Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
File:                     WnZf6z4obI26qbHWJoLkT76AByI.mft (raw, json)
Hash identifier:          00UWKw/fR0Gaxjl/FwX+jHnURCKhaRFvN9jy3GsYvv4=
Subject key identifier:   17:DD:3D:F1:77:E3:57:89:E1:B6:64:01:7F:5E:98:9D:94:D5:36:4A
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Certificate issuer:       /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial:       019FF97F26ED5D2B649B6AD93543DB922533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
Manifest number:          D0
Signing time:             Thu 13 Aug 2026 05:01:27 +0000
Manifest this update:     Thu 13 Aug 2026 05:01:27 +0000
Manifest next update:     Fri 14 Aug 2026 05:01:27 +0000
Files and hashes:         1: LfV4fDZ2pOExjAsPPxOZBrsSeoA.roa (hash: dVmuhj8OH/jWLXxuFuZoRFi787J7Pq2XBiRrCKplb9s=)
                          2: WnZf6z4obI26qbHWJoLkT76AByI.crl (hash: Quux2iAPR2Rd//82n2Bi3NClJYzPMSGrVdM81yskgaU=)
                          3: j8QiskJTBHdvvA99d-3rWwwJOaA.asa (hash: bDuDOhM5+Jp1KvUDJf1XanxKvLOmOhc5UiSCXeO71Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:7f:26:ed:5d:2b:64:9b:6a:d9:35:43:db:92:25:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
        Validity
            Not Before: Aug 13 05:01:27 2026 GMT
            Not After : Aug 14 05:01:27 2026 GMT
        Subject: CN=17dd3df177e35789e1b664017f5e989d94d5364a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:ed:d8:43:c3:27:f9:c4:41:32:3d:90:11:
                    ad:4e:33:d7:f6:18:df:93:54:cd:f1:0a:63:a3:2a:
                    07:7c:b5:c5:ef:a0:6d:35:f4:85:4b:5d:24:38:67:
                    67:dd:0c:c3:66:d7:09:82:42:42:07:a7:22:78:ab:
                    f1:90:46:10:2c:b4:e2:a5:2c:99:6a:0b:aa:41:20:
                    42:df:3b:91:0c:77:4e:b6:0f:f5:7e:c7:15:3e:86:
                    9f:82:0f:07:5f:b4:86:b2:81:3b:bf:05:5f:fa:6f:
                    d0:0d:dd:5a:78:4a:b7:a1:a2:a7:9f:ba:c3:a0:9f:
                    9d:e3:20:50:69:9f:1f:18:17:8d:e0:45:66:2d:e8:
                    90:82:ba:b5:c8:00:30:45:06:80:47:86:66:f7:59:
                    cf:e2:92:cd:f8:3f:0b:79:06:70:0d:79:9c:5e:8a:
                    d8:d7:9b:5f:f8:32:95:db:a9:87:f2:7d:84:82:a0:
                    4d:fe:20:24:50:61:06:65:33:a2:ba:af:db:4e:cc:
                    66:93:9c:bd:fc:b2:8d:cd:1a:cc:80:0d:b2:16:af:
                    97:c1:03:f1:07:19:f6:b3:76:f2:4c:11:25:5c:be:
                    64:9f:6b:b1:27:a3:7f:91:bd:fa:20:7b:d0:38:62:
                    af:dc:b5:0e:6f:28:9e:1b:fc:a2:d9:00:2e:86:e5:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:3D:F1:77:E3:57:89:E1:B6:64:01:7F:5E:98:9D:94:D5:36:4A
            X509v3 Authority Key Identifier:
                keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:69:6b:65:4f:77:35:2a:9a:3f:29:d0:40:1e:2f:a2:fb:
         f4:1e:97:c9:b1:b3:17:e3:26:e7:bf:71:60:53:b2:5d:17:e6:
         5c:71:76:10:3b:57:c8:dd:3d:74:c8:75:d7:f9:8b:95:41:ad:
         58:9b:1f:93:13:c2:0a:31:af:2a:cb:23:a9:a1:2d:a5:04:c1:
         f8:e5:43:2f:0e:8c:d1:00:29:a1:a7:fa:08:2d:91:86:e2:33:
         68:54:d6:82:66:67:eb:5d:52:8a:6c:ea:c5:88:36:df:93:fd:
         96:29:e8:9c:cc:48:43:5b:83:de:39:68:7a:d2:63:1a:da:d5:
         59:36:d2:61:7b:79:f8:81:85:f3:14:5f:31:bf:67:c1:69:2c:
         f5:ef:7b:7b:e8:e8:ab:9c:1d:da:7b:ca:4b:ee:5f:6f:ec:39:
         ad:e0:6d:c0:79:9f:cf:dd:44:ca:b1:c2:4c:57:53:95:3e:43:
         83:08:ce:30:67:03:86:c3:88:3c:5c:2c:04:25:11:fc:cb:c9:
         58:2e:56:c4:3e:22:55:b6:dc:7f:2d:d6:38:be:eb:4f:9f:35:
         de:17:ea:9e:d6:34:1c:b8:36:5c:0b:82:d0:16:8b:50:7f:70:
         c8:6d:e3:5f:0c:88:4e:4c:73:46:e7:2b:b7:d4:af:8b:e5:e8:
         49:d2:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:12 2026 by rpki-client