Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          YFr0eDgoBQywhHRWQk9rlwfhHhH1XF9R/QyFe5X4yac=
Subject key identifier:   24:BA:3D:4C:53:8F:7D:D9:18:C7:69:9D:70:93:15:41:37:2E:6B:43
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019FA0DF9188741072163A9B96C7C175DA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          0369
Signing time:             Mon 27 Jul 2026 00:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:34 +0000
Files and hashes:         1: W9NokyXaMzMGQz2rT0ueVLsJj_c.roa (hash: H8qWbLTHoDh177+NLvlgjLRNqnjZkh6wnZIU1T8Kptk=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: iCzLNHOHg3yHKGWaRvF9F246vXrc+njcwu4Q0zAr9A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:91:88:74:10:72:16:3a:9b:96:c7:c1:75:da:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Jul 27 00:00:34 2026 GMT
            Not After : Jul 28 00:00:34 2026 GMT
        Subject: CN=24ba3d4c538f7dd918c7699d70931541372e6b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:4d:4d:13:90:61:a5:45:28:c1:0b:a5:2e:
                    66:d9:64:f8:2a:94:55:88:6f:bd:22:64:3d:08:4a:
                    e5:f4:00:9b:86:37:6f:a8:6e:dd:66:d7:0c:83:2e:
                    13:40:03:67:38:47:70:ed:99:ba:a4:a2:21:cc:14:
                    c8:5b:8c:18:5a:fc:42:d0:e8:26:ab:c2:cc:58:ca:
                    fb:44:2d:88:61:ba:98:c1:87:91:45:6c:e9:ff:af:
                    f8:ac:d8:b1:a1:8b:4e:4f:66:c0:a7:9e:48:3d:53:
                    a6:f3:ed:5b:4e:8c:b8:64:dc:e8:fe:65:b2:93:4f:
                    4c:1f:1c:24:72:20:de:ac:e2:5f:eb:2c:7a:5c:05:
                    33:74:0b:fc:88:6a:92:9f:6d:5f:da:0f:35:fc:34:
                    64:f7:cb:8b:75:e8:e4:86:32:ec:1b:2a:bd:c7:76:
                    42:30:8c:85:08:1f:44:f7:a8:cc:d6:fc:fb:94:5f:
                    1e:c8:27:45:cd:73:06:f5:a4:fd:1d:13:78:b2:82:
                    66:50:df:71:cd:b7:fc:84:91:eb:e9:5a:42:ee:87:
                    85:58:7b:81:78:99:df:1a:cf:89:1a:45:ef:d6:9c:
                    4f:db:e9:e8:82:ff:58:31:9c:25:89:59:76:3d:4c:
                    16:a7:28:df:b6:92:23:0c:9c:60:bb:e5:8a:d4:83:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BA:3D:4C:53:8F:7D:D9:18:C7:69:9D:70:93:15:41:37:2E:6B:43
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:89:6c:cd:bf:4e:3c:9f:ba:83:15:77:3b:fd:58:96:fb:d9:
         a8:54:e3:8e:56:c5:5a:6d:b8:6b:06:4a:4c:1e:85:7d:1d:5d:
         b3:7c:b4:84:ee:7a:43:a3:24:58:0f:cb:6d:97:d3:03:e4:22:
         f0:77:12:ec:ac:a7:e3:eb:32:a7:00:2f:9e:bf:6f:44:f6:6b:
         7f:96:1f:89:09:c6:fe:a0:c3:02:9b:4d:7a:61:be:18:54:0f:
         1c:6e:21:3c:ff:33:e0:b0:0e:43:ec:61:f6:5f:a8:bd:bb:bf:
         83:63:d3:16:48:cd:eb:13:78:de:1d:77:cd:af:e9:62:62:0f:
         d9:7e:14:8d:79:9c:2b:fd:1f:64:fd:0b:ea:0f:84:4e:d3:fc:
         ea:0b:54:fe:31:ad:78:89:c3:88:5b:f7:cd:34:93:c4:84:c7:
         28:c5:00:e6:33:28:f1:ce:b0:57:b1:01:d6:b9:cd:a9:bf:16:
         d6:8b:d9:d8:34:57:bc:ea:30:49:41:de:23:90:73:04:65:76:
         d7:83:d0:83:3a:59:29:14:40:33:3e:ad:0b:1a:8b:9d:22:38:
         34:a7:bb:97:c9:e4:74:20:88:60:85:29:a2:ca:b5:7c:05:f1:
         91:d3:1e:97:b3:5f:2b:91:a7:25:f1:19:75:f3:76:8e:9b:d0:
         fa:20:b7:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g35GIdBByFjqblsfBddpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYwNzI3MDAwMDM0WhcNMjYwNzI4MDAwMDM0WjAzMTEwLwYDVQQD
EygyNGJhM2Q0YzUzOGY3ZGQ5MThjNzY5OWQ3MDkzMTU0MTM3MmU2YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1FNTROQYaVFKMELpS5m2WT4KpRV
iG+9ImQ9CErl9ACbhjdvqG7dZtcMgy4TQANnOEdw7Zm6pKIhzBTIW4wYWvxC0Ogm
q8LMWMr7RC2IYbqYwYeRRWzp/6/4rNixoYtOT2bAp55IPVOm8+1bToy4ZNzo/mWy
k09MHxwkciDerOJf6yx6XAUzdAv8iGqSn21f2g81/DRk98uLdejkhjLsGyq9x3ZC
MIyFCB9E96jM1vz7lF8eyCdFzXMG9aT9HRN4soJmUN9xzbf8hJHr6VpC7oeFWHuB
eJnfGs+JGkXv1pxP2+nogv9YMZwliVl2PUwWpyjftpIjDJxgu+WK1IPgdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS6PUxTj33ZGMdpnXCTFUE3LmtDMB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIlszb9O
PJ+6gxV3O/1YlvvZqFTjjlbFWm24awZKTB6FfR1ds3y0hO56Q6MkWA/LbZfTA+Qi
8HcS7Kyn4+sypwAvnr9vRPZrf5YfiQnG/qDDAptNemG+GFQPHG4hPP8z4LAOQ+xh
9l+ovbu/g2PTFkjN6xN43h13za/pYmIP2X4UjXmcK/0fZP0L6g+ETtP86gtU/jGt
eInDiFv3zTSTxITHKMUA5jMo8c6wV7EB1rnNqb8W1ovZ2DRXvOowSUHeI5BzBGV2
14PQgzpZKRRAMz6tCxqLnSI4NKe7l8nkdCCIYIUposq1fAXxkdMel7NfK5GnJfEZ
dfN2jpvQ+iC3Lg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:59:12 2026 by rpki-client