Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
File:                     WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft (raw, json)
Hash identifier:          lb9E+JGnp9nKHLed+G2Zs0Z7DVHwWu93QtClNSdezCY=
Subject key identifier:   72:FB:28:81:31:10:A7:67:EA:F1:88:C0:D5:CC:37:61:94:51:B8:00
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Certificate issuer:       /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial:       019F9F5F1D3966438771B480BFDB977A3E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
Manifest number:          19D0
Signing time:             Sun 26 Jul 2026 17:00:38 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:38 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:38 +0000
Files and hashes:         1: NuZANK5Y2pq06F_aaqEFEzMCKPs.roa (hash: ebap13c4g1got53ocFULOxVlWLzAt5eAM9gnlYjXpvM=)
                          2: WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl (hash: +rUiCfl+CKJxMytlkdQHeeFaDJamXwVfdkMAwgOCrUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:1d:39:66:43:87:71:b4:80:bf:db:97:7a:3e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
        Validity
            Not Before: Jul 26 17:00:38 2026 GMT
            Not After : Jul 27 17:00:38 2026 GMT
        Subject: CN=72fb28813110a767eaf188c0d5cc37619451b800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:fc:39:25:b9:2c:25:98:8a:83:ed:a9:dd:
                    45:0f:08:98:e8:f9:8f:ac:28:be:91:42:b2:8b:d2:
                    a3:74:d3:94:b1:82:63:4e:93:aa:66:a1:0f:21:fc:
                    ef:2b:38:e0:b1:20:50:f2:38:69:0c:2c:90:10:55:
                    bc:cf:60:72:6c:07:e7:2a:da:44:8d:fd:bf:1b:6c:
                    23:7d:f7:0e:81:bb:e1:08:c5:2d:a2:2f:0d:0d:89:
                    db:49:1b:85:64:c3:28:e1:43:e2:1b:dc:af:9f:bb:
                    ea:b2:3d:7f:be:35:9c:6a:a7:08:ff:a9:02:4f:85:
                    1e:6c:b1:5b:bd:6e:b6:f7:f9:64:45:b5:25:ff:3a:
                    6e:ab:76:3d:d8:d1:e9:60:6e:40:08:2b:cd:68:af:
                    78:a4:4d:35:7d:aa:06:2d:a6:cb:a8:a7:03:a7:af:
                    62:ac:00:d1:62:cf:fe:f7:da:80:13:a9:f0:9b:5c:
                    5e:de:57:25:16:20:d3:88:3c:35:08:3b:34:58:34:
                    b4:50:fe:ad:26:92:12:d5:50:d6:b1:82:26:9f:fd:
                    d7:7d:d2:53:d0:bb:89:e4:ab:9e:74:94:69:d4:0a:
                    36:4b:78:73:38:2f:ff:be:57:35:b2:90:4c:9b:44:
                    ed:0e:e4:47:1a:72:69:1a:59:5c:aa:3f:d8:ef:c2:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:28:81:31:10:A7:67:EA:F1:88:C0:D5:CC:37:61:94:51:B8:00
            X509v3 Authority Key Identifier:
                keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:84:d1:35:f7:2e:f0:8b:f0:e4:ab:79:37:94:b6:d5:7b:
         d2:43:c5:d8:2f:cb:4b:a1:a9:e4:e2:92:49:fb:3c:f9:1a:a3:
         1a:ef:82:c8:2e:1c:d4:e5:d4:97:b4:c6:b5:4e:85:96:88:91:
         4b:2e:7e:6d:5d:65:2c:ca:6d:0a:d9:fe:17:cb:3f:04:91:4e:
         fa:7e:2a:56:2f:2e:de:eb:ef:93:c1:6d:ab:0a:b1:9d:99:82:
         b0:64:03:2a:ac:fc:6f:c7:16:ce:64:bd:aa:e1:42:aa:d2:0f:
         d1:53:5c:e1:35:ac:bc:43:84:c4:82:43:92:3c:55:cd:57:3d:
         52:2f:53:6f:34:6a:87:a2:e5:21:88:48:d2:5c:23:34:3e:e4:
         a5:4c:56:65:2a:ed:0c:37:b8:1e:3b:a5:d4:4a:6e:70:74:49:
         66:2b:79:ab:dc:0d:02:9d:00:7f:80:98:fe:4c:eb:b7:52:01:
         95:4c:b9:76:f4:c5:84:d1:8d:b8:8d:59:6b:61:5b:bc:6e:b2:
         3f:3b:69:2d:81:7d:8b:4d:f0:af:b1:ff:be:6f:51:e0:ea:a3:
         e2:11:40:c9:be:67:d3:ed:00:ad:d8:a8:8a:3e:b9:3d:ee:1e:
         db:01:d7:49:99:aa:7f:5b:a6:1f:b8:d1:53:4a:7c:3f:13:86:
         fc:80:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:49 2026 by rpki-client