Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File:                     wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier:          o+h6DMgpWDgFISeNW8PwFC7sKiR6pTCBcHSG9/xDUdA=
Subject key identifier:   DF:48:93:CA:25:FE:C8:DF:FC:0E:D4:1C:C1:40:EF:B4:9C:AD:A6:88
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer:       /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial:       019F48E6C7D22113794FDED69EEDED268E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number:          02AD
Signing time:             Thu 09 Jul 2026 22:01:51 +0000
Manifest this update:     Thu 09 Jul 2026 22:01:51 +0000
Manifest next update:     Fri 10 Jul 2026 22:01:51 +0000
Files and hashes:         1: 9NpMCQPTdYLM6RigPHbxPRz98fA.roa (hash: ioCoSDv35er7fovn3uLODbMUmoh4IJiyFfj+GFkzs9c=)
                          2: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
                          3: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
                          4: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: SZp91I5NPDCCegRWTZ2N4sfLSJpYAwcJqrmDPbJS+wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:48:e6:c7:d2:21:13:79:4f:de:d6:9e:ed:ed:26:8e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
        Validity
            Not Before: Jul  9 22:01:51 2026 GMT
            Not After : Jul 10 22:01:51 2026 GMT
        Subject: CN=df4893ca25fec8dffc0ed41cc140efb49cada688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:35:bc:39:66:4a:03:83:33:a4:9d:e2:f9:
                    e8:c6:aa:b1:7c:11:fd:3b:70:90:07:05:98:a8:9c:
                    2e:b1:0b:af:5a:80:a1:8b:ea:0e:25:ab:4b:ea:0f:
                    03:43:f5:7d:81:1c:79:35:b9:62:32:cf:3e:48:87:
                    88:88:9f:9f:7e:53:8a:4e:84:6c:1e:81:89:08:1b:
                    5f:31:38:4d:f8:3d:f8:60:33:05:2e:43:f3:ed:21:
                    d3:4b:1e:f4:11:93:f0:46:8c:6a:9c:42:bc:26:2c:
                    6e:ec:47:a2:c4:46:b4:cb:d5:2d:01:3f:bc:f0:76:
                    48:a7:8d:43:a9:dd:c7:16:6a:81:b8:06:a7:ed:6f:
                    e1:5a:4a:3b:30:f5:46:c6:a6:b0:de:19:ad:28:f3:
                    2d:f7:bb:85:5e:a1:68:89:59:82:95:f4:51:ea:78:
                    f1:fd:95:eb:66:d3:a2:8b:d3:d1:6f:ce:32:57:4b:
                    ea:8d:70:f0:72:15:07:ad:06:8c:d4:4d:67:da:4d:
                    d8:1c:88:45:9c:6b:4e:4d:be:28:86:b0:97:81:bf:
                    0d:73:86:58:5e:ee:2a:1a:76:ee:79:ae:c1:ee:52:
                    6f:33:15:a3:42:bc:db:e3:50:58:17:fe:ce:87:a6:
                    71:db:6f:cd:64:d1:b9:5c:4e:21:c6:f6:d7:1c:44:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:93:CA:25:FE:C8:DF:FC:0E:D4:1C:C1:40:EF:B4:9C:AD:A6:88
            X509v3 Authority Key Identifier:
                keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:af:ae:f4:b8:4a:6b:86:75:7c:72:38:eb:7c:cf:63:18:b3:
         4f:a5:45:23:b5:88:a2:91:8a:3b:6f:11:6f:ed:06:01:00:95:
         f6:38:93:10:06:51:4b:21:07:36:58:28:10:5e:10:4d:c2:65:
         ef:13:a7:09:de:99:2b:38:6a:08:20:66:96:56:80:20:fc:a1:
         5c:5d:64:23:cf:9f:43:ff:06:f4:b4:0c:0c:27:45:82:99:a4:
         6e:54:d8:74:1b:29:a3:46:90:02:7e:7e:d4:38:5d:fd:77:ab:
         ad:c2:83:3b:84:9b:32:0e:9f:c4:b8:6b:95:ba:dd:26:ff:41:
         f2:0c:40:e2:ef:1a:70:a5:32:97:31:b5:14:b2:8d:9f:66:4d:
         00:c7:03:d2:2d:30:bf:a5:30:15:a8:ca:0d:50:40:6d:c8:7b:
         0b:43:25:41:5d:80:a3:c0:46:d7:f2:cd:0e:09:9d:88:14:6c:
         7f:69:bb:69:7c:94:b6:55:69:15:c0:b6:f9:5e:c9:15:dc:97:
         df:d9:a7:b0:20:15:49:43:26:cb:5a:19:58:04:da:ec:5a:db:
         66:0f:fb:4e:ac:3f:8f:bd:dd:29:45:f2:83:93:cd:3a:96:fb:
         c2:d8:51:89:1f:0d:93:fc:07:dc:50:a7:cf:c7:87:ff:ed:19:
         56:39:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 05:38:46 2026 by rpki-client