Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
File:                     w6uBXAlcSeUjkHwrRhKXcJemuFg.mft (raw, json)
Hash identifier:          /lJucyLeQspbot47u+ATiA1Sbr6BsSARXoQPuXJYXoI=
Subject key identifier:   D1:5B:08:75:92:F8:F5:7F:CE:52:86:61:D1:84:AF:7C:70:E0:45:1B
Authority key identifier: C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58
Certificate issuer:       /CN=c3ab815c095c49e523907c2b4612977097a6b858
Certificate serial:       019FF5D9BE07FFDE6A510081DF4C6081860B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
Manifest number:          74
Signing time:             Wed 12 Aug 2026 12:01:55 +0000
Manifest this update:     Wed 12 Aug 2026 12:01:55 +0000
Manifest next update:     Thu 13 Aug 2026 12:01:55 +0000
Files and hashes:         1: cF65Y72OTkUIe_PM4Wd1M3sisbs.roa (hash: oVz1TLgu7Q2K4UrameIrD6zZiFY59GSx7iKcM+J23ds=)
                          2: w6uBXAlcSeUjkHwrRhKXcJemuFg.crl (hash: AyfakgRgnhBwsOiLnKFJexnNAa107Rma63fUuF8GfEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 12:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:d9:be:07:ff:de:6a:51:00:81:df:4c:60:81:86:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ab815c095c49e523907c2b4612977097a6b858
        Validity
            Not Before: Aug 12 12:01:55 2026 GMT
            Not After : Aug 13 12:01:55 2026 GMT
        Subject: CN=d15b087592f8f57fce528661d184af7c70e0451b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:bc:c9:cf:3f:8c:a2:a9:ec:e6:00:03:1a:
                    48:6e:70:a2:c6:85:d6:37:a5:3e:26:0e:79:ad:7c:
                    99:9f:97:7a:d1:95:f4:f5:ca:77:5f:f8:06:43:55:
                    40:b8:e4:1c:01:ac:7d:3e:41:6e:2d:57:f0:b1:ad:
                    f4:5f:d5:5a:9a:09:68:d9:5a:c3:c9:70:15:58:39:
                    ad:8f:fb:7c:05:85:b1:03:17:af:75:11:47:26:d3:
                    46:98:6c:55:c3:8d:f7:e0:f4:26:74:d9:29:1f:08:
                    ae:5d:35:3a:ef:9f:d7:54:2d:19:24:24:26:13:5d:
                    dd:c4:03:ee:46:2d:95:58:04:cb:e0:a0:b3:a0:31:
                    b4:23:4f:25:de:f4:79:a8:45:a9:5a:60:3b:80:b4:
                    0f:2a:1d:a9:1c:31:5c:00:53:7e:0f:fd:3e:7c:2e:
                    97:bb:30:d8:38:13:12:3b:b8:b0:b1:19:5e:c4:eb:
                    f6:1b:0a:ea:4e:b8:29:30:6e:c8:a3:4a:ca:31:40:
                    ac:12:b5:83:41:f5:e9:ba:7c:dd:c8:fa:70:c0:98:
                    2b:96:56:f7:80:5e:23:04:9a:a2:dc:ab:24:2d:6b:
                    c5:cd:eb:88:4f:2e:35:06:75:5f:58:64:e3:2d:1b:
                    3e:ad:8f:7b:04:c4:11:b5:c0:12:75:79:02:e2:1d:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:08:75:92:F8:F5:7F:CE:52:86:61:D1:84:AF:7C:70:E0:45:1B
            X509v3 Authority Key Identifier:
                keyid:C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7b:d2:3b:bc:86:70:29:ad:bc:e7:aa:9b:ec:4b:2f:db:26:
         a8:b8:02:55:27:96:72:ba:4a:1f:bf:78:9e:d3:d6:f8:72:d2:
         f1:cc:66:f3:f4:0c:d9:ed:19:6e:b5:b2:fe:44:db:6f:ab:0d:
         04:c4:e1:93:b7:dc:95:69:8c:c2:e8:bb:08:8a:38:51:07:d5:
         f4:da:32:ef:64:7f:ca:5c:f3:50:6a:00:d2:01:91:7b:a6:71:
         7d:48:68:cd:3b:82:98:49:e5:72:ec:c9:a7:b7:1b:2f:ae:41:
         a9:1f:b5:93:49:d3:84:d7:17:ac:5a:da:d0:f6:ee:56:cb:0e:
         c4:8d:1c:64:e3:78:45:a0:83:ed:81:35:f9:d2:73:8e:88:78:
         25:91:7b:3e:f3:81:af:e9:8d:b7:a3:cc:ae:ca:bb:86:c7:4f:
         b7:d0:3a:77:f4:d7:f0:1c:e2:7a:9e:78:10:5d:a0:51:65:97:
         f7:76:2c:82:9e:e0:28:ae:c7:6f:92:c5:ba:36:df:e2:ec:54:
         2a:e7:d8:13:f0:0c:06:35:88:de:0f:9e:82:60:75:b7:a6:33:
         aa:67:89:4a:92:27:50:da:57:33:26:e6:32:c6:95:9f:08:05:
         83:93:d9:a2:92:9e:9f:8f:2a:73:6f:b6:ba:da:af:01:88:39:
         cf:ed:1e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:19:07 2026 by rpki-client