Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          Bu6N+McV9x9ZRztQ60Nv9l0q9hkwz8YHRpYDaRdjmaQ=
Subject key identifier:   42:A2:4D:46:C9:34:96:0B:44:71:AF:42:AB:8B:BA:94:AA:21:FB:4E
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       019FA071D7C0AEE7E70BEF7DA6A75E2A3D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          13EA
Signing time:             Sun 26 Jul 2026 22:00:42 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:42 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:42 +0000
Files and hashes:         1: oQepNcyAV3n8LUNhG2lmlku6ctQ.roa (hash: 57EPoHIct+eDALqqvem38LPIDDYzx2hlHTQeuMM95dE=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: cnsBjPQ15nKLxtq9aZrC1ljO5jWagzVinorsFRupyTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:d7:c0:ae:e7:e7:0b:ef:7d:a6:a7:5e:2a:3d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Jul 26 22:00:42 2026 GMT
            Not After : Jul 27 22:00:42 2026 GMT
        Subject: CN=42a24d46c934960b4471af42ab8bba94aa21fb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:f8:bd:da:c6:b8:dc:a4:a3:a1:1a:94:89:
                    70:7a:e3:37:89:3e:4c:9d:33:46:3d:fe:9c:9c:1a:
                    b5:dd:70:d5:99:26:78:b0:f5:9d:70:02:77:af:2a:
                    40:b2:1c:11:37:b6:71:ae:bd:ba:58:ed:75:86:e2:
                    03:5e:94:5d:ff:f9:48:74:8b:d5:cb:4c:43:6d:7e:
                    ea:b5:ea:6a:31:60:81:2d:fa:60:88:52:3c:13:3a:
                    ea:d8:ef:0d:55:3a:7f:98:2f:6b:04:d6:15:e3:f7:
                    b2:0a:3d:e2:b1:c2:a2:fe:16:ec:8f:48:3a:f5:7e:
                    f4:44:20:5f:b8:ed:46:08:03:25:3e:14:1f:d9:31:
                    21:74:1f:da:fb:b6:7a:64:ed:76:eb:59:e2:c8:4f:
                    be:2a:0b:cd:b8:6c:a8:37:8f:02:7c:ac:9d:dd:ab:
                    7a:6b:79:3d:aa:6c:2d:f5:75:d9:9e:a1:a8:08:62:
                    46:52:62:df:0a:d6:e6:3a:62:ff:63:a4:80:fc:6e:
                    76:62:74:78:c9:5b:0f:ef:79:69:34:e0:30:2b:5e:
                    77:8f:19:9f:5f:4c:06:9a:ee:2f:ce:56:95:e0:41:
                    ba:e2:b7:cf:d3:6e:a0:64:b3:67:f2:fb:ff:47:f8:
                    ac:6c:02:3d:2a:3f:3d:e2:37:a0:e9:9b:5f:5a:a9:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A2:4D:46:C9:34:96:0B:44:71:AF:42:AB:8B:BA:94:AA:21:FB:4E
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:e9:a8:e3:3d:87:d8:41:4c:d1:29:58:ac:da:93:37:2f:
         f8:5a:e9:c3:12:c2:7d:02:48:7e:c5:36:e4:db:27:b0:27:7c:
         47:b0:54:0b:23:a4:b7:47:83:7e:0d:e2:b3:28:8d:46:91:55:
         02:11:73:27:0f:d0:72:75:2f:70:77:e7:6f:d7:d4:79:a4:02:
         81:f9:31:93:d5:80:a8:f6:65:b7:77:7c:1b:fa:2e:51:e2:ed:
         5b:32:15:97:37:ba:ef:fc:3d:99:58:d7:60:e4:b6:e6:35:7e:
         b6:91:d4:60:ee:44:1c:1f:ec:a6:11:fe:6a:3c:30:b8:93:36:
         61:32:ca:9f:57:36:ef:c8:b5:af:b8:61:b1:a1:3f:5c:d5:92:
         af:12:54:d6:ce:29:90:7b:ad:33:7d:e7:2b:20:22:9a:3a:d9:
         4f:f8:1e:95:2a:b3:b0:53:ac:2f:27:c1:28:df:4c:fe:32:a3:
         a9:fc:21:d2:2a:c9:c7:2c:eb:d0:32:cf:54:22:21:ce:59:3a:
         3d:cb:fe:44:25:06:91:53:ec:0e:66:15:67:b7:ab:e4:90:8f:
         32:47:15:f3:97:c3:b8:a7:44:32:00:0b:74:80:69:59:e5:67:
         f6:85:3c:3d:22:da:52:2d:60:fc:ea:6d:33:0b:f1:db:f3:35:
         e8:ab:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:04 2026 by rpki-client