Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          3WR2rzKcQjBEHwPZLSz9zy89nOaO6RMOUjUKtoyMWhk=
Subject key identifier:   60:C5:A5:52:D2:47:29:2F:27:DB:F0:A1:3F:CF:C0:EC:13:97:5D:8B
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       01A0051586570600ECF0B2242D7299E70986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          01FF
Signing time:             Sat 15 Aug 2026 11:01:31 +0000
Manifest this update:     Sat 15 Aug 2026 11:01:31 +0000
Manifest next update:     Sun 16 Aug 2026 11:01:31 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: xQY0v4n/4PYRcI1wGFiR7BBuJkQdJojIAK+EnAmPV8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:05:15:86:57:06:00:ec:f0:b2:24:2d:72:99:e7:09:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Aug 15 11:01:31 2026 GMT
            Not After : Aug 16 11:01:31 2026 GMT
        Subject: CN=60c5a552d247292f27dbf0a13fcfc0ec13975d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:43:6b:18:a1:e5:78:93:f4:c6:3b:d3:d6:
                    09:7f:6e:97:b8:47:14:b2:09:00:5e:58:35:df:14:
                    41:e2:6d:2c:1b:ff:a6:14:7f:0e:51:16:41:cc:63:
                    3e:00:4b:68:86:18:c2:4b:05:ad:80:29:d9:44:eb:
                    37:73:3a:4b:03:08:ca:02:3c:e0:e4:74:52:ed:9d:
                    09:03:44:d5:18:11:28:39:8e:b8:7f:6c:63:93:3e:
                    3f:25:f3:b9:48:af:d3:0e:58:5a:cb:5d:da:23:a7:
                    62:94:22:25:72:3d:e4:52:42:b6:fc:27:5f:90:23:
                    ee:55:ac:a9:f1:6a:2c:b9:4b:96:bf:cf:94:70:45:
                    2c:50:2f:87:41:60:80:d3:7b:27:01:fa:f4:cb:ae:
                    15:c0:3f:18:b7:e4:34:cc:5e:ce:b5:42:12:fe:46:
                    cd:92:34:23:46:bc:a7:77:04:c0:52:f2:d1:76:31:
                    05:76:1a:0e:86:15:10:5f:ea:79:eb:e0:80:44:33:
                    bc:6c:72:1a:51:0f:aa:1d:f0:c3:18:81:5f:78:cd:
                    3f:df:6d:6d:52:bd:1d:ee:4b:77:ab:26:13:9b:11:
                    98:b6:f9:f2:64:aa:12:73:0f:f6:56:21:c9:ca:d9:
                    90:cd:f6:13:97:52:6c:3f:cc:15:09:f8:8d:fd:5c:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:A5:52:D2:47:29:2F:27:DB:F0:A1:3F:CF:C0:EC:13:97:5D:8B
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:d2:5e:77:5b:96:bf:0b:d1:57:77:cc:01:45:89:c7:be:
         a8:71:2f:62:eb:1c:81:ec:b5:ea:17:31:d1:6d:e1:be:b4:08:
         6a:9a:2b:de:1e:ab:4d:64:0c:5f:ee:cf:f3:cf:95:ea:4d:05:
         41:b2:84:96:ca:30:0d:0e:07:48:6d:a1:1e:6b:10:20:85:e8:
         80:cc:e9:89:51:96:22:89:4e:bf:a4:95:2d:83:a6:9e:d2:a7:
         fc:0d:08:a7:ce:36:41:83:88:0d:cc:c8:fc:5d:06:23:ba:59:
         dc:b9:74:2e:a9:f1:b1:c8:04:ae:88:01:1f:06:2e:74:f1:d2:
         12:b5:f7:4d:64:1a:67:02:b2:3b:c4:04:66:bf:41:6d:7f:8b:
         ce:9c:86:ae:10:95:92:4c:40:98:66:13:14:be:b2:e2:de:1f:
         65:9e:c5:19:e8:ac:be:55:10:ac:83:97:3e:03:09:33:af:5c:
         40:2f:64:4d:7c:68:6d:af:70:42:9e:9b:be:b8:b3:e0:fc:00:
         bf:01:7b:f1:a9:4a:a7:c0:ab:32:0e:99:b8:be:51:67:5c:71:
         fc:4a:db:2f:af:5b:66:f7:b5:86:2b:02:d9:ef:9b:65:86:4e:
         20:5d:b8:2d:3f:9f:18:cc:d4:6b:94:3d:0f:fd:f4:47:72:51:
         22:ba:d8:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAFFYZXBgDs8LIkLXKZ5wmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzNmZmYxNzhlZDUyZmQxZGU3MDkzMTEyNDIzYjY0MTdj
ZWEyZDMwHhcNMjYwODE1MTEwMTMxWhcNMjYwODE2MTEwMTMxWjAzMTEwLwYDVQQD
Eyg2MGM1YTU1MmQyNDcyOTJmMjdkYmYwYTEzZmNmYzBlYzEzOTc1ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw5Daxih5XiT9MY709YJf26XuEcU
sgkAXlg13xRB4m0sG/+mFH8OURZBzGM+AEtohhjCSwWtgCnZROs3czpLAwjKAjzg
5HRS7Z0JA0TVGBEoOY64f2xjkz4/JfO5SK/TDlhay13aI6dilCIlcj3kUkK2/Cdf
kCPuVayp8WosuUuWv8+UcEUsUC+HQWCA03snAfr0y64VwD8Yt+Q0zF7OtUIS/kbN
kjQjRryndwTAUvLRdjEFdhoOhhUQX+p56+CARDO8bHIaUQ+qHfDDGIFfeM0/321t
Ur0d7kt3qyYTmxGYtvnyZKoScw/2ViHJytmQzfYTl1JsP8wVCfiN/VzRlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDFpVLSRykvJ9vwoT/PwOwTl12LMB8GA1UdIwQY
MBaAFMJz//F47VL9HecJMRJCO2QXzqLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25QXzhYanRVdjBkNXdreEVrSTdaQmZPb3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wOTk2ZGQtNzk4NS00NTVkLWJmYjkt
ZjYxNjQzZmU5ODI4LzEvd25QXzhYanRVdjBkNXdreEVrSTdaQmZPb3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wOTk2ZGQtNzk4NS00NTVkLWJmYjktZjYxNjQzZmU5ODI4
LzEvd25QXzhYanRVdjBkNXdreEVrSTdaQmZPb3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3zSXndb
lr8L0Vd3zAFFice+qHEvYuscgey16hcx0W3hvrQIapor3h6rTWQMX+7P88+V6k0F
QbKElsowDQ4HSG2hHmsQIIXogMzpiVGWIolOv6SVLYOmntKn/A0Ip842QYOIDczI
/F0GI7pZ3Ll0LqnxscgErogBHwYudPHSErX3TWQaZwKyO8QEZr9BbX+LzpyGrhCV
kkxAmGYTFL6y4t4fZZ7FGeisvlUQrIOXPgMJM69cQC9kTXxoba9wQp6bvriz4PwA
vwF78alKp8CrMg6ZuL5RZ1xx/ErbL69bZve1hisC2e+bZYZOIF24LT+fGMzUa5Q9
D/30R3JRIrrYEw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 13:00:01 2026 by rpki-client