Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          2QXBIAg9mnDnAv71ffuC/5t6nalpillYRmqjKce7nFM=
Subject key identifier:   1E:70:7B:73:F3:6F:9E:B0:0C:5E:F5:73:1F:EC:BF:7B:1C:C7:EC:5B
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       019F867B26DA6703020636434701255D1C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          08A1
Signing time:             Tue 21 Jul 2026 21:00:45 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:45 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:45 +0000
Files and hashes:         1: Mz8qnBphricpE-y1NgDJ85UMBGA.roa (hash: D7iDGlfFeVsE7k0g3r151vYQu3PiucDxigC9xAR74QQ=)
                          2: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: LeZ0jQi+1ilyBi2QmPs7eBwTfgEvjPag64kMWZ2VnLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:26:da:67:03:02:06:36:43:47:01:25:5d:1c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Jul 21 21:00:45 2026 GMT
            Not After : Jul 22 21:00:45 2026 GMT
        Subject: CN=1e707b73f36f9eb00c5ef5731fecbf7b1cc7ec5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:44:e7:8d:97:73:34:c0:3b:f8:99:ca:00:
                    f5:98:79:25:e4:17:58:e0:6c:1a:eb:21:ba:74:d4:
                    83:ff:e8:a5:c1:1b:1b:16:83:c8:75:8a:1e:89:ff:
                    e9:0b:22:ce:d4:8a:55:5b:16:1f:0d:b2:87:38:9c:
                    43:b9:57:01:97:60:05:94:5c:8b:0d:97:6e:73:d3:
                    cd:bb:64:8e:ad:26:ff:f1:e2:2a:28:e6:31:e9:1b:
                    04:ff:cc:ce:25:fc:88:5f:a8:8d:8d:eb:4e:34:91:
                    37:dc:72:1a:a9:d5:e9:4d:99:91:e7:6b:2c:7c:a4:
                    74:e0:29:a9:d1:cd:1b:50:80:2e:5c:02:34:be:26:
                    43:bc:7b:32:3b:e0:8b:22:64:72:29:3f:72:8c:92:
                    cf:47:41:0d:d9:dc:66:5a:e5:f7:fc:eb:8b:7c:b1:
                    c1:82:47:bc:13:45:fb:38:9a:a4:14:dc:14:c1:1b:
                    a1:a5:ac:02:1a:a2:73:8d:29:15:3b:7c:07:58:7e:
                    04:64:18:28:de:ba:9b:a6:f5:81:67:b9:6c:fe:ae:
                    03:7d:53:0f:97:7a:73:76:01:94:02:84:08:99:4e:
                    73:19:b5:a3:9a:72:f7:4b:1c:f3:2a:4f:e2:8e:10:
                    32:09:78:53:2f:25:47:bc:7d:82:cc:56:7a:8c:a7:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:7B:73:F3:6F:9E:B0:0C:5E:F5:73:1F:EC:BF:7B:1C:C7:EC:5B
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:d0:af:17:97:d6:68:9d:b3:22:58:d8:e8:a7:76:3f:46:
         b5:c7:44:ae:81:a6:61:cf:7c:02:45:12:9a:da:bc:d4:4d:3d:
         af:0e:01:2e:07:c5:73:6f:71:0c:b4:70:80:8b:7a:fa:4b:80:
         2d:91:39:da:55:79:c7:e2:14:0b:6c:4c:17:fd:06:ad:97:24:
         ff:cb:99:9f:53:db:19:bf:a4:0d:a1:2a:c7:48:3d:9b:a8:1a:
         36:4c:ce:b1:7b:d4:24:46:c0:35:f2:7e:33:44:1a:99:ce:79:
         b2:0c:ba:d5:ff:f3:3b:22:12:8c:39:4b:f4:f8:4c:49:2c:03:
         c1:5a:05:97:cb:43:b0:c5:94:54:a7:f2:26:18:43:aa:b8:ef:
         6b:c7:ea:f7:dc:96:20:9e:f7:f3:9a:ee:56:ab:69:e1:9c:78:
         53:32:4c:bf:5a:4c:60:05:be:3b:10:9f:16:67:16:04:2b:ad:
         18:0e:92:3d:87:8f:20:c0:6d:2c:ec:69:18:f7:8e:11:8a:1f:
         5d:9b:9b:7f:3d:84:74:e7:bb:ed:b4:32:0e:bf:7d:9a:2f:2f:
         55:42:68:08:19:31:df:da:e6:da:f6:2f:5c:92:05:69:b6:0c:
         e6:de:9a:65:6d:4f:69:16:f0:fc:1d:78:f3:80:d2:d3:f8:26:
         90:fe:35:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GeybaZwMCBjZDRwElXRyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjJlNmFhNTk0NjZmZTU2MWE5M2FiY2Q0ZGNkZjNkZWE0
ZGMyNjcwHhcNMjYwNzIxMjEwMDQ1WhcNMjYwNzIyMjEwMDQ1WjAzMTEwLwYDVQQD
EygxZTcwN2I3M2YzNmY5ZWIwMGM1ZWY1NzMxZmVjYmY3YjFjYzdlYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xdE542XczTAO/iZygD1mHkl5BdY
4Gwa6yG6dNSD/+ilwRsbFoPIdYoeif/pCyLO1IpVWxYfDbKHOJxDuVcBl2AFlFyL
DZduc9PNu2SOrSb/8eIqKOYx6RsE/8zOJfyIX6iNjetONJE33HIaqdXpTZmR52ss
fKR04Cmp0c0bUIAuXAI0viZDvHsyO+CLImRyKT9yjJLPR0EN2dxmWuX3/OuLfLHB
gke8E0X7OJqkFNwUwRuhpawCGqJzjSkVO3wHWH4EZBgo3rqbpvWBZ7ls/q4DfVMP
l3pzdgGUAoQImU5zGbWjmnL3SxzzKk/ijhAyCXhTLyVHvH2CzFZ6jKeEFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5we3Pzb56wDF71cx/sv3scx+xbMB8GA1UdIwQY
MBaAFMBi5qpZRm/lYak6vNTc3z3qTcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEt
MjM3M2ExYmE2ZDBiLzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEtMjM3M2ExYmE2ZDBi
LzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY7QrxeX
1midsyJY2Oindj9GtcdEroGmYc98AkUSmtq81E09rw4BLgfFc29xDLRwgIt6+kuA
LZE52lV5x+IUC2xMF/0GrZck/8uZn1PbGb+kDaEqx0g9m6gaNkzOsXvUJEbANfJ+
M0Qamc55sgy61f/zOyISjDlL9PhMSSwDwVoFl8tDsMWUVKfyJhhDqrjva8fq99yW
IJ7385ruVqtp4Zx4UzJMv1pMYAW+OxCfFmcWBCutGA6SPYePIMBtLOxpGPeOEYof
XZubfz2EdOe77bQyDr99mi8vVUJoCBkx39rm2vYvXJIFabYM5t6aZW1PaRbw/B14
84DS0/gmkP41pA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:08:11 2026 by rpki-client