Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          RNFQzLwsJVs8htS57IOeUIFdwm/Xqdos0VNADYgfhWc=
Subject key identifier:   D7:F1:82:8B:F7:43:54:2C:0F:A0:72:A2:10:B5:9B:E4:C4:5F:F0:C4
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       019F9E83869AD41F94931E6FC6EE83890CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          19CC
Signing time:             Sun 26 Jul 2026 13:00:47 +0000
Manifest this update:     Sun 26 Jul 2026 13:00:47 +0000
Manifest next update:     Mon 27 Jul 2026 13:00:47 +0000
Files and hashes:         1: 5cl4Z6asyPqRl4z3J4ySouDyEeE.roa (hash: PzM5l6ACiLTk3VlfamE9R6T8MML28IE4R3kgNFrFOdE=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: nFsVJZJLLShHulL4DDO1rw1247l3ycWgiibXyKFK298=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:83:86:9a:d4:1f:94:93:1e:6f:c6:ee:83:89:0c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Jul 26 13:00:47 2026 GMT
            Not After : Jul 27 13:00:47 2026 GMT
        Subject: CN=d7f1828bf743542c0fa072a210b59be4c45ff0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:35:90:4b:b9:79:a1:49:ce:a2:ea:13:76:
                    89:27:e6:2c:4c:5a:6b:1e:93:98:30:21:e1:98:63:
                    6b:6c:a1:3f:f8:b1:c6:f7:f9:91:3d:60:7b:71:e3:
                    ec:0d:ec:51:90:7f:81:8a:74:a3:c7:98:06:f4:0e:
                    ca:e7:5f:3f:45:3f:2a:70:e8:15:57:68:cc:b8:47:
                    a5:c0:05:d4:f4:24:c0:9c:b9:36:2a:b8:5c:82:3f:
                    44:2a:fe:70:3f:98:60:aa:e4:cb:e7:b2:eb:aa:cc:
                    d6:38:46:20:92:8f:16:60:f0:9d:58:34:ea:42:b5:
                    9e:de:e3:0a:f1:1b:22:e8:1a:d2:43:d1:00:f7:f1:
                    dc:5f:55:e1:68:20:fc:c0:32:24:bf:93:12:d6:08:
                    5d:17:0b:08:07:ea:1e:44:3c:f3:e4:bc:b6:dd:a2:
                    98:7f:32:cc:eb:55:d0:bd:0d:fb:13:85:ab:7a:fc:
                    51:ae:32:26:dc:c9:09:64:98:12:ce:89:42:f9:71:
                    bd:c5:d2:8f:a8:94:d2:4f:bd:db:26:16:a8:71:f7:
                    c2:72:30:76:f3:89:34:c1:ae:aa:b5:d7:3d:87:25:
                    ad:24:1c:34:4c:3d:f3:ef:b1:e0:a6:82:9d:f5:61:
                    3c:f5:26:56:d3:d9:c7:62:c5:2f:9a:2e:33:58:9e:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:82:8B:F7:43:54:2C:0F:A0:72:A2:10:B5:9B:E4:C4:5F:F0:C4
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:e3:fb:60:bb:54:3b:25:8a:9e:66:e3:f1:17:89:97:29:
         32:3a:ee:c5:34:50:e5:a0:3c:ca:b7:a9:e4:ef:ea:a2:4d:82:
         fa:58:aa:22:47:ad:a7:6b:46:58:f1:61:81:65:bc:f0:da:ef:
         49:f5:87:e3:fc:27:3e:4d:af:7d:42:44:69:26:19:30:db:6f:
         73:e7:9c:b5:7a:a3:66:b2:de:9b:0d:ee:f3:8d:24:05:82:e0:
         67:9c:d0:76:be:43:91:f2:47:dc:23:c5:ae:2d:75:2b:e2:d8:
         3e:34:22:b2:f4:e1:0a:ad:bd:27:5a:4a:83:77:83:8a:a9:76:
         91:fa:ca:43:60:20:d7:36:65:a9:12:4b:f9:6d:5e:d8:ef:b3:
         28:67:ba:8d:cf:f4:7b:71:85:a6:b0:23:cb:df:73:11:a1:d5:
         50:7b:a3:37:d8:d9:68:63:ac:c0:b2:eb:65:0e:56:35:b6:53:
         07:06:77:af:00:1c:86:1e:bc:b6:13:bf:f8:4b:33:03:ad:28:
         32:ef:91:5f:9d:53:47:81:f5:a5:56:de:96:e7:ae:77:7a:bb:
         73:a9:dd:17:23:63:5c:cf:16:90:e2:ac:dd:a9:ca:19:53:46:
         7b:ae:f0:a0:9c:ac:f5:da:97:a9:30:89:26:79:9b:6d:61:a7:
         bb:c2:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:53:16 2026 by rpki-client