Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          bHx6L2M4JZVfKTfi3WMOemAxcResMObnCJjcFSzvrDE=
Subject key identifier:   A2:44:DB:B9:CE:83:7C:06:06:11:BF:D9:7D:2F:78:AB:8D:98:1B:53
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       019F84C415301B66B478F9F0039A911B5F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          1441
Signing time:             Tue 21 Jul 2026 13:01:10 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:10 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:10 +0000
Files and hashes:         1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: fYascPbWVLbp0UWV0GI7AUzx3qrYY8F2JD9O2GY0JIk=)
                          2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
                          3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:15:30:1b:66:b4:78:f9:f0:03:9a:91:1b:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Jul 21 13:01:10 2026 GMT
            Not After : Jul 22 13:01:10 2026 GMT
        Subject: CN=a244dbb9ce837c060611bfd97d2f78ab8d981b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:c4:41:0b:d9:c7:99:b0:a9:68:9b:e8:d7:
                    84:11:40:f7:c6:3d:76:e8:40:4a:fb:e5:22:ca:54:
                    ef:62:e3:e1:9b:5a:da:8c:85:82:1e:83:28:3f:c8:
                    55:ae:c7:94:7f:a3:67:c9:4d:76:fa:3b:bb:2e:ea:
                    57:67:62:a2:cc:c0:4d:33:09:7a:23:24:66:db:54:
                    52:ff:b8:f5:05:eb:b4:08:6f:29:ff:47:89:0d:1e:
                    9f:94:0d:45:07:59:f5:14:79:9a:1f:2e:ee:0c:bc:
                    f4:ba:50:43:f3:9e:c8:14:1e:e6:63:38:80:75:89:
                    18:54:07:fb:0c:90:7f:62:bf:61:c9:b5:da:0f:32:
                    3d:6f:21:63:c8:45:ba:67:71:12:4a:c6:49:5a:60:
                    ba:b6:e3:50:23:ba:9a:a4:d5:1e:df:b2:f4:63:72:
                    f7:ea:d6:71:f4:d6:f3:0e:64:09:7f:7c:5a:7a:1f:
                    38:8e:48:06:d5:cf:00:0d:9c:4f:9a:68:6f:75:a9:
                    c8:ef:c7:84:f1:2f:86:77:31:41:d8:ec:57:82:ba:
                    67:f7:05:5a:dc:17:04:0f:48:83:26:7c:8b:a2:fe:
                    d0:cc:37:fb:33:9d:2d:5b:3a:a4:89:b6:4f:5e:a0:
                    0e:98:44:28:53:e4:ea:4e:29:86:82:18:ec:09:b9:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:DB:B9:CE:83:7C:06:06:11:BF:D9:7D:2F:78:AB:8D:98:1B:53
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:cb:fe:bf:22:1d:b7:ec:78:f0:76:80:08:76:d7:b2:44:
         79:e7:ba:db:b1:ae:98:26:1e:1e:45:da:57:12:2d:ec:06:d2:
         91:42:37:c9:27:33:d1:d9:4e:95:bc:6b:cd:87:34:c1:3b:d2:
         50:55:51:e6:d6:98:a0:6e:9d:a4:8a:1f:a4:ae:45:6a:30:c5:
         7d:50:e8:8a:fe:9a:26:00:51:9e:a4:5c:d0:2b:1c:da:9a:9c:
         ac:47:f0:5b:81:98:e6:e5:5a:fe:56:56:5d:ce:c6:68:37:7c:
         13:1e:1b:3e:61:c9:a7:83:41:65:45:62:85:e9:e0:49:7d:15:
         9c:ee:82:d5:2a:4a:0c:f4:0b:56:23:b1:60:1f:93:70:db:e2:
         f7:9f:b5:19:87:f3:1b:02:00:91:27:37:07:0e:ac:ef:69:a1:
         81:38:a1:87:d1:e6:05:8d:29:58:51:8c:da:0e:7f:37:6b:d6:
         e8:5d:5c:7e:07:de:c0:f0:a3:ff:bf:99:f6:dd:4f:83:41:da:
         a5:20:87:6a:ad:a2:52:a8:55:95:32:bd:a3:66:e0:8b:a9:3a:
         f8:de:b4:54:c5:88:1f:87:a9:19:fb:bd:4b:a9:72:1e:08:0c:
         b8:5d:89:d0:5c:d3:44:1c:ca:5c:7d:a2:fd:e6:d8:1c:31:5e:
         8c:80:51:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExBUwG2a0ePnwA5qRG1+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjYwNzIxMTMwMTEwWhcNMjYwNzIyMTMwMTEwWjAzMTEwLwYDVQQD
EyhhMjQ0ZGJiOWNlODM3YzA2MDYxMWJmZDk3ZDJmNzhhYjhkOTgxYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fPEQQvZx5mwqWib6NeEEUD3xj12
6EBK++UiylTvYuPhm1rajIWCHoMoP8hVrseUf6NnyU12+ju7LupXZ2KizMBNMwl6
IyRm21RS/7j1Beu0CG8p/0eJDR6flA1FB1n1FHmaHy7uDLz0ulBD857IFB7mYziA
dYkYVAf7DJB/Yr9hybXaDzI9byFjyEW6Z3ESSsZJWmC6tuNQI7qapNUe37L0Y3L3
6tZx9NbzDmQJf3xaeh84jkgG1c8ADZxPmmhvdanI78eE8S+GdzFB2OxXgrpn9wVa
3BcED0iDJnyLov7QzDf7M50tWzqkibZPXqAOmEQoU+TqTimGghjsCbkFvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJE27nOg3wGBhG/2X0veKuNmBtTMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkivL/r8i
HbfsePB2gAh217JEeee627GumCYeHkXaVxIt7AbSkUI3yScz0dlOlbxrzYc0wTvS
UFVR5taYoG6dpIofpK5FajDFfVDoiv6aJgBRnqRc0Csc2pqcrEfwW4GY5uVa/lZW
Xc7GaDd8Ex4bPmHJp4NBZUVihengSX0VnO6C1SpKDPQLViOxYB+TcNvi95+1GYfz
GwIAkSc3Bw6s72mhgTihh9HmBY0pWFGM2g5/N2vW6F1cfgfewPCj/7+Z9t1Pg0Ha
pSCHaq2iUqhVlTK9o2bgi6k6+N60VMWIH4epGfu9S6lyHggMuF2J0FzTRBzKXH2i
/ebYHDFejIBRyA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:43 2026 by rpki-client