Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File:                     wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier:          xZZ4fAO4cXAg16MV4CIjk0NhHB3EPEERSMCxCf7/uLU=
Subject key identifier:   23:EF:11:D8:48:3D:01:EE:7D:3D:DC:F5:36:97:6C:9C:1E:58:BE:9A
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer:       /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial:       019FA03ACB7739D38A3AFE648B3244246294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number:          06B2
Signing time:             Sun 26 Jul 2026 21:00:35 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:35 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:35 +0000
Files and hashes:         1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
                          2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: LX/jnYJQQYRLAe9u3LnF5I4JD3nDPDFSwiPNE7c3a+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:cb:77:39:d3:8a:3a:fe:64:8b:32:44:24:62:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
        Validity
            Not Before: Jul 26 21:00:35 2026 GMT
            Not After : Jul 27 21:00:35 2026 GMT
        Subject: CN=23ef11d8483d01ee7d3ddcf536976c9c1e58be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:bb:70:f8:34:a8:df:0e:dd:6c:89:70:a9:
                    31:c4:bb:f5:ba:a2:a3:ec:96:3f:37:6e:9d:cd:f1:
                    7d:ec:e3:96:75:c6:32:ec:14:c4:99:ce:52:e4:24:
                    25:c9:32:b0:34:17:31:ee:58:e8:97:ab:4b:04:cd:
                    13:e7:a5:f4:63:30:dc:dc:e1:65:02:05:98:5c:76:
                    a7:83:3e:ad:b1:25:78:04:63:54:ee:4c:33:6c:6f:
                    53:bf:03:72:18:c0:6e:3f:3a:1e:07:9d:15:bb:ce:
                    c6:e5:a9:9c:da:af:01:2a:39:27:57:e6:f5:34:82:
                    46:35:fe:38:22:55:2e:45:0a:b3:d6:1d:77:21:50:
                    c6:42:94:aa:c9:98:39:e0:13:34:3c:7d:3d:c3:53:
                    8f:c1:0b:23:c3:0e:95:c4:84:83:3a:54:e3:60:80:
                    05:4e:3d:96:e6:97:45:db:cd:9d:ea:39:5c:29:40:
                    f8:20:9d:30:98:77:53:a6:82:95:6a:29:16:ed:c0:
                    42:68:ca:f7:54:fa:54:8a:cf:82:e8:20:ab:d9:3f:
                    f6:2e:ad:b5:0e:13:73:d7:02:3c:19:07:63:47:2e:
                    27:26:0a:c7:f0:af:02:22:27:00:19:03:0b:a5:b7:
                    3c:a0:bc:82:70:d5:7c:d3:c6:3e:ce:86:69:13:06:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:11:D8:48:3D:01:EE:7D:3D:DC:F5:36:97:6C:9C:1E:58:BE:9A
            X509v3 Authority Key Identifier:
                keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:e9:4a:ab:71:1f:51:b7:7a:2d:a3:2b:5c:24:8f:d7:e7:
         83:86:2a:72:47:c7:7b:6b:df:50:80:31:33:7d:fa:f4:ab:5d:
         17:23:83:e9:ea:38:cc:0f:59:30:e8:76:b5:f9:77:97:5b:0c:
         7c:7f:45:e1:88:ac:39:4e:27:b1:c7:ab:8c:b3:ce:55:2d:18:
         91:de:52:83:5a:86:76:ae:15:f9:69:a6:95:bb:df:3f:6b:00:
         8e:0b:74:33:5c:6a:8b:92:df:ac:8d:4d:27:84:02:fa:c7:af:
         c9:59:d5:06:b0:1b:8f:8c:02:99:8a:e3:e5:3a:db:25:f9:9a:
         ea:eb:8d:38:0b:d6:e7:5a:d8:cb:55:f2:27:e9:68:c3:3e:6c:
         50:d2:03:4c:2e:14:12:cd:3c:e8:a1:d4:f2:2a:76:03:a4:4c:
         e8:78:4d:2e:83:38:a4:d5:75:c9:69:01:7f:c1:8d:e2:3a:82:
         c1:5f:9d:be:ec:1f:31:17:f1:7e:0d:31:16:67:38:66:b8:0d:
         a2:66:d8:98:70:1c:86:72:c1:a8:e0:f7:c1:ec:aa:70:60:6a:
         a8:25:af:5f:70:f3:b4:86:70:f7:27:69:14:39:6e:d9:b0:05:
         9a:32:2c:fb:88:f3:08:a0:2b:7f:d6:3c:1c:26:55:ee:a8:8a:
         4b:0f:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:34 2026 by rpki-client