Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File:                     wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier:          en98Jx0WgnZ+JhgBOhQADM5KfTBKCfHGwmEdOXSX2ys=
Subject key identifier:   C5:4D:CB:EF:80:03:FD:01:E7:A6:45:6A:23:98:A3:6B:10:60:74:85
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer:       /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial:       019FA1BB767AD681CC9ED3E2F7A07EF0AAE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number:          07ED
Signing time:             Mon 27 Jul 2026 04:00:45 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:45 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:45 +0000
Files and hashes:         1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
                          2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 410nNEpyel0F3mQeggXbYT4RPs9fp5zDRBbb0pJ89ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:76:7a:d6:81:cc:9e:d3:e2:f7:a0:7e:f0:aa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
        Validity
            Not Before: Jul 27 04:00:45 2026 GMT
            Not After : Jul 28 04:00:45 2026 GMT
        Subject: CN=c54dcbef8003fd01e7a6456a2398a36b10607485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:bf:14:4f:ac:02:7c:3a:8e:21:e2:4f:45:
                    28:eb:16:58:23:6f:26:92:a0:75:cb:ea:14:9c:f3:
                    ee:fa:cc:ec:f2:a4:38:61:09:2c:0c:ef:51:62:71:
                    2d:42:cb:03:bb:87:a0:4b:b4:d7:d9:6d:ee:d6:2b:
                    de:ed:a5:3d:2a:fc:18:34:2f:cb:70:de:ff:0f:1d:
                    67:83:52:d7:82:98:08:1d:3b:d3:94:90:31:2a:05:
                    f7:71:16:b4:99:1d:32:2a:c3:56:19:21:7e:f6:b9:
                    1b:1b:53:e7:b0:27:d4:8a:c3:34:6d:89:3b:9f:8e:
                    01:85:fd:3a:44:48:50:24:e7:8b:5f:b7:86:b7:76:
                    2a:92:b7:83:73:c2:03:7e:23:1b:b2:af:9e:bc:a7:
                    6d:d6:b2:67:30:60:2f:79:c7:23:71:75:da:9e:d9:
                    e0:56:17:aa:ac:e8:89:84:9d:71:53:31:57:82:20:
                    3c:59:61:c1:4f:b2:0a:2b:a6:93:74:5b:6a:86:78:
                    54:d6:3e:5a:59:dd:a3:31:54:74:73:dc:1e:d0:b6:
                    a7:4e:ab:5f:30:dc:75:bd:2e:28:08:6d:71:ac:18:
                    2c:35:70:1d:08:c9:fe:6a:94:7f:8f:f8:73:ce:1c:
                    bc:8f:7f:61:eb:5d:16:4e:3b:55:6e:8e:1c:a8:7d:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4D:CB:EF:80:03:FD:01:E7:A6:45:6A:23:98:A3:6B:10:60:74:85
            X509v3 Authority Key Identifier:
                keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:ec:25:e4:a1:cb:36:c0:c5:d5:2f:d1:75:61:0b:41:a6:
         8c:f0:18:e9:11:e8:bc:11:de:9c:89:4b:40:39:9a:c1:10:3c:
         3a:b8:df:de:25:23:e6:ed:a8:ce:f2:d9:21:e3:38:ee:be:cf:
         7f:c2:89:f6:c9:0b:41:4b:ce:72:b1:e2:ce:86:97:84:91:4b:
         0f:16:3f:b7:08:9c:da:52:c8:3b:14:34:16:db:92:86:04:f5:
         e1:20:ac:31:66:fe:73:ff:45:d7:06:6b:e9:70:e1:aa:77:3a:
         17:e8:ac:f3:88:68:fb:eb:44:53:f3:2b:79:da:9d:5e:4d:34:
         1e:b3:5b:fb:47:99:af:0c:0d:89:8a:7c:b2:d6:0f:07:de:d7:
         15:b8:e8:f7:cb:45:37:77:f9:c6:01:2d:d8:9b:ad:e6:2d:c5:
         61:f6:34:09:32:4d:65:49:8e:78:61:7f:bc:c9:e3:a3:0a:b3:
         5d:60:88:d2:9a:94:59:1f:64:fb:0b:51:10:5e:e8:46:cc:b4:
         30:6b:06:33:de:a3:f2:7b:16:dc:2b:b3:1c:d2:2b:36:26:d1:
         ee:00:a6:66:3f:67:9c:93:39:28:7b:2f:50:6c:25:94:ea:6b:
         85:b5:66:51:d1:98:55:f1:b3:58:7d:0f:2f:3b:f4:42:19:11:
         5a:ac:44:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu3Z61oHMntPi96B+8KroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5
NmEwZjEwHhcNMjYwNzI3MDQwMDQ1WhcNMjYwNzI4MDQwMDQ1WjAzMTEwLwYDVQQD
EyhjNTRkY2JlZjgwMDNmZDAxZTdhNjQ1NmEyMzk4YTM2YjEwNjA3NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWS/FE+sAnw6jiHiT0Uo6xZYI28m
kqB1y+oUnPPu+szs8qQ4YQksDO9RYnEtQssDu4egS7TX2W3u1ive7aU9KvwYNC/L
cN7/Dx1ng1LXgpgIHTvTlJAxKgX3cRa0mR0yKsNWGSF+9rkbG1PnsCfUisM0bYk7
n44Bhf06REhQJOeLX7eGt3YqkreDc8IDfiMbsq+evKdt1rJnMGAveccjcXXantng
VheqrOiJhJ1xUzFXgiA8WWHBT7IKK6aTdFtqhnhU1j5aWd2jMVR0c9we0LanTqtf
MNx1vS4oCG1xrBgsNXAdCMn+apR/j/hzzhy8j39h610WTjtVbo4cqH18jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVNy++AA/0B56ZFaiOYo2sQYHSFMB8GA1UdIwQY
MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt
MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz
LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh17sJeSh
yzbAxdUv0XVhC0GmjPAY6RHovBHenIlLQDmawRA8Orjf3iUj5u2ozvLZIeM47r7P
f8KJ9skLQUvOcrHizoaXhJFLDxY/twic2lLIOxQ0FtuShgT14SCsMWb+c/9F1wZr
6XDhqnc6F+is84ho++tEU/MredqdXk00HrNb+0eZrwwNiYp8stYPB97XFbjo98tF
N3f5xgEt2Jut5i3FYfY0CTJNZUmOeGF/vMnjowqzXWCI0pqUWR9k+wtREF7oRsy0
MGsGM96j8nsW3CuzHNIrNibR7gCmZj9nnJM5KHsvUGwllOprhbVmUdGYVfGzWH0P
Lzv0QhkRWqxEUw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:52 2026 by rpki-client