Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
File:                     wA_3yZHBXTi_3_s648uYg1ZSnsI.mft (raw, json)
Hash identifier:          L1haCl1jsyt1MiK6I+T1eIsjOADwreu4MVXgZ/H8Hbs=
Subject key identifier:   BD:B0:B0:E1:6F:4C:6E:C7:2D:93:95:B8:9B:0C:2A:C3:A7:6C:3B:4C
Authority key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Certificate issuer:       /CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Certificate serial:       019FA116D025F7998091AF6470D2B57CF11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
Manifest number:          1E
Signing time:             Mon 27 Jul 2026 01:00:54 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:54 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:54 +0000
Files and hashes:         1: tJdEpKTyQFiB6etKYnTD5TRM42I.roa (hash: fkYiQBu5Trdut7tZ/7hqit0Set+zAtJH4HGx3n50MEc=)
                          2: wA_3yZHBXTi_3_s648uYg1ZSnsI.crl (hash: V8LMWxGM0RGprATf4MbuMpbjrhurBoBjEdwp5WKc5jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:d0:25:f7:99:80:91:af:64:70:d2:b5:7c:f1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
        Validity
            Not Before: Jul 27 01:00:54 2026 GMT
            Not After : Jul 28 01:00:54 2026 GMT
        Subject: CN=bdb0b0e16f4c6ec72d9395b89b0c2ac3a76c3b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:ac:2e:d8:55:33:cd:e4:06:bd:30:4e:7d:
                    a7:8a:0f:0f:8d:f3:f4:e3:32:d1:99:e7:56:39:36:
                    3b:8d:34:8c:d4:35:8e:ca:4f:28:be:20:48:4e:77:
                    e4:bc:bd:13:8e:a8:ae:a9:6e:ad:d3:b5:26:92:76:
                    3f:51:90:86:04:2a:fc:54:d1:0e:12:ec:b3:7b:aa:
                    c5:e7:3b:6a:6c:82:a2:73:37:a1:07:d7:72:aa:b4:
                    d3:3e:4b:18:ff:91:f8:f4:78:47:ba:c7:4d:13:1e:
                    ea:5e:cd:11:79:8d:b7:0d:1e:7d:67:05:bb:50:a1:
                    1c:e4:74:3f:62:4f:d4:20:a2:c4:a2:57:2d:97:76:
                    b5:d0:c6:45:b4:2e:d3:07:73:5e:13:00:c5:ce:89:
                    82:00:67:11:da:9a:d7:4c:69:7b:3c:f3:3c:c3:23:
                    0b:85:48:be:0d:2c:b9:0e:13:1a:59:54:4a:a6:f0:
                    b5:b6:b1:70:7a:1a:73:92:6e:7f:be:33:85:db:9f:
                    0e:bb:04:25:b2:0e:00:ea:87:1c:e8:93:28:a7:1a:
                    3c:36:e7:9d:a4:c3:e8:b4:4f:30:f4:d5:bb:72:e8:
                    9f:89:a4:82:54:69:00:1e:76:8d:2f:ef:9e:3f:1f:
                    9e:36:a7:0e:88:e0:94:00:e1:2b:f0:f0:4a:d0:0d:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:B0:E1:6F:4C:6E:C7:2D:93:95:B8:9B:0C:2A:C3:A7:6C:3B:4C
            X509v3 Authority Key Identifier:
                keyid:C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:1b:cd:d5:96:24:bf:92:78:a9:48:25:58:0b:6b:3b:3f:
         7f:71:73:19:21:09:e2:11:c1:dd:a0:99:8e:05:49:75:b1:b5:
         0c:f7:d5:a4:d5:ae:ba:54:42:6c:49:87:73:f8:c9:15:ad:cf:
         fc:bd:ed:c1:8b:b5:50:eb:e5:dd:dc:8c:72:39:e0:08:8e:56:
         d2:3a:ac:e9:5a:53:3a:88:cb:73:16:1f:7b:0f:1d:d0:40:7f:
         f6:4f:15:1d:98:ed:c2:84:e0:84:1b:d4:3d:9e:45:1e:31:0d:
         7b:3d:52:a4:2c:6d:f9:eb:71:82:bf:a7:35:04:7c:0c:e2:43:
         50:d8:02:8e:46:9c:69:3c:ed:6d:fa:df:3d:fa:74:7d:e8:20:
         30:d3:24:f8:e1:47:18:7e:00:d6:16:4d:29:f8:01:ca:70:4b:
         aa:8c:a5:f9:7f:7f:e1:39:fc:c6:17:ae:af:bc:a5:24:b5:ae:
         a0:d9:98:fe:85:e7:ce:bd:84:ef:3a:59:a9:19:59:1e:85:0b:
         df:15:f7:c2:9c:4b:9e:6f:ea:0d:95:e5:8d:39:c1:e6:1c:72:
         58:ed:6f:fb:4e:38:ed:f9:a1:7a:5f:a9:bc:44:d6:d1:a0:9a:
         e4:2e:ef:25:ee:29:ec:85:b6:e7:3c:e7:ff:a7:2b:bd:b9:9d:
         95:eb:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:33:45 2026 by rpki-client