:65:
                    23:c8:3a:5f:13:58:02:a3:d7:f5:af:92:f0:b2:91:
                    cd:ba:f8:82:f8:47:91:4f:38:2a:95:10:11:c0:ea:
                    33:fa:f8:9a:c1:78:a8:1b:35:fc:82:21:59:24:83:
                    b6:ec:7c:ec:1b:fb:37:b2:72:83:0f:5a:63:63:bf:
                    47:68:7e:fd:e2:6e:54:3f:47:a2:da:1d:d8:b0:44:
                    2a:ef:a0:80:1f:3f:27:5d:ad:40:aa:64:65:29:96:
                    b8:98:8a:5a:58:78:57:69:06:2b:ae:47:9f:81:16:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:13:FE:78:0E:9A:BD:10:81:DC:8A:39:AB:17:4D:AF:21:2D:DB
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:33:99:9e:e2:4f:6f:8c:c0:79:19:b7:da:c6:11:3d:40:07:
         99:9d:54:b1:a5:f4:0b:99:9d:9d:e3:67:81:f1:d6:4d:41:58:
         2b:97:aa:44:3d:bc:7b:17:6a:4a:3a:13:25:a7:1d:6c:05:18:
         54:a9:23:bc:3a:0a:f4:31:74:07:be:b8:af:8d:d9:40:73:1f:
         81:69:3f:19:55:8e:c0:df:06:57:b8:0f:35:f9:2e:a9:87:02:
         ec:d4:3e:01:94:db:14:a9:61:a9:70:a8:13:f2:de:af:e9:6e:
         a1:8d:cf:fa:9e:b6:b0:d7:79:8d:ec:34:34:58:80:bf:b5:37:
         a6:61:47:01:64:3a:2c:80:4e:76:71:f9:0c:83:20:77:2a:1a:
         84:cf:ad:ec:31:1a:0d:df:1a:6f:c0:d5:32:d4:b4:c6:02:65:
         5f:9d:2d:0c:7b:f8:ec:ff:7a:32:05:31:5b:ac:b2:e9:1a:a7:
         b9:6d:ee:87:16:6e:06:ff:33:44:13:b4:52:94:f9:40:f9:ba:
         d4:ae:10:dc:33:e1:36:49:8d:da:3d:03:e5:dd:56:2e:8e:75:
         27:e6:16:a8:9a:e6:b9:80:c7:09:37:9c:48:f0:91:cc:cd:59:
         67:b3:55:7e:0e:93:ab:53:20:4a:15:e6:0a:06:83:21:34:79:
         8e:8e:11:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/7pDgtDRTlOlS7T/M8Z4iWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYWZjMTRkY2U0NTBiMDVlYzg2YzdjNTMwNzBjZDZiYjZk
YmM3ZWUwHhcNMjYwODEzMTUwMTExWhcNMjYwODE0MTUwMTExWjAzMTEwLwYDVQQD
EygwNjVhMTNmZTc4MGU5YWJkMTA4MWRjOGEzOWFiMTc0ZGFmMjEyZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJaL3BRJSRK3ITh+5UoIpkt0xTyV
2iK2OusQdjqNv3E08IrgejXtjQqHgG8QC2CIHXfqt26D92KuExDYeZ/9HtISb8nk
dAkQur3bbX0mQFDQuXYh4Wf30qkHeuA2UcX8MvWCR9zEZt08crxbfsDaxSi132D1
iJI0py+1xo/pUAJ2usUm7snfN1s1VthLthzoNN1AlGUjyDpfE1gCo9f1r5LwspHN
uviC+EeRTzgqlRARwOoz+viawXioGzX8giFZJIO27HzsG/s3snKDD1pjY79HaH79
4m5UP0ei2h3YsEQq76CAHz8nXa1AqmRlKZa4mIpaWHhXaQYrrkefgRbi6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZaE/54Dpq9EIHcijmrF02vIS3bMB8GA1UdIwQY
MBaAFMKvwU3ORQsF7IbHxTBwzWu228fuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYzMyODQtMzU3Ni00ZWU0LTkzYjgt
MTg0N2NiODhlODNhLzEvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYzMyODQtMzU3Ni00ZWU0LTkzYjgtMTg0N2NiODhlODNh
LzEvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATOZnuJP
b4zAeRm32sYRPUAHmZ1UsaX0C5mdneNngfHWTUFYK5eqRD28exdqSjoTJacdbAUY
VKkjvDoK9DF0B764r43ZQHMfgWk/GVWOwN8GV7gPNfkuqYcC7NQ+AZTbFKlhqXCo
E/Ler+luoY3P+p62sNd5jew0NFiAv7U3pmFHAWQ6LIBOdnH5DIMgdyoahM+t7DEa
Dd8ab8DVMtS0xgJlX50tDHv47P96MgUxW6yy6RqnuW3uhxZuBv8zRBO0UpT5QPm6
1K4Q3DPhNkmN2j0D5d1WLo51J+YWqJrmuYDHCTecSPCRzM1ZZ7NVfg6Tq1MgShXm
CgaDITR5jo4RfA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:01:42 2026 by rpki-client