Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
File:                     wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json)
Hash identifier:          1P6jvjtHLD8gmevlE4nQi7pjy8PosiyWYBI+mMMwAps=
Subject key identifier:   6F:3F:05:BA:96:7B:7B:93:74:30:0E:EE:87:64:5C:F5:C5:18:9B:FB
Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
Certificate issuer:       /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Certificate serial:       019F118A4CC932A65942515F61C53FD81EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
Manifest number:          01A7
Signing time:             Mon 29 Jun 2026 04:01:44 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:44 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:44 +0000
Files and hashes:         1: b68wUGWBseMkcjS44Gr7jhy5Jqo.asa (hash: +m+tsXbOZCdRGi1rCes1IS9Kt7hkM0KJcsusakEBgHY=)
                          2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: loVGwkmOgvZIpf4fEIcpwcsgTupgWolgwlKY3ZwxEyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:4c:c9:32:a6:59:42:51:5f:61:c5:3f:d8:1e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
        Validity
            Not Before: Jun 29 04:01:44 2026 GMT
            Not After : Jun 30 04:01:44 2026 GMT
        Subject: CN=6f3f05ba967b7b9374300eee87645cf5c5189bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:24:66:ed:6a:35:de:33:d1:01:70:7b:a3:
                    1a:cd:c0:02:66:ee:b0:e7:12:70:9a:ce:d1:26:47:
                    92:2d:05:e9:91:c6:6a:ce:05:9e:3a:59:46:a6:c5:
                    1a:f8:a2:d5:03:e8:99:7c:24:80:2b:6f:1c:52:5f:
                    5f:b6:a6:1c:60:a6:7c:ff:d1:bc:e4:cc:f8:34:28:
                    bf:76:09:14:e1:a7:bd:9a:a5:65:9c:9e:1e:e2:64:
                    2b:c5:cf:79:ef:67:35:ca:4d:57:3b:b7:7f:26:26:
                    e0:89:48:40:b7:de:33:45:4f:76:00:a4:d4:78:31:
                    57:cb:57:69:5e:cd:ab:10:96:a9:20:c2:56:09:45:
                    c1:09:bd:d5:81:71:d8:89:c3:35:d3:9e:ba:c7:1e:
                    52:68:b3:27:c3:0c:1c:ff:83:3b:17:c5:2d:cb:f2:
                    4d:32:fd:50:5d:f6:82:df:28:36:9f:ab:c0:86:e3:
                    52:23:51:f8:4e:7a:73:10:cd:b4:a0:ff:97:ab:1d:
                    ab:01:0d:ac:ac:1b:bc:0f:b9:9a:e9:59:eb:c4:b4:
                    a5:b7:03:a4:1d:07:f3:13:71:57:d1:5d:52:a3:97:
                    3e:4a:20:5b:8e:87:0e:24:b7:02:ba:f0:9b:b9:98:
                    a5:d9:b3:76:73:cc:48:93:e8:a6:b7:b4:88:67:40:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3F:05:BA:96:7B:7B:93:74:30:0E:EE:87:64:5C:F5:C5:18:9B:FB
            X509v3 Authority Key Identifier:
                keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a0:31:7d:88:04:37:24:70:46:90:4f:11:b3:5a:89:34:51:
         d1:5b:e7:16:59:b7:21:e0:eb:19:32:2e:e8:70:43:80:64:e5:
         42:12:b7:78:7b:47:c2:83:13:57:4e:aa:96:8f:c6:c2:ca:80:
         2c:15:6d:26:e6:17:02:7f:15:b4:5d:4e:6a:a1:f5:94:7a:51:
         9b:33:1b:07:40:94:e8:97:19:5c:03:01:ba:4d:9e:00:43:bb:
         1c:2d:c0:6d:7b:8b:b8:c8:99:98:33:d2:bc:af:04:2b:58:7f:
         66:d5:3f:b3:e7:82:fc:73:bf:57:38:b7:d9:f2:a8:4d:4c:e0:
         f9:25:7a:11:d4:73:0a:57:d3:58:cc:35:ff:ae:6b:66:69:c1:
         3e:28:9f:17:f9:d2:f1:7a:a1:dd:ba:9f:d6:63:e0:bf:2e:a8:
         74:29:7e:fe:85:33:5a:3c:b7:09:f4:bd:b6:52:0a:20:6e:cf:
         56:85:b3:a9:48:79:09:a5:97:49:d4:c3:a5:47:f7:c5:a0:bb:
         c5:4f:ef:95:f7:14:df:a4:36:1c:20:c6:48:c0:d1:b0:98:b8:
         5a:13:91:74:1f:d4:c3:aa:88:bc:18:3c:45:76:c7:f5:da:ae:
         18:39:87:ce:15:1e:03:0c:c2:85:47:f7:da:c1:81:53:ed:2e:
         88:21:34:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RikzJMqZZQlFfYcU/2B7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzEzMWFmN2ZhMDI5NzljNmVhMWRkZTA5ZDhjNzYyZDhh
ZWE0MWQwHhcNMjYwNjI5MDQwMTQ0WhcNMjYwNjMwMDQwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZjNmMDViYTk2N2I3YjkzNzQzMDBlZWU4NzY0NWNmNWM1MTg5YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKAkZu1qNd4z0QFwe6MazcACZu6w
5xJwms7RJkeSLQXpkcZqzgWeOllGpsUa+KLVA+iZfCSAK28cUl9ftqYcYKZ8/9G8
5Mz4NCi/dgkU4ae9mqVlnJ4e4mQrxc9572c1yk1XO7d/JibgiUhAt94zRU92AKTU
eDFXy1dpXs2rEJapIMJWCUXBCb3VgXHYicM10566xx5SaLMnwwwc/4M7F8Uty/JN
Mv1QXfaC3yg2n6vAhuNSI1H4TnpzEM20oP+Xqx2rAQ2srBu8D7ma6VnrxLSltwOk
HQfzE3FX0V1So5c+SiBbjocOJLcCuvCbuZil2bN2c8xIk+imt7SIZ0AKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8/BbqWe3uTdDAO7odkXPXFGJv7MB8GA1UdIwQY
MBaAFMMxMa9/oCl5xuod3gnYx2LYrqQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0Yjct
NDliNjY1MWQ5MmRiLzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0YjctNDliNjY1MWQ5MmRi
LzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6AxfYgE
NyRwRpBPEbNaiTRR0VvnFlm3IeDrGTIu6HBDgGTlQhK3eHtHwoMTV06qlo/GwsqA
LBVtJuYXAn8VtF1OaqH1lHpRmzMbB0CU6JcZXAMBuk2eAEO7HC3AbXuLuMiZmDPS
vK8EK1h/ZtU/s+eC/HO/Vzi32fKoTUzg+SV6EdRzClfTWMw1/65rZmnBPiifF/nS
8Xqh3bqf1mPgvy6odCl+/oUzWjy3CfS9tlIKIG7PVoWzqUh5CaWXSdTDpUf3xaC7
xU/vlfcU36Q2HCDGSMDRsJi4WhORdB/Uw6qIvBg8RXbH9dquGDmHzhUeAwzChUf3
2sGBU+0uiCE0dg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:56 2026 by rpki-client