Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File:                     WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier:          1KHBgVh6LN4brP0dJSe88wDiAq1dvtFn4FVrq2oQ99U=
Subject key identifier:   10:AB:54:C6:C0:15:AD:0C:92:3B:EE:AA:FF:9C:CF:7E:4E:55:A6:68
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer:       /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial:       019F1B68AAE4355B7256B06B59D8AD6C0FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number:          11F8
Signing time:             Wed 01 Jul 2026 02:01:11 +0000
Manifest this update:     Wed 01 Jul 2026 02:01:11 +0000
Manifest next update:     Thu 02 Jul 2026 02:01:11 +0000
Files and hashes:         1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
                          2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: grD0NaD0HJRqWPmMe/iwRL1Q6StK58i+1wqAzi8vKHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:68:aa:e4:35:5b:72:56:b0:6b:59:d8:ad:6c:0f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
        Validity
            Not Before: Jul  1 02:01:11 2026 GMT
            Not After : Jul  2 02:01:11 2026 GMT
        Subject: CN=10ab54c6c015ad0c923beeaaff9ccf7e4e55a668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:17:cc:66:24:bc:3c:48:2f:9a:75:cd:40:
                    10:42:fe:c2:34:4f:95:30:a2:58:fc:ea:4d:b6:33:
                    63:7e:cd:59:46:6d:7c:a0:46:ef:e6:f0:6c:01:91:
                    bd:6b:c7:c2:d2:50:1f:83:29:c4:2f:35:af:23:56:
                    a3:94:93:1e:4d:bd:df:43:35:b2:d5:7b:a4:8a:0d:
                    35:4d:5d:f8:d6:30:23:27:ed:cb:ef:c6:0b:c5:2d:
                    e8:ef:33:c0:30:ab:6f:60:ad:da:fc:d0:f5:e6:f2:
                    d1:92:c7:b6:da:4f:e5:aa:15:2b:5a:95:7d:17:9f:
                    45:00:b1:56:80:5a:9e:c4:fc:03:4c:c9:11:7c:5b:
                    7e:9a:c0:08:53:33:de:88:19:6b:04:3d:c7:bd:16:
                    16:3d:9d:2c:5d:08:b9:1d:ce:7a:4c:17:73:91:7e:
                    d9:9a:66:1d:88:d5:87:07:3a:02:56:16:d6:57:16:
                    3c:e9:ba:49:dd:4a:75:ab:f8:1d:60:1f:56:94:60:
                    95:93:d7:cf:79:88:79:f5:a3:14:fa:51:32:2e:95:
                    65:2f:96:a2:40:8c:0a:e6:af:03:ec:07:ab:c2:07:
                    08:8d:65:95:8f:5d:1e:b4:5b:56:7a:3a:ca:43:4a:
                    f7:61:14:df:b5:3b:5e:fd:f0:6a:fb:54:b0:63:3e:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AB:54:C6:C0:15:AD:0C:92:3B:EE:AA:FF:9C:CF:7E:4E:55:A6:68
            X509v3 Authority Key Identifier:
                keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:04:fd:89:86:04:4c:cb:31:4e:0e:d2:e9:03:59:e3:1b:6e:
         56:55:e9:88:d8:78:90:87:ee:57:2c:8c:75:c8:e7:16:97:95:
         00:77:4d:f5:62:0a:1b:b3:d5:27:aa:d8:07:ef:37:93:e4:85:
         d0:8a:51:af:6f:b4:de:ba:72:f8:75:94:ae:d8:17:51:dd:3e:
         e0:41:34:88:0f:00:8f:f8:fe:99:2f:9e:ca:18:8a:26:d8:b9:
         a5:bd:31:32:93:d4:1c:54:90:9f:42:3d:86:0d:f5:1f:b8:e2:
         35:ed:d8:75:58:2a:8e:56:60:4f:27:ff:79:d9:d4:61:bd:b2:
         79:b2:d1:21:ba:6d:3f:3b:ae:1f:a6:9a:43:2d:48:0e:62:29:
         57:95:5f:1d:09:17:09:70:7d:66:b8:f5:45:40:67:ca:8e:5a:
         86:4a:cf:16:42:9e:ed:a6:7a:f0:d4:03:8a:72:38:3e:e6:10:
         30:8d:c5:b3:be:03:e6:61:fc:67:8d:95:69:0e:34:9b:af:2d:
         5f:1d:58:a6:2a:88:da:99:fe:11:ca:5e:b2:6d:69:22:c9:44:
         05:60:dd:28:b2:92:9c:73:ac:26:4e:5d:e5:1d:5b:0a:82:cd:
         9b:b6:04:d0:5d:35:87:c3:65:25:02:68:6e:85:c2:5d:1a:b9:
         b6:bd:b8:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8baKrkNVtyVrBrWditbA/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGFhOTY4MmM2ODNhOWMxYjk1Y2U5Njc2ZDUxYjIwZDM5
ZmQyYWUwHhcNMjYwNzAxMDIwMTExWhcNMjYwNzAyMDIwMTExWjAzMTEwLwYDVQQD
EygxMGFiNTRjNmMwMTVhZDBjOTIzYmVlYWFmZjljY2Y3ZTRlNTVhNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wXzGYkvDxIL5p1zUAQQv7CNE+V
MKJY/OpNtjNjfs1ZRm18oEbv5vBsAZG9a8fC0lAfgynELzWvI1ajlJMeTb3fQzWy
1Xukig01TV341jAjJ+3L78YLxS3o7zPAMKtvYK3a/ND15vLRkse22k/lqhUrWpV9
F59FALFWgFqexPwDTMkRfFt+msAIUzPeiBlrBD3HvRYWPZ0sXQi5Hc56TBdzkX7Z
mmYdiNWHBzoCVhbWVxY86bpJ3Up1q/gdYB9WlGCVk9fPeYh59aMU+lEyLpVlL5ai
QIwK5q8D7AerwgcIjWWVj10etFtWejrKQ0r3YRTftTte/fBq+1SwYz5NPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCrVMbAFa0Mkjvuqv+cz35OVaZoMB8GA1UdIwQY
MBaAFFoKqWgsaDqcG5XOlnbVGyDTn9KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjkt
NmVlZDUyOTY4YjFjLzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjktNmVlZDUyOTY4YjFj
LzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQT9iYYE
TMsxTg7S6QNZ4xtuVlXpiNh4kIfuVyyMdcjnFpeVAHdN9WIKG7PVJ6rYB+83k+SF
0IpRr2+03rpy+HWUrtgXUd0+4EE0iA8Aj/j+mS+eyhiKJti5pb0xMpPUHFSQn0I9
hg31H7jiNe3YdVgqjlZgTyf/ednUYb2yebLRIbptPzuuH6aaQy1IDmIpV5VfHQkX
CXB9Zrj1RUBnyo5ahkrPFkKe7aZ68NQDinI4PuYQMI3Fs74D5mH8Z42VaQ40m68t
Xx1YpiqI2pn+Ecpesm1pIslEBWDdKLKSnHOsJk5d5R1bCoLNm7YE0F01h8NlJQJo
boXCXRq5tr24ZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:10 2026 by rpki-client