Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          Yw0IzYU6SWSTCniZB4CxOqRQI3Tju9OKFLe84GjsfCI=
Subject key identifier:   C3:60:92:B6:50:44:25:1A:40:72:8D:8A:6F:61:F7:AC:94:73:2D:23
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       01A002F062AFEA643F60D78F2D15D78DC0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0B49
Signing time:             Sat 15 Aug 2026 01:01:43 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:43 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:43 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: S0Z-QG3S6OWhct2R_ZOJmi2BN2s.roa (hash: DcFFFIgBF5pA0VbXRYkO/MxP7tMxGBn3QzgWRQGPawY=)
                          6: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: 0kAK+YN+eHwNt5aZfDX4kc4hm/Van22SYNnX+o2cFJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:62:af:ea:64:3f:60:d7:8f:2d:15:d7:8d:c0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Aug 15 01:01:43 2026 GMT
            Not After : Aug 16 01:01:43 2026 GMT
        Subject: CN=c36092b65044251a40728d8a6f61f7ac94732d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:98:d5:bb:1b:04:88:cc:6d:a8:b0:c0:3d:
                    b0:c6:de:79:11:77:dc:b5:02:5a:68:68:07:e0:49:
                    59:fa:89:59:0e:f9:3f:07:d0:6b:f3:ed:e5:98:7e:
                    ad:f3:09:2f:53:85:7e:81:6b:e1:17:3c:eb:61:3c:
                    52:a1:fb:60:cc:81:ed:5b:70:d3:ab:78:73:57:24:
                    12:64:02:10:05:ce:67:5b:3b:23:84:7a:64:0b:52:
                    60:10:bb:ae:55:92:82:54:04:89:b8:2d:d1:a7:dd:
                    19:8f:92:7a:e2:ae:e0:75:74:35:a4:d1:14:db:d6:
                    e6:57:ca:87:c6:e2:96:85:46:ec:c6:70:55:5d:b9:
                    a9:e1:30:86:e6:c6:47:76:a6:8b:0f:dd:eb:3b:4b:
                    89:22:90:75:46:e4:7f:06:6a:0b:ca:59:87:e1:71:
                    27:54:59:3d:76:08:24:4d:6a:d6:57:5f:53:aa:aa:
                    50:3c:38:38:d7:90:84:be:4a:20:07:72:da:1e:fd:
                    44:33:a7:79:3c:d4:4e:9f:69:d2:97:c1:22:d8:b3:
                    60:4d:bf:8e:da:86:c0:05:24:d3:33:83:9d:a5:6d:
                    94:a1:54:7a:5a:20:a1:d5:81:35:5d:ee:71:03:54:
                    19:e1:0f:f5:0e:db:ca:3e:a4:c9:ad:eb:db:22:06:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:92:B6:50:44:25:1A:40:72:8D:8A:6F:61:F7:AC:94:73:2D:23
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:81:01:bb:bc:c8:5d:33:27:4b:da:0a:e2:7b:74:8a:8f:
         b9:ea:d7:a2:0f:9f:d4:5d:46:0b:c4:9a:dd:dd:eb:3e:05:ef:
         a1:2c:85:46:07:f0:06:08:b3:e7:8d:44:09:99:df:94:12:e3:
         87:04:13:43:6d:09:07:a4:ab:4d:29:58:8b:2f:ac:08:5c:43:
         ff:a6:f4:a5:69:c0:5a:ba:5f:df:72:61:3c:4e:fb:94:80:d9:
         69:8a:b1:d2:50:90:c4:73:f4:58:2e:49:26:58:25:d7:16:7c:
         21:94:60:ce:d9:26:e8:2a:7c:70:13:f7:59:b4:df:5b:2d:b2:
         50:f5:d5:94:6a:f4:3b:ea:c8:3f:ca:4e:84:a8:97:ce:6c:4c:
         93:30:63:b0:9d:89:b9:51:93:d3:ed:7d:37:cd:0d:fe:4c:b1:
         19:91:d3:ae:d3:0c:b5:22:51:d2:9f:a0:3b:ff:88:8f:3d:f6:
         27:a4:a0:a2:0f:b1:fd:5f:3b:e9:61:b4:f7:f0:63:d7:6a:65:
         4a:9a:ff:19:e5:4d:f7:38:92:13:08:80:39:dc:c6:6d:63:6d:
         0b:52:6c:5b:52:4c:6b:cb:7f:a8:8f:6e:ad:96:ad:34:41:82:
         09:6a:75:12:c4:b7:60:48:8f:d1:4d:c2:d3:cb:44:c3:71:5a:
         bc:81:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:10:19 2026 by rpki-client