Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File:                     WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier:          Hv+2wNJnewziDTKMkbAqxd+9/RDj/ycBsanwdLtSl6I=
Subject key identifier:   61:E4:4C:64:A4:13:BB:DA:41:17:0D:4F:0C:63:B0:D9:D8:12:DB:D5
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer:       /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial:       019F83B0AE542361CC21AF66A9020A66396F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number:          02C6
Signing time:             Tue 21 Jul 2026 08:00:21 +0000
Manifest this update:     Tue 21 Jul 2026 08:00:21 +0000
Manifest next update:     Wed 22 Jul 2026 08:00:21 +0000
Files and hashes:         1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: cSoiABUgPkjruFscUgzR0xJSe6cpGVVpSr0hzu3hlaQ=)
                          2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:b0:ae:54:23:61:cc:21:af:66:a9:02:0a:66:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
        Validity
            Not Before: Jul 21 08:00:21 2026 GMT
            Not After : Jul 22 08:00:21 2026 GMT
        Subject: CN=61e44c64a413bbda41170d4f0c63b0d9d812dbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:34:bb:88:04:f2:f7:3a:63:d9:e8:dc:a5:
                    86:99:f6:78:e8:4b:3c:cd:46:18:e7:35:fd:72:ba:
                    0e:43:b1:28:57:2e:26:d9:93:d7:d5:ee:b6:67:c5:
                    d1:4d:9c:51:51:a8:63:59:49:41:84:e8:5d:5d:9a:
                    bb:5c:36:da:1a:e0:3d:d4:d6:91:aa:87:33:9c:8b:
                    f2:61:ad:52:f1:60:01:5e:a2:c8:9c:2b:b9:e9:a6:
                    7e:6b:e9:5d:dd:22:62:3c:5d:35:d4:37:2f:2f:a3:
                    5c:63:11:f9:99:e2:8b:02:06:83:f3:90:ca:e5:43:
                    0b:6e:18:b9:83:c9:f5:5d:43:18:d4:e7:ba:01:dc:
                    21:ec:49:1e:0d:c6:f7:49:f8:7e:bc:13:39:20:5c:
                    e1:9c:8f:3f:1d:fd:b8:40:a2:e5:10:94:2a:f6:d8:
                    a4:ce:76:a8:8a:6c:00:86:33:43:80:74:dd:a5:6f:
                    0f:93:5a:63:d2:36:c8:cb:fb:3a:75:3a:7b:67:72:
                    46:1f:b6:6e:9b:10:5f:ad:ba:a4:d4:b0:b5:2b:00:
                    f9:6f:e5:c3:2b:04:56:77:20:ae:57:f7:6a:45:63:
                    a8:b6:77:93:d7:9c:77:7a:b8:9b:b5:53:90:7b:9e:
                    a3:98:34:93:8e:29:f4:ac:6f:41:5f:52:c1:e6:3f:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:4C:64:A4:13:BB:DA:41:17:0D:4F:0C:63:B0:D9:D8:12:DB:D5
            X509v3 Authority Key Identifier:
                keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:a7:5f:64:d2:6e:b9:87:b8:ee:20:00:58:2c:64:45:b6:
         f7:c4:7d:30:bc:c6:29:90:75:80:8e:8c:74:57:8c:52:23:da:
         10:45:be:64:de:a2:26:4f:ae:8f:bc:b2:2a:b3:ce:52:db:e8:
         a9:e8:da:0f:90:ef:64:a1:c8:ee:ac:96:06:d5:0b:1b:cd:1e:
         02:4c:7a:95:57:e5:31:2b:46:fa:02:9c:0e:53:52:73:47:d5:
         1b:2f:b4:1c:aa:68:d4:3f:89:36:a7:62:92:f1:c0:42:18:74:
         60:e0:8e:37:95:79:f2:6d:6b:12:fc:a8:26:73:3f:70:24:dc:
         3b:fc:b5:51:3d:94:d2:9b:ee:b0:d7:da:a8:dc:61:94:ff:5b:
         75:5c:3d:5d:d1:ff:27:a0:70:e2:dd:cc:93:8b:9f:01:2a:6b:
         55:1b:60:ed:61:5b:c2:a3:88:80:58:0c:3a:93:a4:62:bf:12:
         d2:db:64:7c:d4:6b:67:f5:73:44:c9:76:f3:c4:93:f9:f7:b8:
         9f:b4:08:67:71:c0:cf:e3:4b:69:03:70:cf:1c:64:a9:8b:d4:
         9e:c9:72:ea:0c:78:69:b9:0d:2b:36:ad:68:a9:58:33:7a:2d:
         23:e1:4a:92:1f:3d:c9:ff:2e:c3:df:e2:2c:de:79:43:9d:5c:
         0a:f2:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:13:13 2026 by rpki-client