Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
File:                     wJLY1VEbGezkVpYPI7-ohu4dVws.mft (raw, json)
Hash identifier:          8szLoTqnIIMNJmCOgwDnw+e4B3ARW3Kk8FbHklH1t1U=
Subject key identifier:   2B:6E:60:BC:4E:C2:8F:30:6A:B2:39:55:15:31:95:A9:05:42:6A:05
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Certificate issuer:       /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial:       019F81F977B7AB77B8A0A21187F871E4C311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
Manifest number:          19CD
Signing time:             Tue 21 Jul 2026 00:00:37 +0000
Manifest this update:     Tue 21 Jul 2026 00:00:37 +0000
Manifest next update:     Wed 22 Jul 2026 00:00:37 +0000
Files and hashes:         1: IHwozVBM-INdwAb4BanODhPGLiI.roa (hash: 1/oeq5jje77YZDjelRYgYRU0FA3dhh29FV04+WbtmT0=)
                          2: RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa (hash: oZzyvKvR9r/Ihr+p+Nj3IAiIjLpAhI404TTQt+EMmaU=)
                          3: XPyrFETzbIf4UTMJJTPgIXwXkgo.roa (hash: rpIh/S9npo0EEK8J2sqDjrTLl9P72OOEfi3A9r/XVnw=)
                          4: wJLY1VEbGezkVpYPI7-ohu4dVws.crl (hash: kZBChGSJU9FEVaav97CA/pg1e8UJlIKslUVz/FPl9jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:77:b7:ab:77:b8:a0:a2:11:87:f8:71:e4:c3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
        Validity
            Not Before: Jul 21 00:00:37 2026 GMT
            Not After : Jul 22 00:00:37 2026 GMT
        Subject: CN=2b6e60bc4ec28f306ab23955153195a905426a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:f0:b5:cd:62:fb:e2:dc:40:a9:ea:80:2c:
                    e3:80:59:2e:5c:7c:2f:0e:08:49:79:5a:7e:ee:6a:
                    68:a6:da:2b:85:e6:8c:76:e8:8f:40:04:9c:31:1a:
                    85:d4:29:12:3e:8a:e3:86:ce:25:b9:11:3b:f5:ce:
                    9f:d5:eb:76:09:11:7b:0c:6f:12:3c:c1:3e:a2:f3:
                    4f:4c:01:a1:66:a4:a2:31:23:ec:61:ae:e1:93:e1:
                    8a:fd:f6:c9:dc:04:f5:a6:58:76:4d:53:fd:83:a4:
                    ef:4a:07:f7:0c:68:4d:08:58:07:c1:a0:97:1e:1a:
                    bb:dc:03:8e:43:e5:46:dd:8b:17:33:4e:02:e2:ea:
                    64:2d:ce:b4:51:35:46:e2:5f:83:2a:e2:4a:e6:16:
                    1c:c2:40:b9:cf:ee:ba:a2:6c:6d:91:37:9e:69:aa:
                    39:2c:14:a5:87:e6:ec:ec:43:06:41:36:ee:57:23:
                    e6:11:22:e4:fb:92:a3:9a:b3:01:46:3b:c8:dd:b4:
                    3e:eb:b9:a0:03:5c:0d:fc:6d:43:4c:7e:d1:e2:2c:
                    69:8b:0f:c8:fb:0d:ef:a4:4d:92:c3:8c:a9:7e:c1:
                    62:5c:a7:15:20:24:27:41:1f:4a:3f:a2:dd:bc:4c:
                    51:43:f9:8c:ba:44:28:f7:03:eb:31:e6:d4:0f:a0:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:60:BC:4E:C2:8F:30:6A:B2:39:55:15:31:95:A9:05:42:6A:05
            X509v3 Authority Key Identifier:
                keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:67:a3:e5:70:71:1a:e7:bf:c8:10:a1:48:5e:9f:99:58:
         32:38:d4:dd:e4:f4:be:0e:38:30:38:b3:74:93:30:32:95:a9:
         05:ac:54:64:a5:48:02:d1:d2:3e:ea:6f:04:a3:c5:6f:06:40:
         26:70:b8:04:12:0a:80:90:4b:84:ad:82:b0:d0:49:f8:d4:8a:
         ad:f4:11:70:d3:17:96:9f:fb:69:91:61:f7:f0:b3:f3:40:df:
         5e:1d:25:32:15:1b:22:80:fb:c1:12:59:1c:f5:cc:5f:9d:27:
         f3:e8:59:14:d3:e1:7c:c4:bb:80:26:31:ec:c1:54:df:42:77:
         90:43:70:04:2d:e1:85:65:a6:7d:ac:7e:49:bd:78:09:c9:86:
         94:c5:e0:de:cf:a2:f3:f1:7f:89:0f:ee:c3:91:f6:20:e9:fb:
         db:62:fc:ac:87:90:aa:ed:ab:a2:51:d3:50:2f:98:b2:33:b8:
         1a:2b:e6:85:9c:b0:89:8f:1b:3f:c1:5f:ba:a6:b8:07:a5:36:
         84:b1:0d:10:14:d5:34:51:b7:d7:b6:c5:9b:88:77:ba:ff:5b:
         e5:7b:2c:56:b4:86:7b:bf:12:a1:f3:27:c5:21:16:99:0c:04:
         9a:89:2b:94:46:0f:95:f9:df:7b:5d:99:f0:71:dd:54:41:eb:
         18:1d:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:19 2026 by rpki-client