Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          8NVstO2yU/INVYT4p8i63b6q6UqX0LxGO2PjF+hYYw4=
Subject key identifier:   BA:2C:97:D2:F3:33:9C:04:F7:CD:F0:97:78:67:1A:D1:6A:84:36:E1
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       019F86444EE7DD76AD8AD40AF2CEBDD0D171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          0E39
Signing time:             Tue 21 Jul 2026 20:00:51 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:51 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:51 +0000
Files and hashes:         1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: RfU2XlgaVj/udVhvhzoxOqbV8tQZx2PC777zu+5oCK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:4e:e7:dd:76:ad:8a:d4:0a:f2:ce:bd:d0:d1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: Jul 21 20:00:51 2026 GMT
            Not After : Jul 22 20:00:51 2026 GMT
        Subject: CN=ba2c97d2f3339c04f7cdf09778671ad16a8436e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:ea:e4:5e:9e:7e:ef:31:cc:17:06:45:23:
                    b7:33:57:0e:62:be:3b:3f:d1:94:16:e1:c8:79:5f:
                    15:8b:7f:ce:48:23:a4:0a:be:a0:18:1c:b2:3d:c1:
                    02:91:82:5c:8c:07:7a:98:ef:1b:7f:e3:16:0a:7d:
                    19:05:2d:8f:e3:18:fb:38:f1:27:a5:7c:ec:61:f8:
                    ad:c2:26:35:57:9c:16:e0:1d:ab:a1:cf:96:f5:e5:
                    54:0b:70:74:cd:72:f4:a5:03:72:58:19:09:9e:41:
                    5d:ca:9a:66:53:11:4d:57:ad:21:fe:a7:71:2f:c8:
                    d0:df:f2:50:11:b0:0e:33:b5:c6:6e:43:5e:bf:0b:
                    be:ab:8f:72:e7:6d:0f:ac:0c:12:19:3d:f7:05:5a:
                    e6:4a:06:b9:7a:f5:4b:64:f6:f4:e2:18:72:09:07:
                    53:36:5d:a4:a7:9a:24:4b:0e:e6:ba:10:b5:31:74:
                    1d:1b:b0:17:b5:f5:02:ca:87:e4:f4:11:07:9b:fb:
                    32:87:58:3f:f1:1f:75:b9:b7:9e:6e:17:5c:3c:53:
                    e6:92:7b:1f:36:49:1c:01:0e:5f:fb:5e:2b:d8:e5:
                    8d:80:b0:9d:39:a1:48:f9:e3:2f:5f:e2:5e:a4:3b:
                    e6:89:7d:a4:cd:46:e9:9e:fe:58:98:a1:0a:5d:f1:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:97:D2:F3:33:9C:04:F7:CD:F0:97:78:67:1A:D1:6A:84:36:E1
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:20:45:63:14:29:ab:05:90:96:33:93:ab:0a:e0:e6:0a:ac:
         19:f3:20:b5:98:36:75:67:53:5a:d9:0d:26:7e:8a:cd:5e:30:
         72:27:4f:c7:df:5d:73:2d:16:5b:38:f3:f4:97:91:93:e5:d6:
         53:cf:a9:0b:98:32:93:1f:56:7a:32:5b:f7:e7:73:6e:ae:6e:
         27:07:4e:3d:59:e0:3b:99:3c:c2:dc:ef:1e:d5:46:76:84:fb:
         06:07:ea:ac:28:dd:ac:30:2a:86:01:2d:a7:f9:78:8c:d2:b6:
         1d:91:4b:dc:a8:e7:bd:ba:3c:7c:8e:15:ba:81:51:df:93:6c:
         28:e5:db:a4:6a:5d:57:e3:9d:c8:6a:5a:f5:7f:ee:4b:ae:60:
         99:84:a4:8d:53:19:b2:fd:bb:3a:27:f4:73:ac:b9:c5:b8:f1:
         a3:39:38:cf:46:30:80:d8:00:77:8c:a0:74:91:e1:7f:9c:3f:
         65:1f:ae:7a:f2:68:f7:82:6e:66:8b:71:18:45:21:7a:55:10:
         bd:f4:c1:36:6d:19:1e:e1:48:75:7d:20:61:35:56:79:bd:68:
         4b:63:3f:a8:73:bb:31:d6:19:f0:cf:ea:8d:d2:9c:1c:53:4c:
         e1:73:a7:48:99:db:94:ae:35:6c:b9:f5:75:63:6a:2e:bf:14:
         79:cf:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:29 2026 by rpki-client