Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File:                     WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier:          Euxb0Hz9rJrrHGgq9fnnCZX11NF4Cejni6CRulEtu4U=
Subject key identifier:   DA:94:C9:6D:C9:E7:5A:91:84:CA:E6:F1:F7:CF:47:8F:EC:AB:2E:26
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer:       /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial:       019FA0716A3D4B9A6C566A38656134A74000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number:          11EE
Signing time:             Sun 26 Jul 2026 22:00:15 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:15 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:15 +0000
Files and hashes:         1: Ka7alFqI87s4EdJtZyqE-NGPHhs.roa (hash: 3RMOWVJO1ZQcH4d2j0ueEWLJLM5MekEDToq5QKnUUrM=)
                          2: VQIQLar7HwcjhVGKE5MtajsCN6g.roa (hash: SY7ZBqxQfy17eB+jMKdcaxNzW/pWzNXUCVDqxS62ZG4=)
                          3: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: +K0zTYQvQIELvs61QcaoLxKRwX88YLERbrk1pZG3EqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:6a:3d:4b:9a:6c:56:6a:38:65:61:34:a7:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
        Validity
            Not Before: Jul 26 22:00:15 2026 GMT
            Not After : Jul 27 22:00:15 2026 GMT
        Subject: CN=da94c96dc9e75a9184cae6f1f7cf478fecab2e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c5:0b:61:17:43:e2:5a:b4:40:7d:c3:2e:bb:
                    23:b8:9b:c3:4d:f3:03:76:1a:df:10:67:9a:eb:b0:
                    a4:b6:7c:f9:35:71:55:0a:fe:9e:1b:90:1e:5a:24:
                    48:30:98:98:48:82:c2:56:2f:a9:b3:7c:3d:62:7e:
                    52:4c:c1:0c:7d:d3:f4:05:9a:e8:e7:5a:75:29:9e:
                    51:9e:10:4d:3b:fd:c9:86:27:ac:e6:49:7d:44:2c:
                    4d:14:b3:eb:32:5b:c9:db:1f:6a:5c:20:c9:c8:ce:
                    a8:0e:1f:e7:ec:88:81:f9:e5:65:74:d1:7f:bf:88:
                    33:75:f3:0e:90:7a:e0:a0:be:ed:83:83:d3:8f:84:
                    53:7d:f7:06:86:4a:68:80:d3:ca:d7:d0:60:5b:9d:
                    4c:80:60:c1:73:d7:2e:e2:d3:2b:4c:dd:9f:49:78:
                    7a:13:f3:74:d9:be:d2:0c:6b:a6:37:18:aa:73:5e:
                    ad:d2:c9:f8:68:6d:31:5d:61:90:46:1e:e7:f0:37:
                    fe:19:bd:3e:12:2f:31:64:e3:53:d4:42:10:f8:ea:
                    dc:f7:3e:0e:dd:4f:f0:c6:32:42:f4:03:c3:26:3b:
                    c1:31:9d:c8:00:67:9e:68:dd:db:54:7a:42:a0:e9:
                    91:30:dd:39:02:98:8b:f7:91:db:0e:1f:b3:9a:6a:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:C9:6D:C9:E7:5A:91:84:CA:E6:F1:F7:CF:47:8F:EC:AB:2E:26
            X509v3 Authority Key Identifier:
                keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1a:85:05:d8:55:2f:ee:ef:e1:5b:d0:7e:5a:fe:a6:94:11:
         2f:09:39:19:b2:60:bc:da:9e:e0:5f:23:a5:ea:46:6c:32:e9:
         13:91:7c:d1:b9:04:35:2c:d9:31:ba:ab:43:bf:54:db:38:9f:
         22:05:18:91:69:5f:73:dc:dd:6d:52:8d:63:9b:04:c1:4b:5f:
         4a:ff:2d:45:98:a3:80:33:45:cb:0c:90:7d:2f:4e:e2:e4:a0:
         c8:7b:46:8a:b6:a5:a6:b9:30:ad:f8:bf:1f:1b:e8:e3:59:f9:
         58:10:5c:77:b6:7f:9e:4d:0c:a7:d6:3e:cf:5f:ab:8d:de:6c:
         99:59:db:cc:89:9e:15:89:11:ce:81:2a:aa:35:d8:c0:f7:71:
         98:66:09:0f:8c:6a:67:24:a3:c0:18:7f:b0:03:31:09:af:d6:
         9c:5d:bb:a2:d2:0b:9f:40:42:45:9b:ce:1f:3a:23:26:49:56:
         12:c6:5f:51:6c:5b:f2:fd:c3:ee:5b:e5:3b:49:0e:76:ba:7e:
         1d:e0:7d:ec:d4:d5:40:ef:a3:f8:59:df:24:0f:be:5f:99:af:
         cf:f5:dd:11:d8:63:9a:d9:b3:7e:55:95:e5:19:55:71:38:52:
         bb:23:3a:cd:fb:c5:c5:31:04:f2:42:80:a8:ce:30:76:59:94:
         64:45:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:32 2026 by rpki-client