Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
File:                     W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json)
Hash identifier:          Kf3h+iJ50xeZDxaWPd40yVGeVOLJSEsY48iKtOtx9Zg=
Subject key identifier:   B0:B0:24:40:5E:B6:DD:55:29:B9:5D:14:BB:BC:9F:44:E4:AA:11:AE
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Certificate issuer:       /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial:       019F9FCCE9A4024E958471A540000DCD2CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
Manifest number:          19D4
Signing time:             Sun 26 Jul 2026 19:00:34 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:34 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:34 +0000
Files and hashes:         1: D5MpKRfbUjS5EyaGnKFsakcHpCo.roa (hash: 5bLxS+4pOi0Pqzh/iITqagfELgTwJf/wIYlbEjCbczY=)
                          2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: TCfcSJF1waSGVrbdY9VWRJTFXhxGOxlUYl2NBiKRm5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:e9:a4:02:4e:95:84:71:a5:40:00:0d:cd:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
        Validity
            Not Before: Jul 26 19:00:34 2026 GMT
            Not After : Jul 27 19:00:34 2026 GMT
        Subject: CN=b0b024405eb6dd5529b95d14bbbc9f44e4aa11ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:95:b3:02:9c:c6:7d:69:2b:fe:12:6a:e1:
                    ff:85:e6:80:91:2d:c7:5f:13:b8:75:d4:1b:70:cc:
                    fc:06:bc:f2:da:71:7b:e2:d8:f4:7a:6b:c0:c3:10:
                    34:19:08:26:ae:f5:96:c4:a1:f1:d5:23:b0:3b:5a:
                    38:ee:71:a6:c2:5a:fc:fa:f7:3b:b3:f7:49:4b:b1:
                    37:f7:8d:2e:9f:c7:a0:2d:f1:9f:ae:cd:2d:a7:84:
                    42:b1:af:64:03:8e:ad:b5:ad:6b:44:90:48:23:e0:
                    7c:55:45:86:a4:fe:e3:c1:81:8a:f5:2d:36:07:d5:
                    b6:52:a3:c1:44:a0:cb:b2:ec:89:8c:ca:cd:d6:bf:
                    00:43:d5:41:80:cd:2d:56:b4:8a:88:0d:ed:95:1e:
                    f1:4e:ec:f5:58:76:7c:99:33:ff:53:83:cb:b0:4d:
                    3d:54:99:6c:09:98:9c:19:6f:51:3f:4e:ba:eb:22:
                    9e:44:d7:da:5f:07:11:21:2c:8f:bf:a0:bf:06:11:
                    8a:0c:62:31:bb:38:7a:d8:ec:f8:4e:bc:0f:2b:f4:
                    5c:fa:d9:4a:40:98:5e:6e:33:03:be:c5:0e:2e:fe:
                    c2:62:2d:f0:57:c6:71:7d:f8:03:08:96:52:24:a5:
                    3c:9f:e6:87:01:11:38:ea:df:ec:b8:af:28:2f:6c:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:24:40:5E:B6:DD:55:29:B9:5D:14:BB:BC:9F:44:E4:AA:11:AE
            X509v3 Authority Key Identifier:
                keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:17:f4:e2:9f:68:54:4d:27:eb:44:aa:b1:0c:ab:7a:44:b2:
         6f:99:97:21:40:f9:3d:3d:9f:b0:17:a1:30:06:34:fe:3d:26:
         54:36:1e:d4:5b:c7:bf:7c:2b:2b:42:07:3e:d7:e7:9f:24:93:
         d9:bd:47:cd:c3:ff:0e:6f:d8:4b:38:62:ac:13:bc:0c:49:9b:
         d7:cd:84:df:2a:7d:f4:6b:c0:f0:dc:96:fe:81:44:c6:5b:65:
         da:a6:b5:8b:ea:0b:2d:58:d8:c7:f6:5e:ba:09:b8:40:00:88:
         c5:0c:73:b1:65:b1:3c:6b:7d:1e:09:56:3d:a7:fb:cd:ca:bb:
         1f:82:ed:73:a2:ea:ec:0a:e4:6b:cc:85:b8:67:dd:ab:5a:0f:
         94:c9:7e:d0:5c:dd:69:f4:1e:b2:a5:11:29:48:03:31:78:2e:
         89:17:83:a4:4d:01:47:65:03:e6:a9:20:1c:e5:76:1f:df:cd:
         58:e8:07:35:18:7e:24:74:d6:7a:f2:09:f8:f4:13:b6:09:20:
         61:ef:96:91:a1:2f:a6:b7:63:21:52:68:68:0d:6f:83:b6:9c:
         8c:b9:93:94:40:af:fc:e6:1d:f4:30:67:52:2c:94:a8:54:d7:
         9d:96:c4:56:fa:f9:db:1b:24:cd:ef:ae:9c:74:3b:92:78:f0:
         5e:aa:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:09 2026 by rpki-client