Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
File:                     wntzN4NAR9_qqYcCUyvow3XdB3o.mft (raw, json)
Hash identifier:          PTPACdPC001hPTophJGEiF52qqWkVpfPNPDxv050uhA=
Subject key identifier:   52:EF:C4:17:87:03:F2:88:3C:15:A4:94:88:2F:DD:F4:A1:4E:59:E6
Authority key identifier: C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A
Certificate issuer:       /CN=c27b7337834047dfeaa98702532be8c375dd077a
Certificate serial:       019FA2CDEA70907618E7D38454FA3DE2F8B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:00:31 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:31 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:31 +0000
Files and hashes:         1: aqK2yV13pktyyVa6pRyNZueOCTI.roa (hash: WeiFnY8BGtV7+1lMlp9uKyJPDrkxhq8o+eMa1t7FgGw=)
                          2: wntzN4NAR9_qqYcCUyvow3XdB3o.crl (hash: lbfA//Ob8RdlOSIYg82e0Gb0BkXsku8SU+zlSpBn8hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cd:ea:70:90:76:18:e7:d3:84:54:fa:3d:e2:f8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27b7337834047dfeaa98702532be8c375dd077a
        Validity
            Not Before: Jul 27 09:00:31 2026 GMT
            Not After : Jul 28 09:00:31 2026 GMT
        Subject: CN=52efc4178703f2883c15a494882fddf4a14e59e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:c1:8b:43:5e:d8:26:77:15:b0:b6:14:d6:
                    1a:4e:99:7c:48:6f:8f:29:24:b3:e1:07:53:d8:9b:
                    17:73:eb:ea:ef:7a:52:1d:d4:83:9c:79:6b:7b:c5:
                    0d:3d:64:1f:56:17:d9:47:7b:8f:2e:d0:d5:d7:16:
                    7b:09:b1:ac:5b:17:e5:31:ea:6d:c9:28:68:e8:ab:
                    2c:da:9a:7b:6e:48:5d:c2:42:20:af:5d:85:e9:90:
                    09:0f:9b:47:55:50:b8:62:69:19:02:34:57:d6:59:
                    30:53:1d:2f:e6:f2:f9:57:83:6f:f0:1b:4f:5c:8e:
                    fd:80:c0:84:18:3c:95:fa:ea:ba:2b:9f:2e:e1:7c:
                    20:40:6c:dd:ca:e3:eb:3d:e9:05:3b:5f:c9:c7:b7:
                    2f:97:91:97:09:a3:b0:f1:31:73:27:09:bd:86:9c:
                    9f:e6:fa:f1:f7:36:a8:d9:f2:a3:d9:42:2f:50:c0:
                    31:6f:e7:c3:dc:00:c7:da:b1:5e:ec:fe:a3:80:14:
                    7b:c4:da:95:09:1b:91:6a:a7:eb:83:db:39:fe:12:
                    0e:74:7f:38:e0:d8:9a:4e:69:ec:bb:16:11:5e:81:
                    ec:7a:b6:f9:b3:aa:4a:5f:eb:2b:d4:0a:8f:9c:a0:
                    bc:ce:9e:d9:e2:9b:82:32:08:6e:e7:c2:64:f4:3f:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:C4:17:87:03:F2:88:3C:15:A4:94:88:2F:DD:F4:A1:4E:59:E6
            X509v3 Authority Key Identifier:
                keyid:C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9f:a3:9f:64:42:f4:a1:bd:c2:c7:8a:cc:a6:43:60:6a:a2:
         02:b7:08:75:58:40:55:a3:2c:d5:ea:61:9d:89:67:9d:14:04:
         c5:eb:7d:2b:3b:88:04:6f:31:0d:80:cd:c3:8b:f0:0c:cc:ee:
         71:a0:81:91:50:40:c2:68:31:01:4d:9f:fd:2b:e7:7d:a4:70:
         f8:20:c0:ac:15:e8:6b:53:7d:01:f2:a2:c2:b0:62:63:ef:b0:
         47:38:91:a1:1a:28:00:95:b4:ed:85:c0:a8:89:fc:fc:5f:da:
         a3:e9:97:46:59:94:07:cf:1f:50:b8:1f:02:81:c4:f4:ce:de:
         22:1e:e5:ed:46:2d:c7:55:fc:01:bf:82:cb:35:4d:1d:36:78:
         bc:2f:c9:7b:6a:77:73:ef:52:17:c4:a9:c7:aa:79:99:a4:0a:
         00:43:a0:a4:41:f3:07:b0:ae:08:d5:a4:59:b6:9d:8f:36:c4:
         51:7b:d4:3c:65:76:4f:20:4a:d8:b3:12:3d:73:bb:01:3e:02:
         b1:a6:28:02:2a:f5:fe:80:d8:85:b1:e1:fe:b8:3a:19:da:d8:
         ce:51:eb:5a:ee:cb:fe:f0:cf:21:07:59:a8:57:7a:6c:1c:06:
         97:ce:ce:b5:c0:60:3d:4f:44:b4:7d:77:77:80:45:6d:62:f4:
         67:c7:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:14:20 2026 by rpki-client