Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File:                     WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier:          EnyxFUWuXvAu4AAzoaPswirv8CWGEp3vIn7yD4qKwfU=
Subject key identifier:   EE:04:AE:31:43:A1:13:84:D8:46:D4:06:AD:8B:72:E7:CA:E7:74:5D
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer:       /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial:       019FCBCAF86A6FF78CC7C6E9708C6F8E8D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number:          13A7
Signing time:             Tue 04 Aug 2026 08:01:44 +0000
Manifest this update:     Tue 04 Aug 2026 08:01:44 +0000
Manifest next update:     Wed 05 Aug 2026 08:01:44 +0000
Files and hashes:         1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: l1neL/4BnN4gMYawDDmMtD5bRSaJJ1S8tnMUNj1U5hQ=)
                          2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:ca:f8:6a:6f:f7:8c:c7:c6:e9:70:8c:6f:8e:8d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
        Validity
            Not Before: Aug  4 08:01:44 2026 GMT
            Not After : Aug  5 08:01:44 2026 GMT
        Subject: CN=ee04ae3143a11384d846d406ad8b72e7cae7745d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:a9:dc:4d:f4:81:18:aa:98:e0:bd:f7:ec:
                    73:6b:a8:bd:74:19:40:dd:51:49:4f:80:4f:5e:ca:
                    6f:7f:9d:78:64:bf:81:10:44:a1:3b:f1:69:36:d4:
                    35:82:5b:ec:2b:0a:b2:06:4a:5f:96:10:7d:d3:9a:
                    ae:dc:cc:66:e2:49:f5:3b:a1:5f:84:26:19:b9:8f:
                    49:82:b1:27:89:86:e0:ec:3f:ad:d9:d6:86:9d:dd:
                    d3:8e:22:5d:e6:ae:1d:20:1f:01:11:8f:bf:60:74:
                    fd:a2:fd:87:da:f6:33:de:08:0e:c3:75:44:4f:39:
                    c9:22:b0:f4:5d:a1:5b:60:41:30:e4:c1:74:69:1b:
                    86:17:9a:dc:bb:2c:8a:7f:d3:e5:0e:cb:e3:e4:1a:
                    11:e9:92:64:c8:fc:60:a6:c3:03:81:6a:07:2a:b1:
                    3a:9e:0c:6d:01:28:08:54:d4:63:be:d7:2e:5e:3b:
                    d3:51:ab:76:11:ca:63:9c:83:50:3e:c8:ba:92:28:
                    2e:7e:11:1c:c9:56:c0:98:58:8e:58:7d:b8:bf:1c:
                    94:6a:91:74:02:e1:f6:33:ea:08:cd:a1:d3:d4:94:
                    ab:22:ca:eb:ed:de:e2:0e:d1:ef:75:7f:8c:db:40:
                    09:b1:d9:9e:5a:a7:a1:f5:ab:b7:3a:39:a6:3a:f7:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:AE:31:43:A1:13:84:D8:46:D4:06:AD:8B:72:E7:CA:E7:74:5D
            X509v3 Authority Key Identifier:
                keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e7:f5:58:6d:62:ed:b7:92:61:ce:65:63:bf:1a:0a:46:0d:
         2a:24:a8:9f:f3:57:44:21:10:26:fe:b7:11:c8:eb:d3:7b:79:
         ef:ec:49:2d:16:1c:67:0e:c2:15:08:71:b7:7d:e7:48:9b:23:
         35:4e:63:de:14:d5:ec:97:a1:c6:11:99:5d:91:3a:cf:0d:63:
         97:7c:88:f7:c4:8b:45:6c:28:5a:1b:ce:e4:7a:90:db:3f:32:
         e3:43:8d:8a:8d:64:7b:a0:3b:81:96:bf:86:73:c6:cd:99:45:
         3e:9a:b9:d5:17:be:19:66:10:fe:af:90:a7:49:3a:25:95:01:
         51:4d:ba:ce:4c:8c:42:9c:d6:6c:0b:ef:ba:f5:85:7e:89:2e:
         b8:47:2b:d7:2c:85:6e:ff:8d:f3:c6:5d:6f:c9:18:9a:ee:72:
         aa:cd:51:bd:d1:8a:6b:17:13:92:6c:a2:b3:db:92:59:b1:7a:
         66:0a:ae:8c:0c:50:79:4d:b8:9e:a5:1d:11:e7:80:26:3d:9f:
         a4:f5:df:85:8e:4d:38:06:9b:98:98:01:c7:5a:ce:ef:cf:fd:
         50:52:6f:d1:20:12:93:d5:3a:53:b3:8c:88:4d:4a:5e:65:d1:
         41:bb:2c:4f:c6:0b:dc:d0:a9:b3:f1:d6:20:a7:93:b5:de:7f:
         bc:45:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:55:17 2026 by rpki-client