Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.mft
File:                     wFx86nTnPpowHk5W0aPqtsVhgUI.mft (raw, json)
Hash identifier:          ZkhPfCBanDk8BUFY57s9ec82MZonvNreEWvxplJA6hw=
Subject key identifier:   03:07:14:00:61:8C:C6:18:A7:DF:18:E7:3C:25:54:B3:CE:B5:81:42
Authority key identifier: C0:5C:7C:EA:74:E7:3E:9A:30:1E:4E:56:D1:A3:EA:B6:C5:61:81:42
Certificate issuer:       /CN=c05c7cea74e73e9a301e4e56d1a3eab6c5618142
Certificate serial:       019FA0E0ABBE9C0ED8616D345EA63E82262C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFx86nTnPpowHk5W0aPqtsVhgUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:46 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:46 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:46 +0000
Files and hashes:         1: S_QgEETqx9KpPIRwcQVFMEL7LF8.roa (hash: jH5TQpwCqfRzsGNl3XVhiPbeVJA/1Lpq6VQ1p2H+ADo=)
                          2: wFx86nTnPpowHk5W0aPqtsVhgUI.crl (hash: 2NICFOZNhIqeUD+yTCxlgmF8H4YdiLta2meJ26G0yys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFx86nTnPpowHk5W0aPqtsVhgUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:ab:be:9c:0e:d8:61:6d:34:5e:a6:3e:82:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05c7cea74e73e9a301e4e56d1a3eab6c5618142
        Validity
            Not Before: Jul 27 00:01:46 2026 GMT
            Not After : Jul 28 00:01:46 2026 GMT
        Subject: CN=03071400618cc618a7df18e73c2554b3ceb58142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:10:ed:29:9c:60:bc:ff:7a:f5:1f:89:a6:
                    58:ab:23:a7:5d:e1:a6:1d:e3:3e:b4:00:c5:f2:c1:
                    bc:3b:5f:70:95:fa:1b:8c:d1:a8:3b:c5:71:9b:94:
                    5c:a8:71:19:55:f3:44:5e:dd:7d:bd:66:4f:0e:bb:
                    16:23:f3:8b:36:b2:a6:a1:fb:87:08:c1:19:f0:03:
                    d2:97:c8:4a:28:4f:5b:9a:f4:49:a5:b6:dd:d6:1b:
                    b7:3a:9a:ac:ee:09:bd:fc:2e:49:de:bd:63:7b:0c:
                    e4:af:40:5a:ca:41:15:00:3d:be:81:b3:e2:11:63:
                    2a:5b:cc:84:50:17:68:e7:c6:7c:76:1a:f6:43:28:
                    97:54:ba:9f:40:fb:47:5c:af:e1:67:e8:8b:05:ff:
                    7c:c8:19:69:f1:bf:f7:22:8d:e4:0d:32:19:ed:09:
                    45:96:25:6d:37:e6:66:78:5d:88:6e:34:1b:b8:5a:
                    08:2a:f7:7e:9b:6c:8b:a0:3e:d9:6c:ef:22:da:10:
                    da:6c:dc:79:67:a5:0e:33:f0:9b:a0:05:dd:0f:b7:
                    e8:5c:9e:28:c0:c5:b7:c1:82:1a:e7:0d:13:85:d6:
                    f4:0a:6c:c3:33:bf:7d:aa:7b:f2:f1:1f:b9:1c:99:
                    88:d8:d9:e1:d3:9e:43:93:3b:aa:ca:3d:67:24:7b:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:14:00:61:8C:C6:18:A7:DF:18:E7:3C:25:54:B3:CE:B5:81:42
            X509v3 Authority Key Identifier:
                keyid:C0:5C:7C:EA:74:E7:3E:9A:30:1E:4E:56:D1:A3:EA:B6:C5:61:81:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFx86nTnPpowHk5W0aPqtsVhgUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:19:cd:8c:4f:0e:a7:f0:8d:cc:9b:f7:cd:67:6a:f2:87:
         c0:ee:01:a4:19:61:35:6e:6d:41:c7:bc:aa:8e:60:30:2d:77:
         31:a0:98:8a:be:2f:c4:dc:3e:3b:82:70:52:33:e2:c4:c8:55:
         84:11:13:39:59:8d:bb:de:1c:60:37:3a:a1:f3:88:1a:79:87:
         0c:85:b6:fd:2e:6e:1e:22:55:5a:96:7b:7e:73:62:63:ec:48:
         84:5b:30:0d:16:6f:dc:2f:aa:f7:fd:82:6c:c5:b6:24:c6:33:
         5b:3f:9e:21:b3:3d:62:9a:3a:28:9d:48:92:1f:d1:6b:fd:11:
         63:07:d3:5b:76:14:c3:27:21:bc:f5:71:7c:94:d6:b5:89:2b:
         fc:30:ae:9b:15:e6:45:ce:5c:c9:09:f3:e7:8a:b3:65:b8:34:
         7e:84:71:43:53:ae:bc:9d:61:3e:d1:aa:cf:7e:98:36:59:61:
         f4:8d:0d:a1:80:ac:3d:71:ff:f1:9b:b2:7e:64:31:85:79:48:
         7d:9f:11:56:80:b2:44:81:0f:f9:c0:2a:e3:d8:0d:45:55:8a:
         00:ec:2d:32:05:7a:08:14:d6:2e:5e:65:f9:4b:6e:e9:ae:28:
         a4:cb:78:19:af:d5:17:cf:05:ca:23:52:4f:1f:f3:31:fa:8d:
         0a:2e:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:21:55 2026 by rpki-client