Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier:          9xV3UuCC6ScaPuS9/kw+RoZp79vmBZP4NW5Xf3M84CE=
Subject key identifier:   4C:B8:94:FF:CE:48:9E:C4:8A:21:6C:A3:A0:58:87:1D:E4:9A:9A:8E
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer:       /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial:       01A001A5D220DBDF3E208BF3347F29959BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 19:00:39 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:39 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:39 +0000
Files and hashes:         1: bReCIVuQYApcR9bghyySzc1rX0U.roa (hash: magcfvf5CzoyLEkyPyEHEy4bFJNpUsQt9gCbLUeNHIA=)
                          2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: a1vVTlv0rBXzoIk4vSh5z95kU2Jpn7mu9/95jTzZdxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:d2:20:db:df:3e:20:8b:f3:34:7f:29:95:9b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Validity
            Not Before: Aug 14 19:00:39 2026 GMT
            Not After : Aug 15 19:00:39 2026 GMT
        Subject: CN=4cb894ffce489ec48a216ca3a058871de49a9a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:ab:b7:a8:1f:28:69:03:9a:d4:ac:2d:c9:
                    42:ce:19:30:40:10:03:0d:64:f2:d0:d8:f4:9a:bd:
                    68:23:ea:7d:98:fc:53:99:68:51:f9:61:24:a4:ae:
                    ea:85:b8:73:cc:a4:22:f0:0a:5c:ed:be:b5:5a:45:
                    6d:b7:44:3d:be:3e:1b:48:b3:84:0b:c3:4a:d6:ab:
                    fa:27:90:4e:00:6b:f0:3b:90:35:5a:2a:75:ad:84:
                    5e:2f:bc:88:28:32:64:d9:c6:c5:92:b1:82:f3:db:
                    66:fe:5e:f5:a3:35:8e:19:cc:11:3b:68:c6:47:98:
                    75:6d:93:a6:82:76:67:5e:28:03:24:d5:22:36:3f:
                    cf:4d:f9:34:b2:85:42:d5:b4:22:6a:de:82:fb:01:
                    63:c7:c5:e4:47:46:42:08:9f:87:44:9a:db:34:1a:
                    37:f7:07:5b:71:09:a4:97:1f:98:76:43:de:18:9e:
                    6d:ad:02:a0:b7:e3:70:bd:27:53:eb:b0:96:50:47:
                    cc:20:21:12:50:97:eb:2d:c1:39:d3:20:d3:cc:3b:
                    ca:3b:92:41:46:f9:78:88:e8:25:8c:5e:05:76:b1:
                    22:ed:98:56:b7:4c:83:61:63:dc:5b:f9:f5:73:f3:
                    0c:10:94:7c:2c:ea:9f:e5:b9:5a:51:91:77:4f:92:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B8:94:FF:CE:48:9E:C4:8A:21:6C:A3:A0:58:87:1D:E4:9A:9A:8E
            X509v3 Authority Key Identifier:
                keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cf:20:4b:d8:8f:ff:ef:83:c4:9a:19:ab:60:78:03:3d:ce:
         df:78:ec:65:81:e4:4d:9a:70:1a:84:47:12:42:af:6e:01:0d:
         64:83:da:0a:8f:ff:53:ec:1d:42:9c:56:6d:a7:31:f6:0c:c8:
         cf:ae:87:bc:bc:6d:13:22:63:c4:50:dc:aa:c4:1d:f6:cf:1f:
         4b:71:0f:ce:ec:6b:2a:f9:0e:03:ad:26:92:f1:80:0d:a8:27:
         8f:b4:55:32:4a:f7:71:a5:a0:f5:3c:4e:44:2b:9b:7c:1d:ad:
         38:34:07:68:33:a3:29:f8:95:9c:eb:9c:d6:54:b7:a6:66:b5:
         dc:2d:0c:98:be:19:0b:1a:51:32:5b:3f:31:64:a5:cd:15:ab:
         71:a9:83:e3:90:9e:f4:a9:c8:80:86:f4:67:11:9d:d6:e5:d0:
         03:13:96:da:0e:04:5f:96:6a:83:c1:ba:fa:4c:0e:99:89:92:
         d9:de:67:26:8c:cd:78:d3:1c:05:e4:0c:8c:67:7f:dd:8f:d7:
         3d:8a:d0:75:50:a7:56:f1:b8:c8:0a:6b:6e:cf:93:a7:ba:35:
         5d:25:81:ba:36:90:c3:1c:f4:fd:0a:12:fe:c8:50:fa:94:6e:
         cd:3c:db:ee:0f:b2:23:5c:90:78:97:b6:f7:6b:00:54:7b:8c:
         b8:33:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:22 2026 by rpki-client