Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          IHE/3xlqFRkny7nPvDTCwtfv3qlVSDccXNhXazsPlgs=
Subject key identifier:   0B:80:9C:3E:70:33:BD:8A:1B:B0:0C:84:81:B4:E5:72:4D:4E:A9:0D
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       019FA0A87627BB973B666484074B581AF576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          19CE
Signing time:             Sun 26 Jul 2026 23:00:22 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:22 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:22 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: dDtxwzjoeQIoAOCq5+nJhFBFdGxboCGf3oCpkJb3xhI=)
                          2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:76:27:bb:97:3b:66:64:84:07:4b:58:1a:f5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Jul 26 23:00:22 2026 GMT
            Not After : Jul 27 23:00:22 2026 GMT
        Subject: CN=0b809c3e7033bd8a1bb00c8481b4e5724d4ea90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:cf:a5:ff:83:6b:22:b1:06:45:a7:1a:4a:
                    89:fc:a6:bd:82:be:4d:b0:95:0c:5c:a4:19:78:2f:
                    e2:73:b3:fa:13:cd:bc:20:9a:75:68:78:6d:91:ec:
                    3c:ea:5d:3b:7f:52:ba:7c:30:e4:f3:5c:22:c3:9d:
                    63:0b:1d:18:c4:fc:19:5a:05:3f:16:96:9b:9d:25:
                    c4:1a:dc:66:12:e4:2c:af:02:43:9c:03:a9:60:8e:
                    26:f3:43:57:19:38:68:fa:39:ec:68:f3:05:14:cc:
                    1d:94:25:54:c0:e1:5b:43:c0:c3:c6:86:25:04:63:
                    2a:52:95:08:78:46:56:39:19:73:17:b1:9a:71:ca:
                    62:ef:06:f0:f8:10:54:b4:f6:70:9e:5c:8e:e4:48:
                    51:60:dd:ea:38:fb:01:a7:d0:c0:f5:69:fc:7a:8b:
                    9c:d2:27:5e:9b:90:b5:70:12:29:25:10:e5:47:1f:
                    77:a9:a2:41:9c:f1:04:4f:26:6e:ab:3e:20:9c:5e:
                    2e:90:05:00:76:14:e2:4a:24:0e:33:bc:30:37:a2:
                    3d:46:9a:04:82:92:66:88:4c:75:e4:28:e4:5b:f0:
                    2e:2a:f5:05:48:7e:97:e2:5b:d4:7d:6b:41:d6:f0:
                    d0:93:af:91:40:0e:3f:16:10:e7:db:88:13:9d:3b:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:9C:3E:70:33:BD:8A:1B:B0:0C:84:81:B4:E5:72:4D:4E:A9:0D
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:31:2d:8c:0b:c6:35:b4:76:96:8f:f9:c1:55:a7:66:6b:
         e8:47:1a:a7:6a:63:da:f8:92:0f:ea:c6:a6:61:fd:e4:57:5c:
         11:57:93:41:af:10:45:87:6a:45:2f:11:78:f0:cf:50:62:52:
         aa:3d:88:59:4a:1d:ec:65:ca:de:6f:11:13:8a:03:27:87:27:
         42:20:5d:ca:b7:ed:b0:71:52:8a:0a:d7:fa:c5:f5:81:e1:a9:
         71:ca:3a:28:7e:3f:38:b9:6a:af:5d:90:33:ce:48:75:7c:35:
         fd:00:e9:7f:60:a4:50:d0:e5:c2:13:a2:e1:fd:13:b0:67:7b:
         96:6d:47:a4:52:13:a5:d0:01:32:0b:7f:92:05:67:6d:e3:c6:
         71:43:1e:55:9c:69:f2:17:7a:c4:da:9c:c3:35:f5:8e:3b:ac:
         27:bf:39:d4:6f:c6:9a:e0:d8:bb:3f:cb:e0:16:72:49:93:e1:
         bf:70:0b:4c:64:50:d0:f4:b6:20:c8:bb:ed:44:fd:f8:4f:f2:
         be:0a:83:a8:da:9b:4f:6f:0b:4e:ec:c2:5c:2d:68:62:80:7e:
         0e:4f:37:a3:ca:5d:af:6e:ba:b4:9c:3d:6d:66:3c:dd:94:28:
         21:ee:8d:10:58:55:a3:a1:6e:cd:f3:5d:79:40:c6:37:05:f2:
         80:67:10:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqHYnu5c7ZmSEB0tYGvV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjYwNzI2MjMwMDIyWhcNMjYwNzI3MjMwMDIyWjAzMTEwLwYDVQQD
EygwYjgwOWMzZTcwMzNiZDhhMWJiMDBjODQ4MWI0ZTU3MjRkNGVhOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRzPpf+DayKxBkWnGkqJ/Ka9gr5N
sJUMXKQZeC/ic7P6E828IJp1aHhtkew86l07f1K6fDDk81wiw51jCx0YxPwZWgU/
FpabnSXEGtxmEuQsrwJDnAOpYI4m80NXGTho+jnsaPMFFMwdlCVUwOFbQ8DDxoYl
BGMqUpUIeEZWORlzF7Gaccpi7wbw+BBUtPZwnlyO5EhRYN3qOPsBp9DA9Wn8eouc
0idem5C1cBIpJRDlRx93qaJBnPEETyZuqz4gnF4ukAUAdhTiSiQOM7wwN6I9RpoE
gpJmiEx15CjkW/AuKvUFSH6X4lvUfWtB1vDQk6+RQA4/FhDn24gTnTvCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuAnD5wM72KG7AMhIG05XJNTqkNMB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk8xLYwL
xjW0dpaP+cFVp2Zr6Ecap2pj2viSD+rGpmH95FdcEVeTQa8QRYdqRS8RePDPUGJS
qj2IWUod7GXK3m8RE4oDJ4cnQiBdyrftsHFSigrX+sX1geGpcco6KH4/OLlqr12Q
M85IdXw1/QDpf2CkUNDlwhOi4f0TsGd7lm1HpFITpdABMgt/kgVnbePGcUMeVZxp
8hd6xNqcwzX1jjusJ7851G/GmuDYuz/L4BZySZPhv3ALTGRQ0PS2IMi77UT9+E/y
vgqDqNqbT28LTuzCXC1oYoB+Dk83o8pdr266tJw9bWY83ZQoIe6NEFhVo6FuzfNd
eUDGNwXygGcQ7A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:34 2026 by rpki-client