Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File:                     wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier:          qObJ0zPYf6ey66ZYIpw0jaQzW5sbD46+Ld98fgUnccI=
Subject key identifier:   E7:F8:02:D5:93:0A:97:97:76:0E:33:68:31:C1:44:ED:91:12:FA:F5
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer:       /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial:       019F85D6AE6586F4AF37E22956CE72587329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number:          0CC6
Signing time:             Tue 21 Jul 2026 18:01:06 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:06 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:06 +0000
Files and hashes:         1: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (hash: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM=)
                          2: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: dccYS5iCkHdcUOZXrdKXJa1HOMM939AK1vSrLSmAtUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:ae:65:86:f4:af:37:e2:29:56:ce:72:58:73:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
        Validity
            Not Before: Jul 21 18:01:06 2026 GMT
            Not After : Jul 22 18:01:06 2026 GMT
        Subject: CN=e7f802d5930a9797760e336831c144ed9112faf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:cd:9e:7d:e6:fc:32:d4:1f:ec:b2:0b:fd:
                    79:9b:e3:d3:25:f1:58:5c:59:86:d4:66:fd:9f:47:
                    fa:07:9d:21:a8:c4:db:ed:b5:a2:02:cc:29:47:fa:
                    fe:c4:53:de:29:a4:55:0e:0c:59:fe:46:0c:1c:51:
                    44:69:a6:09:57:30:81:81:74:bf:20:f8:ea:52:a8:
                    59:5c:b5:39:e0:c5:26:22:26:06:9c:11:69:34:e6:
                    05:58:71:5c:12:8c:55:58:5a:3f:12:a1:8b:9d:ab:
                    a5:49:6b:7b:69:58:23:0f:85:b0:14:78:ed:e9:e9:
                    a6:68:05:fd:48:c5:51:75:0d:42:2e:f5:6e:4a:b8:
                    9c:23:74:15:8a:a6:f8:91:c0:3c:ef:2d:67:a8:51:
                    e4:ce:d0:8b:3a:fa:bc:4c:78:91:00:be:76:f9:93:
                    46:58:e4:f7:4e:61:bf:8a:0e:f4:ee:1a:f8:f1:74:
                    6f:13:ee:e7:18:9f:40:0a:0b:ab:89:4a:58:39:a9:
                    15:8f:61:e5:61:9c:1f:b8:b8:ad:ff:6b:bb:0c:5f:
                    0b:25:ec:f2:49:66:8d:fe:7c:a1:89:57:71:94:a2:
                    59:f7:3c:94:92:52:61:fa:2d:b8:07:f3:b4:e5:43:
                    4a:33:fe:f9:66:0b:01:b5:b7:a4:9a:2d:30:fa:3d:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F8:02:D5:93:0A:97:97:76:0E:33:68:31:C1:44:ED:91:12:FA:F5
            X509v3 Authority Key Identifier:
                keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:76:c6:12:ba:47:3c:df:00:88:5c:84:06:c0:2d:52:7f:b2:
         c3:bf:ef:e4:a0:2d:94:0b:91:0d:62:da:cb:55:ec:af:20:03:
         b1:90:37:66:bf:38:5c:cd:c3:60:c6:0b:66:a4:94:57:bd:a2:
         7a:6c:de:6a:93:bc:54:18:30:8f:17:f6:21:50:00:8a:fd:15:
         15:f6:55:f7:56:1d:dc:b7:c5:8f:eb:27:3b:e8:c8:50:05:8e:
         09:f3:72:61:8c:46:31:31:ad:9b:e5:e6:1a:3f:23:c6:1e:96:
         5f:39:e0:9e:7c:69:3f:0c:e6:ad:18:64:76:30:db:04:cf:43:
         f4:c9:9d:e3:e2:4c:cd:d0:32:25:bd:24:b8:85:3a:dd:9b:a9:
         5a:61:21:49:ee:c1:8e:87:78:6c:80:9a:d1:3f:a7:70:ad:2c:
         c8:87:bb:47:8f:ad:32:3f:9f:fa:0c:55:8a:df:12:dc:f7:a4:
         c4:9a:41:22:75:66:a4:f0:54:7d:17:3f:fa:b7:d7:5c:de:2b:
         4c:4c:24:e4:ec:43:28:0e:ae:98:f8:23:7f:31:be:53:5d:cb:
         36:6d:51:2d:76:1e:3a:70:8c:0e:5b:8b:ee:5b:73:bf:2d:ef:
         55:52:d2:85:a0:75:03:d0:21:7f:6c:d8:67:04:e0:f1:0b:38:
         fa:84:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:27 2026 by rpki-client