Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          dnZKIsePRUQFbnV8YjV9KQUJyUqr95PRhENNpnZj+PY=
Subject key identifier:   8D:0B:D3:32:50:ED:67:E0:2A:6C:D3:74:9D:5C:90:69:18:FE:87:C2
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       019FA1BBFEB15FD6B76C02C50081EB5CFFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          189D
Signing time:             Mon 27 Jul 2026 04:01:19 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:19 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:19 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: ICJuZUDRT9L1mdu7OEnkINC2PyQ5pAofnX2W2YLN6ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:fe:b1:5f:d6:b7:6c:02:c5:00:81:eb:5c:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Jul 27 04:01:19 2026 GMT
            Not After : Jul 28 04:01:19 2026 GMT
        Subject: CN=8d0bd33250ed67e02a6cd3749d5c906918fe87c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:f3:49:3e:62:a2:13:a9:d9:5c:4f:40:d9:
                    30:14:d9:08:95:60:2e:e4:b5:be:ea:36:fc:3c:86:
                    3b:a4:79:d8:d9:9c:c1:51:58:a2:2b:3c:58:ca:4e:
                    c7:fb:31:56:9a:54:6f:a0:e6:a3:0d:dc:f1:c5:a7:
                    1c:a1:71:00:4f:f0:ae:1b:05:6a:8d:4a:ea:ac:29:
                    7f:5b:b8:34:b0:22:b3:31:4a:96:f3:90:4a:56:69:
                    7b:dc:b9:72:5f:f5:3d:cd:2f:cc:53:f7:be:72:1d:
                    0d:6a:dc:5f:63:99:c4:36:bc:92:89:c5:d5:5d:9d:
                    0e:79:c8:5b:ea:49:5d:81:88:94:d2:12:44:ec:fc:
                    34:19:97:87:67:82:48:1c:28:e1:e8:84:37:00:09:
                    fb:ee:9c:de:5e:a3:0c:e6:db:56:23:53:8a:7e:08:
                    14:bd:75:84:13:26:95:90:ec:3d:e5:6b:e5:a4:33:
                    7c:1b:87:4e:61:9d:fe:95:00:04:46:f1:a3:58:06:
                    46:5c:90:97:1a:ea:83:87:28:7e:d0:fa:da:8c:73:
                    91:40:97:d3:64:8f:42:81:5c:17:91:1f:6b:c8:c2:
                    68:89:c5:45:94:72:50:7b:48:5a:4f:3d:30:5c:d4:
                    33:26:8e:fe:6e:b9:24:4b:d3:8c:06:93:63:d4:83:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:D3:32:50:ED:67:E0:2A:6C:D3:74:9D:5C:90:69:18:FE:87:C2
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:e5:c0:ee:1f:bf:01:67:05:23:a2:77:41:e7:15:d2:43:
         24:83:6f:5d:05:b5:e4:14:38:97:65:55:53:a9:91:ef:ce:1c:
         db:98:ab:d6:09:98:f2:15:18:a2:c1:45:d8:26:97:d5:bb:e5:
         85:29:af:51:f4:62:0b:d4:9a:3e:62:67:de:9c:a0:d5:1f:17:
         f9:64:8a:f8:ff:d3:ee:72:95:71:b4:a6:dd:8e:9f:b2:f7:78:
         ce:c2:ea:39:7e:83:12:ba:34:e7:e2:d9:94:6b:2a:2f:9b:ca:
         fa:16:4f:f1:02:3d:99:d0:55:92:75:70:ae:0f:9e:c4:2c:90:
         c5:ab:98:db:e5:34:87:31:ec:5c:ec:79:9b:cb:36:e3:5a:3b:
         ef:b4:d4:b7:48:c2:66:c3:40:03:ee:85:e3:17:cf:b2:aa:8d:
         9c:91:4c:ad:d6:3a:17:f9:93:66:89:95:db:55:9b:45:24:45:
         aa:b3:d0:72:83:dc:62:3f:65:80:03:7b:81:aa:11:c2:41:bf:
         61:62:36:58:6f:38:62:73:5f:4c:5a:bf:cb:19:f5:0e:05:3d:
         10:3d:2d:fa:d0:31:f9:ac:e3:43:4d:2e:9c:b2:6a:4b:7f:6d:
         89:4f:83:61:db:92:da:3c:c1:88:dc:f3:78:c2:8a:22:7d:a5:
         c6:6a:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----