Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File:                     w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier:          SC+cCewvK7EbNizxkDw4pGvb16bJ1QCQDNG0+54QrSs=
Subject key identifier:   68:8E:E4:99:1C:A1:21:14:FA:7F:AD:B0:1A:36:05:E1:EA:08:02:DF
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer:       /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial:       019F841E9605F524973658A33F0B1BBF2A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number:          1285
Signing time:             Tue 21 Jul 2026 10:00:24 +0000
Manifest this update:     Tue 21 Jul 2026 10:00:24 +0000
Manifest next update:     Wed 22 Jul 2026 10:00:24 +0000
Files and hashes:         1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: BsKDEv0l4g1TA6ECr/r/ux98uKZdwrAGJ3w1xaXvz8M=)
                          2: x4-mHKJb7bMwY9GE86KAS0BLgKg.roa (hash: ++8zNyvezH+pL+l7TXoCaIybHlTSo3lc/2BXe8F2UWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:1e:96:05:f5:24:97:36:58:a3:3f:0b:1b:bf:2a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
        Validity
            Not Before: Jul 21 10:00:24 2026 GMT
            Not After : Jul 22 10:00:24 2026 GMT
        Subject: CN=688ee4991ca12114fa7fadb01a3605e1ea0802df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:c6:85:e8:87:53:cf:f3:e5:14:52:c3:07:
                    2e:6f:76:04:74:06:43:6f:9b:ac:c6:1e:5b:6d:1a:
                    a2:ec:d7:a1:1b:e3:ba:78:60:32:81:ff:11:b4:87:
                    00:85:cc:15:ca:c3:09:00:97:a1:93:fb:71:10:52:
                    26:7e:e2:bf:76:9f:13:3b:be:c9:58:18:77:5e:6a:
                    15:ac:77:d3:27:ed:a6:29:30:6c:91:e1:8a:06:18:
                    1b:49:5f:d4:aa:e7:4a:8a:56:ed:45:b2:2d:84:8f:
                    14:36:50:db:0d:d1:d1:84:85:83:7f:db:10:f2:1c:
                    43:81:22:77:eb:d6:bc:49:30:3e:db:c6:a9:36:c8:
                    7a:c0:ca:d2:6a:c9:69:36:c3:f5:15:5f:78:33:bd:
                    cc:62:8c:e1:a7:29:40:99:01:88:73:db:52:26:e0:
                    fa:eb:72:5b:b1:7d:02:94:50:ab:fa:0c:83:db:3b:
                    8c:c5:12:c5:a1:ef:c3:03:a6:17:be:8d:dc:c6:d3:
                    be:2d:69:f6:41:ae:bb:9c:5d:ca:dd:d7:0a:3d:79:
                    80:14:75:35:2a:93:91:57:61:17:53:36:77:98:85:
                    6d:5c:96:04:ab:30:87:7f:f5:86:01:ec:5a:ae:dd:
                    a8:b9:8b:11:57:36:a4:18:6c:03:1f:7a:8f:57:ff:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:E4:99:1C:A1:21:14:FA:7F:AD:B0:1A:36:05:E1:EA:08:02:DF
            X509v3 Authority Key Identifier:
                keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:e2:39:94:78:a0:7d:bd:6f:9f:3b:a8:ad:8e:74:f6:9c:
         b7:99:74:8f:61:ae:93:10:69:c3:2b:85:53:b6:4b:37:81:d2:
         44:12:19:8e:97:78:5e:ad:18:30:3a:91:18:09:02:9c:fd:01:
         7d:52:b4:c5:54:00:95:63:20:ad:37:64:bb:5a:c2:3f:ff:28:
         e1:3a:ee:47:e8:82:bd:21:38:73:22:d0:81:5f:24:29:bd:90:
         cd:b8:80:8b:3d:ec:12:58:dc:cd:c5:ad:53:63:28:9f:09:a5:
         5e:0b:f6:f8:05:a3:06:87:ea:ef:c8:30:fb:e0:9f:86:35:a5:
         61:6a:be:e6:d3:df:b7:69:ce:60:b3:df:f4:13:82:68:7a:07:
         b7:9c:60:97:bd:8a:d4:87:f5:a6:28:49:f9:ab:55:ba:88:5b:
         72:39:64:f4:82:ec:75:84:c1:88:2c:28:5e:22:ad:1e:c0:9b:
         bc:84:a8:38:11:14:22:ab:d0:c8:aa:f4:cd:a5:bd:a1:b9:b2:
         3d:9c:a4:91:fc:35:2b:b4:28:6c:9e:aa:54:6a:40:7f:d8:17:
         7a:1f:c8:15:25:6a:4c:ac:ec:64:e8:00:97:bf:2c:39:46:aa:
         22:06:13:39:8b:99:61:8a:09:88:10:50:57:60:22:98:a5:ae:
         47:f5:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:15:00 2026 by rpki-client