Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File:                     wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier:          4CTvcbVznNVL9AWLBQWjr53TT5KlcrXUZ2mNFGWN5Zs=
Subject key identifier:   04:93:84:AC:78:D4:9B:7F:0B:40:3D:1A:8C:57:98:8A:C4:F2:0F:C8
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer:       /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial:       019F36E05BC9A29C071D1790176288AB0CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number:          0FDD
Signing time:             Mon 06 Jul 2026 10:01:40 +0000
Manifest this update:     Mon 06 Jul 2026 10:01:40 +0000
Manifest next update:     Tue 07 Jul 2026 10:01:40 +0000
Files and hashes:         1: JuDeFJbO_wXZjBIE6eYSc7boKCs.roa (hash: MAfICq2fQmDbk85foSo683rw0p189TufeECHZ/PelUo=)
                          2: nPEounEr9Dlrb0BmzADGVTeSqtg.roa (hash: WNJB2u1ILoanF+nGeSCzXfM+9cLuf8G8/18OGH9ztZ8=)
                          3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: NvUU/UEn347MxkaU+Edhnlw69GMacUkH7JyzBCsKHN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:e0:5b:c9:a2:9c:07:1d:17:90:17:62:88:ab:0c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
        Validity
            Not Before: Jul  6 10:01:40 2026 GMT
            Not After : Jul  7 10:01:40 2026 GMT
        Subject: CN=049384ac78d49b7f0b403d1a8c57988ac4f20fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:c2:c9:3a:b3:f7:ab:e7:c5:d0:ae:7b:dc:
                    fb:54:53:72:ad:01:d8:86:49:7d:81:10:82:33:c6:
                    25:28:9d:78:81:85:29:66:a6:e2:e0:c0:4a:95:10:
                    b6:43:2b:2c:b8:9a:ea:f0:50:92:85:f5:a0:0e:5c:
                    46:05:8d:25:73:31:ad:fc:89:28:9b:59:36:87:04:
                    65:10:14:af:b8:3e:dd:60:5b:e0:08:ed:19:84:27:
                    42:1e:ac:a6:91:16:f1:c5:5e:25:0a:1b:2f:c8:48:
                    41:47:dd:ad:c7:e3:b6:a5:fa:fc:22:71:cb:d2:c9:
                    12:64:b2:e0:47:c0:5c:83:60:d4:1b:91:6c:aa:bd:
                    a1:9f:16:95:92:42:bd:9c:f8:bb:3a:e4:d3:62:4f:
                    db:1a:ed:4e:6a:e1:b0:2b:c9:95:7c:c6:f6:ab:93:
                    67:0c:68:d6:72:11:18:8f:64:9e:10:f7:26:2e:16:
                    b1:7a:cb:f2:d8:73:30:82:18:0d:40:8b:e9:dc:3f:
                    95:dc:56:87:5e:c4:3e:8a:54:74:4c:a6:d8:1d:d8:
                    9b:7c:0b:d1:69:64:ab:ff:fb:f6:20:a8:c7:be:9d:
                    73:b1:85:f6:c7:87:54:7f:16:be:42:6d:47:b6:55:
                    4a:7c:74:61:bf:66:9b:60:8c:1d:9d:ef:9c:ef:41:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:93:84:AC:78:D4:9B:7F:0B:40:3D:1A:8C:57:98:8A:C4:F2:0F:C8
            X509v3 Authority Key Identifier:
                keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:53:07:11:c0:ee:3b:94:5a:e0:92:20:5a:cc:2c:74:6d:
         d6:28:82:2f:e8:69:53:22:05:5e:c2:09:ea:67:20:72:56:44:
         d0:fa:d7:ad:3f:ba:be:6a:4c:f1:09:a2:4f:68:8f:34:3e:64:
         d1:b5:d7:6d:da:71:19:f0:50:ab:bf:b1:f7:45:e5:00:40:4b:
         cb:32:04:7a:d6:52:69:51:3c:b0:4d:6b:52:ba:da:10:06:e8:
         03:e3:a1:53:c4:e1:7f:bd:3e:ae:21:e0:b0:46:6f:bd:a0:cc:
         56:ec:39:2c:32:13:5d:16:db:ba:40:af:c1:6f:61:3e:04:7e:
         7b:79:9e:94:9c:9a:fe:58:80:b4:3a:b2:b6:3c:42:8c:b1:64:
         ae:cd:47:94:0e:ac:18:10:d3:8d:56:da:76:86:73:f9:10:35:
         23:99:f0:49:af:d1:68:32:c0:db:66:82:af:52:d2:50:4a:09:
         8c:c4:48:9a:04:93:43:05:46:8e:36:e8:49:ac:97:e5:f9:ef:
         f5:b4:ac:55:a0:f4:2b:9b:63:46:98:fb:d6:b1:38:8f:bf:94:
         0b:f5:34:70:18:e0:74:d5:a4:7e:3d:8d:fa:27:95:ab:e1:e1:
         68:02:69:28:05:9c:03:56:ea:6c:77:96:b6:b4:b2:de:1b:0b:
         a3:48:bc:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ824FvJopwHHReQF2KIqwy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw
NThiNTYwHhcNMjYwNzA2MTAwMTQwWhcNMjYwNzA3MTAwMTQwWjAzMTEwLwYDVQQD
EygwNDkzODRhYzc4ZDQ5YjdmMGI0MDNkMWE4YzU3OTg4YWM0ZjIwZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJvCyTqz96vnxdCue9z7VFNyrQHY
hkl9gRCCM8YlKJ14gYUpZqbi4MBKlRC2QyssuJrq8FCShfWgDlxGBY0lczGt/Iko
m1k2hwRlEBSvuD7dYFvgCO0ZhCdCHqymkRbxxV4lChsvyEhBR92tx+O2pfr8InHL
0skSZLLgR8Bcg2DUG5Fsqr2hnxaVkkK9nPi7OuTTYk/bGu1OauGwK8mVfMb2q5Nn
DGjWchEYj2SeEPcmLhaxesvy2HMwghgNQIvp3D+V3FaHXsQ+ilR0TKbYHdibfAvR
aWSr//v2IKjHvp1zsYX2x4dUfxa+Qm1HtlVKfHRhv2abYIwdne+c70HHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASThKx41Jt/C0A9GoxXmIrE8g/IMB8GA1UdIwQY
MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt
OWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1
LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerhTBxHA
7juUWuCSIFrMLHRt1iiCL+hpUyIFXsIJ6mcgclZE0PrXrT+6vmpM8QmiT2iPND5k
0bXXbdpxGfBQq7+x90XlAEBLyzIEetZSaVE8sE1rUrraEAboA+OhU8Thf70+riHg
sEZvvaDMVuw5LDITXRbbukCvwW9hPgR+e3melJya/liAtDqytjxCjLFkrs1HlA6s
GBDTjVbadoZz+RA1I5nwSa/RaDLA22aCr1LSUEoJjMRImgSTQwVGjjboSayX5fnv
9bSsVaD0K5tjRpj71rE4j7+UC/U0cBjgdNWkfj2N+ieVq+HhaAJpKAWcA1bqbHeW
trSy3hsLo0i82Q==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:13 2026 by rpki-client