Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File:                     wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier:          rWr3FU0UaVGy9gdIloeS0LsHG5QPGr1fPNR7s+GeSUs=
Subject key identifier:   DC:F6:3D:D5:50:46:6A:2A:F1:1D:AA:5A:AC:B4:68:6F:8D:E3:07:DC
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer:       /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial:       01A00470ABF0831C0EC4D97A7409C750FF3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number:          0AFE
Signing time:             Sat 15 Aug 2026 08:01:27 +0000
Manifest this update:     Sat 15 Aug 2026 08:01:27 +0000
Manifest next update:     Sun 16 Aug 2026 08:01:27 +0000
Files and hashes:         1: VrmjHVAC_dTFireq6yrVrnJ1Qr8.roa (hash: 3FZStDcO/86XfV9ktKFi/0KRl54/2sqdqVE7Qc6xIko=)
                          2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: iC95TO/zuXe9lpf0+PNdLvzhtJdMDc0gB/sCR0JoPEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:70:ab:f0:83:1c:0e:c4:d9:7a:74:09:c7:50:ff:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
        Validity
            Not Before: Aug 15 08:01:27 2026 GMT
            Not After : Aug 16 08:01:27 2026 GMT
        Subject: CN=dcf63dd550466a2af11daa5aacb4686f8de307dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:2f:36:ff:0c:17:5a:7d:21:b2:b7:9f:3a:
                    c7:e1:e3:16:4d:a9:e3:c1:ee:6b:73:a7:8d:b0:4f:
                    d0:32:0a:27:c3:a7:c9:bd:8c:7e:e3:5f:2c:68:22:
                    4a:e4:1d:10:a9:3c:86:aa:d8:c2:a8:27:00:42:ac:
                    48:c9:f5:3c:e0:6f:9c:5a:d2:ec:f6:05:66:7b:c3:
                    78:8c:d6:27:72:e3:42:f8:10:72:69:bf:74:cd:6c:
                    97:29:6c:95:4d:e9:6d:39:ad:4c:fb:66:75:31:9e:
                    0e:f2:89:cc:f9:74:a3:c4:01:31:79:30:3e:e4:7d:
                    6c:61:da:f0:c7:19:a2:a8:b4:7b:d8:fa:aa:bd:78:
                    77:e2:59:a4:74:1e:80:9d:c9:30:1e:8c:2a:c3:f4:
                    e8:9c:c7:84:05:64:fe:0f:c8:41:35:20:79:6c:f0:
                    dc:e1:77:f2:62:f0:07:0b:68:7c:dc:b1:21:dd:80:
                    a3:f3:ce:76:25:f7:5a:1d:5c:bb:53:7f:46:96:f5:
                    a1:10:44:b0:30:a2:5a:fe:72:73:d6:ed:37:88:65:
                    4a:ef:64:2d:16:0d:d2:47:88:65:a5:fd:41:23:15:
                    fc:9d:f5:41:7d:a3:8e:e8:61:87:b3:10:46:c3:8a:
                    05:14:79:a9:c5:e1:f8:93:6b:b9:6e:bc:98:92:7d:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F6:3D:D5:50:46:6A:2A:F1:1D:AA:5A:AC:B4:68:6F:8D:E3:07:DC
            X509v3 Authority Key Identifier:
                keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5c:66:e9:45:fb:59:9b:1c:30:85:b0:f4:45:e0:00:e5:99:
         15:a3:c7:d2:8f:86:07:23:8d:1d:7d:e9:8b:e0:77:7a:2b:17:
         e1:d2:83:95:cd:b2:fe:57:44:57:9b:4c:b1:46:71:19:d7:40:
         cd:71:1b:9e:ff:56:6f:b7:7a:f0:37:cf:ac:c4:37:d7:de:a8:
         52:7d:43:4d:9b:b7:74:40:1b:7f:60:4e:bd:40:8f:09:80:89:
         5b:a6:77:75:64:cb:45:50:f7:87:4a:91:39:83:a8:cc:dc:99:
         87:a4:5e:4c:62:94:44:68:b5:af:87:59:ba:9d:6d:42:b2:53:
         27:2f:51:3a:67:9b:66:a9:39:98:6a:51:0e:ea:e7:c2:95:89:
         4d:0f:34:32:d0:44:d8:c4:0d:7b:be:da:99:99:d0:0d:fa:97:
         1a:3c:8c:ef:83:a5:f7:0d:31:2b:cd:ab:1a:45:f3:1d:5c:10:
         e4:d5:6c:33:16:39:3e:21:1b:f1:78:21:cb:ed:ff:81:fb:03:
         52:1b:9d:07:5f:05:27:5a:89:1b:85:ce:bd:1e:a5:d2:55:7b:
         fa:6a:6c:3e:48:eb:f3:6a:67:30:84:6b:8f:78:4a:91:f8:6c:
         11:9b:b1:be:99:ba:67:67:5d:4c:07:7c:d4:82:32:aa:32:f8:
         7a:83:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:29:31 2026 by rpki-client