Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File:                     WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier:          K6sZS99zL20AV+OGeXirhMNAGN8qPZaJbQNdWe8D61Y=
Subject key identifier:   B0:1C:72:22:76:09:91:3B:58:6E:C5:BB:80:04:EA:B2:29:9C:D8:36
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer:       /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial:       019FDAD0023E9332B62FF5C23E32CA632FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number:          0F46
Signing time:             Fri 07 Aug 2026 06:01:32 +0000
Manifest this update:     Fri 07 Aug 2026 06:01:32 +0000
Manifest next update:     Sat 08 Aug 2026 06:01:32 +0000
Files and hashes:         1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
                          2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: MO+jKvKQ570ajmNWwPZBq/ztOSI0TFZDjPeZhXcjI5w=)
                          3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:da:d0:02:3e:93:32:b6:2f:f5:c2:3e:32:ca:63:2f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
        Validity
            Not Before: Aug  7 06:01:32 2026 GMT
            Not After : Aug  8 06:01:32 2026 GMT
        Subject: CN=b01c72227609913b586ec5bb8004eab2299cd836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:2d:e3:4e:56:e0:04:9f:a7:d2:54:5d:ac:
                    78:38:12:4b:5e:b6:20:71:9e:35:cf:1a:bf:15:ec:
                    36:8d:41:f7:86:48:d9:5c:47:7c:bd:b5:ee:ae:1c:
                    53:aa:39:a9:22:28:99:cf:d8:f2:21:29:0f:c1:f1:
                    4b:cb:47:89:ab:48:76:80:5a:d2:e6:34:f9:29:13:
                    9a:65:be:50:68:3d:cd:9d:ab:91:f7:32:bc:d2:26:
                    11:fe:8b:0e:57:af:ae:8d:38:da:02:78:c2:ab:c4:
                    a2:96:ed:c3:f3:d6:de:c7:94:bd:05:13:2e:21:65:
                    5a:26:f1:b1:b8:c4:af:c9:24:5a:75:3a:98:6e:b1:
                    2e:f3:1b:6f:4a:5d:8d:de:8b:b6:b1:88:be:16:46:
                    03:80:0e:3e:01:d6:34:d5:3a:da:e0:80:13:6e:76:
                    5d:38:ea:c5:ca:ba:cd:61:99:a9:74:3f:ea:71:89:
                    2e:e9:28:74:59:92:c8:8f:15:3a:3a:0f:c0:13:6e:
                    40:1b:0b:85:05:db:93:d1:75:9d:94:a1:f6:8f:a3:
                    0a:a2:44:ee:52:8a:99:67:45:f4:98:ee:b5:92:cd:
                    ef:6e:b2:43:d7:59:d0:73:f4:87:56:df:82:e7:44:
                    44:a5:aa:c0:07:23:37:d3:a2:eb:f6:4a:c1:34:a3:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1C:72:22:76:09:91:3B:58:6E:C5:BB:80:04:EA:B2:29:9C:D8:36
            X509v3 Authority Key Identifier:
                keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0b:e0:5e:ea:4c:40:b1:7f:39:3e:c5:6f:01:2d:05:67:0e:
         59:1b:26:d6:f1:39:d2:a1:f8:98:b0:57:30:ba:6c:27:e0:c6:
         7d:a4:d9:0e:a9:a8:ba:59:37:b9:b9:e5:fa:d4:e9:c1:41:ad:
         53:8d:dc:95:8a:23:b5:9b:cf:9b:8b:a5:a1:27:fd:55:f9:a9:
         29:87:c6:6b:be:69:1d:4e:8a:67:5d:0b:a5:34:01:cc:78:b5:
         1f:8e:de:37:7c:94:b6:e9:e7:64:a9:e8:44:ef:80:29:97:e5:
         20:81:92:b0:2c:4e:69:01:aa:5f:ed:3d:b8:c0:77:39:0d:1c:
         35:5a:2e:e6:ef:28:a0:6f:7e:28:1c:ac:bb:1e:ae:8e:5d:55:
         3c:f0:6c:d9:a8:52:4d:b3:ce:73:02:78:72:92:46:05:0f:23:
         b0:47:ee:63:ac:ea:d5:de:e2:a5:7b:d4:11:07:17:c0:2f:dc:
         0f:53:16:bb:56:cd:9f:c6:fd:d1:ab:dd:41:14:e9:53:18:8b:
         3c:5e:db:d3:23:f1:f1:67:3b:e2:4a:d1:3d:c1:25:81:29:42:
         53:f2:09:59:85:da:ba:4f:e0:87:d8:25:ef:aa:e2:9d:1e:5c:
         ec:35:e0:82:e0:5e:cd:27:ec:1d:d0:02:9c:98:4f:d5:d6:e2:
         dd:31:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 08:12:45 2026 by rpki-client