Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File:                     WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier:          xgZjm0efvrZxZDsUBooPt0FEXA2GWJRVt8TaeNMkFps=
Subject key identifier:   AD:19:B0:6E:FB:04:A6:C5:60:00:1F:74:97:09:A1:3C:D1:17:F8:25
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer:       /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial:       01A002822FD9A3485F41BEEBB5BBC558F2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number:          0F52
Signing time:             Fri 14 Aug 2026 23:01:21 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:21 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:21 +0000
Files and hashes:         1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
                          2: BDv1bnHvaLtWajfUeKcw3pIG_Ok.roa (hash: 69EUlopn2Prmu5cUFMolg4m3eko2E4egAqnT2et0qIE=)
                          3: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: cs6h2SF/Oz9fEpvPFLm+yHc0GYJnpqMPF8YM0SxrLuI=)
                          4: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (hash: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=)
                          5: r_8bT90UjcZl-MvxK-5tmdznS1I.roa (hash: +kBFEQDnTe7FZB/GY9jWIpmDn/+p706IcANeKk3b/o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:2f:d9:a3:48:5f:41:be:eb:b5:bb:c5:58:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
        Validity
            Not Before: Aug 14 23:01:21 2026 GMT
            Not After : Aug 15 23:01:21 2026 GMT
        Subject: CN=ad19b06efb04a6c560001f749709a13cd117f825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:b2:f8:6b:e2:f8:61:9c:36:5f:9f:39:f7:
                    c2:4d:55:a5:20:83:c4:5b:48:1c:d9:bd:45:a0:43:
                    79:c0:8c:2d:84:5f:98:e3:3b:be:19:c1:94:25:89:
                    a4:ad:a5:62:36:ba:49:76:a6:af:38:99:d9:c5:49:
                    2d:b0:c7:fd:0a:a5:99:3f:7c:90:6d:1a:53:12:b9:
                    27:f7:c7:30:ea:ed:be:d0:3b:81:ba:13:f5:06:84:
                    a4:09:a1:f3:85:77:12:8f:2c:9f:5d:a6:64:5a:08:
                    ad:18:54:00:fb:9b:59:75:9d:9d:11:60:52:04:f5:
                    4b:c3:4c:a1:12:56:0b:e8:48:79:4f:a7:a3:a8:ef:
                    6d:e3:c2:9c:54:f7:14:4c:d7:ca:71:f1:c6:64:b6:
                    86:a5:88:d1:e9:2e:6e:91:73:8f:3a:23:ca:cb:63:
                    b4:ec:e2:f1:11:11:5b:80:f0:1f:a0:ae:3e:0f:c3:
                    51:67:9b:f8:9d:34:d7:9c:d6:90:60:d1:de:94:65:
                    71:f5:3b:3d:a1:dc:a0:04:ed:8a:96:c5:73:8e:17:
                    bd:cd:3d:13:1e:f3:bf:07:f7:9d:70:0f:fa:c5:97:
                    38:a6:45:b3:16:5e:2f:7a:9f:dd:d3:c8:9a:4c:98:
                    d9:13:af:7f:ec:32:7a:00:2f:1b:2b:a6:cf:da:29:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:B0:6E:FB:04:A6:C5:60:00:1F:74:97:09:A1:3C:D1:17:F8:25
            X509v3 Authority Key Identifier:
                keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:67:dd:41:a6:27:1e:ee:72:50:f4:f2:c7:af:fd:cd:e7:2d:
         42:8b:b7:26:11:c3:9f:a2:b8:2f:f5:b7:78:c9:4f:00:3f:60:
         9d:cf:3a:44:ab:77:f3:9b:c4:69:00:9b:20:d4:98:e6:23:89:
         79:ab:4a:76:24:02:17:9c:78:3b:e8:fc:53:f1:60:72:62:2e:
         57:ad:de:c6:2d:5a:ee:3d:ed:37:7c:79:a8:f0:c2:fa:ed:de:
         92:4b:07:62:85:03:e7:ce:44:5c:d3:a5:a2:a3:9d:a4:04:2d:
         f8:df:d0:c4:e1:09:50:7b:d3:0d:c0:85:5f:73:1a:98:8c:ca:
         fe:e5:3b:74:ee:cc:fd:a7:df:db:af:af:be:29:c9:56:3e:65:
         fb:6f:7f:5f:62:11:89:8c:ee:85:8c:b7:c3:83:4d:fa:59:2d:
         3d:c3:1c:13:2b:9f:a5:2d:19:a2:f0:13:39:03:af:ac:c1:a0:
         56:96:64:8a:9d:e8:3d:0a:4e:f5:f9:f5:3f:b2:b9:65:f4:bb:
         86:db:0f:d9:0c:6b:5d:f2:44:b0:95:5c:10:9f:b6:d8:41:da:
         8d:a8:39:bb:ca:9c:c5:fd:77:90:2d:01:f6:bf:2c:10:74:31:
         30:08:c9:48:69:ac:b0:38:0b:e1:89:a2:4f:e0:6a:d8:42:32:
         c6:40:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:46:02 2026 by rpki-client