Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          ajYlOGNI7xLyrb5cFa4Oh8iELa8Hg6jOdAzOokKBIyU=
Subject key identifier:   6D:C3:D2:BA:7E:8D:CC:4A:90:FD:B6:B7:24:E0:A0:8B:79:E2:EC:B9
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       019F85311C3D62E34E27CDE2362E6A25E329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 15:00:15 +0000
Manifest this update:     Tue 21 Jul 2026 15:00:15 +0000
Manifest next update:     Wed 22 Jul 2026 15:00:15 +0000
Files and hashes:         1: E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa (hash: y8rSEBRdZoC/DsraWGFCwBOgPT4J+IhEzX382mx+Nv0=)
                          2: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: 7ce70K7SjyoVXRvArRmiL7wZcvQtEl/mps3CbIUuKqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:1c:3d:62:e3:4e:27:cd:e2:36:2e:6a:25:e3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Jul 21 15:00:15 2026 GMT
            Not After : Jul 22 15:00:15 2026 GMT
        Subject: CN=6dc3d2ba7e8dcc4a90fdb6b724e0a08b79e2ecb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:e5:a5:52:ab:aa:ca:7c:0a:37:47:f7:1b:
                    fb:91:57:51:68:38:d8:e7:1a:a5:d7:a4:f1:7c:cc:
                    1a:c3:b3:3d:67:cb:fb:f5:d5:c5:01:07:94:95:dd:
                    46:26:81:b9:c3:e4:d8:44:17:59:fe:ac:42:f7:5e:
                    4f:69:36:32:9c:4c:1e:45:1b:96:73:f4:20:5c:4e:
                    25:4a:cd:5d:03:f4:a8:aa:27:df:54:34:86:e1:d0:
                    d1:82:48:32:17:dd:12:7f:aa:6d:33:8e:e1:90:b1:
                    b4:15:5f:f4:41:c6:b5:9f:7c:65:a6:92:f3:39:54:
                    ae:18:ab:03:e8:91:32:d1:b1:32:7c:1a:8a:6b:a7:
                    bc:e5:a8:09:a8:50:3d:2c:6a:44:80:79:25:3c:e4:
                    cc:cd:a5:2f:e7:6d:44:70:c1:5f:ad:b4:ea:16:23:
                    af:ab:0f:ec:d6:33:2c:ce:d8:51:46:d6:bb:95:fa:
                    20:0c:cb:47:98:bf:2a:d7:f7:95:ce:d5:3f:d2:5c:
                    23:b8:5e:84:c9:c9:5c:3d:04:ab:0e:d6:83:51:4c:
                    83:7b:75:22:71:fc:14:72:21:e1:af:75:e6:65:23:
                    30:50:73:81:71:68:3f:04:13:aa:9b:84:92:88:cf:
                    f7:41:4c:db:24:c7:fd:48:ce:9d:2a:b1:4d:00:15:
                    13:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C3:D2:BA:7E:8D:CC:4A:90:FD:B6:B7:24:E0:A0:8B:79:E2:EC:B9
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a2:ad:a8:68:29:b3:02:0b:7f:5e:a3:6a:7f:eb:ea:53:3f:
         f9:c5:56:de:f6:56:6b:0e:24:bf:c5:42:8e:5c:0f:86:8a:5c:
         8e:93:d8:dd:5a:71:91:0b:06:b0:8b:72:38:c2:fc:ca:c1:dd:
         28:4e:4f:63:c8:ba:d4:d4:34:9e:71:68:0b:d3:cc:cf:ec:1c:
         fd:5d:c9:52:ba:71:fb:e9:ef:b3:3f:86:3a:82:90:2e:c4:de:
         bb:fd:df:24:d9:d9:9f:2a:84:99:f5:a9:35:6a:c9:a6:05:81:
         b5:0c:bd:fe:78:68:0f:62:11:ba:71:bb:9f:f3:68:39:7b:04:
         2e:6b:0d:ba:60:3d:46:ef:05:cd:e7:a6:47:98:fa:86:03:9e:
         f4:79:1c:c8:5a:f0:5f:be:68:0d:2f:15:6a:0b:02:73:f6:d7:
         13:74:94:44:ff:9f:c3:99:40:f4:44:95:ee:b6:4b:77:35:f6:
         e3:58:e9:2b:e8:87:c6:0e:50:7d:18:8a:be:f3:fa:62:5c:f1:
         dd:14:84:14:e4:bf:d3:9e:8a:b7:7f:22:31:19:48:e1:c6:ae:
         67:1e:50:68:55:e6:43:08:d7:98:33:38:23:64:bf:1e:9a:e1:
         ca:a4:86:b6:4d:e7:3c:ad:7f:c8:36:62:dc:a3:75:cc:b5:0e:
         78:d8:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:37 2026 by rpki-client