Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier:          Pl/6YVgJNxp1j/wrohNIRQBli9UluCUFZlVmFL1MdFg=
Subject key identifier:   B8:20:7D:14:6A:FB:E2:FF:CC:B1:B8:BB:F5:FB:42:D5:AE:BF:CD:43
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer:       /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial:       019FA718E8155AF381FD09BBBDCD112CADDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number:          19D9
Signing time:             Tue 28 Jul 2026 05:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 05:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 05:00:55 +0000
Files and hashes:         1: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (hash: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4=)
                          2: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: o6M8IP5nmv6vIdrv49mIZYdU+nPCM0ImPwUOchNnBGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:18:e8:15:5a:f3:81:fd:09:bb:bd:cd:11:2c:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Validity
            Not Before: Jul 28 05:00:55 2026 GMT
            Not After : Jul 29 05:00:55 2026 GMT
        Subject: CN=b8207d146afbe2ffccb1b8bbf5fb42d5aebfcd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:41:6b:d3:4e:07:03:dd:41:37:87:ca:24:
                    ca:6e:64:ea:d1:f1:2b:b5:a3:34:9f:bb:9c:26:c7:
                    5e:05:95:6a:6a:70:fc:60:f0:b2:1e:38:0b:0d:98:
                    76:8a:c2:f2:34:92:07:73:61:84:4d:22:a6:b2:e7:
                    b8:d8:4f:5a:41:c1:b1:88:f4:5a:a5:ec:96:ee:95:
                    cb:5a:78:1a:bd:60:26:ce:e5:56:b2:2f:fe:86:6b:
                    2b:8c:61:7d:49:7e:85:b3:ed:3f:91:86:89:cd:a0:
                    0c:3b:25:01:a9:61:0d:df:d3:d4:ca:e4:45:9a:23:
                    93:57:5c:b0:c8:d1:0b:8d:80:66:ae:e2:e6:76:a0:
                    f9:cc:4b:68:05:81:00:c7:c4:65:6b:21:44:c2:39:
                    08:e5:2f:b2:54:e8:96:50:b5:ee:93:9c:46:1c:8f:
                    2a:47:bf:ec:f5:00:b3:80:83:b6:be:f1:17:0b:21:
                    c9:52:d2:31:cd:09:51:c3:10:fe:78:48:35:e9:c4:
                    f3:a6:ac:e3:f4:53:00:e4:a0:65:ad:1e:3b:f0:6c:
                    2f:bf:ca:cc:3a:b8:3e:da:24:cf:62:e7:7e:0e:86:
                    6f:64:75:5b:3b:3f:b7:da:2b:1e:23:01:14:03:a9:
                    12:d8:82:6c:7d:a8:8d:83:95:8a:d2:fb:9c:e3:8a:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:7D:14:6A:FB:E2:FF:CC:B1:B8:BB:F5:FB:42:D5:AE:BF:CD:43
            X509v3 Authority Key Identifier:
                keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:24:3e:a8:c3:bb:41:48:6a:c3:74:49:3d:3d:68:5d:d3:
         9b:d6:39:8c:67:c2:e4:8f:59:a5:0b:c4:2e:9f:c0:6b:2b:55:
         9d:88:07:1d:36:c0:1b:9d:c3:05:18:06:a8:32:fc:b8:85:42:
         af:ab:24:94:6d:a1:0d:1a:e7:36:df:8c:81:ca:6d:01:2e:b4:
         84:9d:df:90:32:e4:c1:9e:ce:99:af:c3:19:00:f3:66:43:f2:
         19:f2:c5:b0:79:d2:01:12:2c:22:45:09:89:4c:02:06:1f:58:
         15:d8:e8:69:5a:44:bb:19:46:b1:19:e3:7b:b1:bd:a7:1e:c3:
         ea:26:11:f1:5d:3b:11:68:d6:17:66:7d:60:57:71:64:80:7c:
         73:d8:37:67:2f:4f:82:46:cb:92:1c:db:99:b3:b8:7f:12:48:
         76:5a:8e:53:77:7b:4e:41:ed:ed:b7:cb:ff:36:e0:e9:dc:5b:
         78:ab:d6:8e:aa:5c:ac:4d:c0:9d:1f:83:f7:ea:31:97:af:dc:
         da:2d:3d:fe:d8:85:5d:3c:81:77:78:df:58:86:35:8f:ca:56:
         bf:69:8e:8b:23:ac:85:2b:4d:e0:b7:de:d9:19:ee:0d:99:37:
         3d:a7:b0:55:ff:62:44:ee:65:01:a8:2a:87:00:e3:7b:50:00:
         41:0a:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:19:19 2026 by rpki-client