Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File:                     WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier:          hW7htM9+Z+/knYcYtp9Qs49c77gceLxgdx78LsKQf3w=
Subject key identifier:   EF:20:0F:8D:D0:34:0F:79:62:90:0F:39:FB:5A:F4:FA:E8:BE:A8:1D
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer:       /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial:       019FA2971D42346DD1F0E147B72B31882EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 08:00:39 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:39 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:39 +0000
Files and hashes:         1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: vKHooWtJVsO0mv2Box+MF0d5yYYQ2UD+ZneKdETRlv0=)
                          2: r9Mcr5UDzWdIgeL8kqJ0bGMMVmw.roa (hash: 6WGd0CgD9hacqiqe9ZbfPd53REDLfBpVe+xRlENuS3E=)
                          3: wye8DmlYkdaQC1jq2FD5iM2DhEY.roa (hash: mjAPnFxN50juugPjJtBivCThtWn3b1yEogIYi0ZrGDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:1d:42:34:6d:d1:f0:e1:47:b7:2b:31:88:2e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
        Validity
            Not Before: Jul 27 08:00:39 2026 GMT
            Not After : Jul 28 08:00:39 2026 GMT
        Subject: CN=ef200f8dd0340f7962900f39fb5af4fae8bea81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:af:7f:f2:18:7f:02:99:7d:7c:44:4f:b5:
                    f8:13:95:25:3a:39:7b:c6:f5:10:18:4d:c5:38:99:
                    5c:c0:bd:28:34:46:62:d6:23:5b:b6:ba:38:66:e8:
                    17:bc:62:5e:fc:ff:75:86:80:f7:b4:fc:f5:56:fe:
                    57:f9:bc:c5:ae:f0:98:4d:43:16:d8:15:9b:f2:24:
                    f1:ae:ff:06:3d:33:e2:8b:d5:60:a6:fe:9f:d1:07:
                    b3:d8:6b:9c:0c:70:b0:d7:b8:27:d4:7b:df:f3:40:
                    f2:11:9e:82:ac:db:d0:52:7c:41:43:62:b3:b3:c0:
                    40:ff:bf:44:89:68:ae:11:8b:80:4b:4c:b7:20:ec:
                    af:c5:02:01:97:11:4d:3a:21:4a:b4:ab:e5:ef:98:
                    51:fe:4b:9a:e0:3d:04:6d:d9:5c:11:b5:80:6f:75:
                    4b:91:26:08:a3:39:37:86:f7:40:f2:29:42:4a:89:
                    25:70:64:30:a7:3a:88:cf:90:12:f1:0e:25:d2:da:
                    27:e5:4e:b1:f5:a6:c1:2a:01:dd:5d:25:5a:e9:2b:
                    40:21:3d:b1:1d:aa:7f:88:2b:82:2d:13:4d:c2:55:
                    9d:96:92:7f:ab:e9:30:fd:c3:3f:87:a1:71:6d:93:
                    72:bc:f1:13:5f:95:ac:c6:09:de:5e:97:a1:0e:2c:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:20:0F:8D:D0:34:0F:79:62:90:0F:39:FB:5A:F4:FA:E8:BE:A8:1D
            X509v3 Authority Key Identifier:
                keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:71:c1:ae:e7:30:27:e0:fc:13:ab:30:d7:27:4d:a2:82:
         4f:03:02:db:1a:8e:f8:6a:88:77:21:0d:cb:b7:25:97:43:52:
         0e:8b:d6:f1:d7:c8:2f:49:70:cf:d7:14:ad:d2:22:17:8c:ea:
         15:2e:58:df:8b:03:bb:58:2f:93:11:2c:67:bc:98:15:3e:c7:
         65:b7:8e:f7:1d:50:83:a5:05:2d:d8:dd:d0:e8:ff:60:21:90:
         b9:38:42:a0:e1:82:d6:31:38:49:a8:31:4f:05:0b:13:ed:07:
         87:8a:9c:5c:1e:ec:e5:c5:1f:d2:00:10:c8:dd:fa:9f:1b:8d:
         04:ad:0c:bc:4c:0f:24:15:25:88:93:0b:97:7c:64:08:b5:73:
         24:d8:80:06:81:ba:99:6c:c8:6b:7b:a2:1d:4c:53:78:d1:2d:
         de:f9:e3:49:3e:3a:5a:ab:19:f4:a7:72:4c:b5:1f:97:82:27:
         be:54:a5:26:33:ff:f6:da:fd:6d:da:2b:88:b0:f1:f0:2e:2b:
         07:a8:5b:19:52:ce:1f:a4:59:3e:7c:12:f9:18:71:69:34:0d:
         b1:c4:e6:89:67:57:63:f7:90:e2:e6:e6:61:64:f2:0f:7b:61:
         da:9f:8f:a1:0e:d5:b1:0a:f2:e8:31:80:9f:9d:c8:ea:5f:74:
         87:ed:ef:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:20 2026 by rpki-client