Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
File:                     WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft (raw, json)
Hash identifier:          EIdaWGTes+tfdjuWyQbjwImfYsVjVAS11TgZqUOmIy0=
Subject key identifier:   C2:7A:4D:51:27:2E:D0:07:E3:9A:91:1B:F7:19:31:CB:43:63:64:FD
Authority key identifier: 5A:F5:47:B7:70:6F:CD:B1:8A:F5:A2:EF:C7:87:41:6D:B0:8A:1E:BD
Certificate issuer:       /CN=5af547b7706fcdb18af5a2efc787416db08a1ebd
Certificate serial:       019FDB06BCD1FA9C252AB08171828117707A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
Manifest number:          89
Signing time:             Fri 07 Aug 2026 07:01:19 +0000
Manifest this update:     Fri 07 Aug 2026 07:01:19 +0000
Manifest next update:     Sat 08 Aug 2026 07:01:19 +0000
Files and hashes:         1: WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl (hash: kOL+e4pIMc1OqVq/UojkTgi+szQdTAoPHgbPwbn2Db8=)
                          2: jq5WfSeP2pDPT2hiFBZeXrNo_gA.roa (hash: 8UIQ/f3+ilI0mGQboCjy2Gm2Iv4nHmZ9Nb2yvR4gYaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:db:06:bc:d1:fa:9c:25:2a:b0:81:71:82:81:17:70:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af547b7706fcdb18af5a2efc787416db08a1ebd
        Validity
            Not Before: Aug  7 07:01:19 2026 GMT
            Not After : Aug  8 07:01:19 2026 GMT
        Subject: CN=c27a4d51272ed007e39a911bf71931cb436364fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0d:61:47:92:ad:21:dd:fa:1e:0e:f9:16:16:
                    59:a9:f7:30:4b:bc:6f:26:24:98:e6:ef:65:8a:00:
                    ac:fa:f0:7a:a4:73:77:4f:eb:26:a4:d9:e6:0e:30:
                    7e:1d:e8:b5:79:1e:4c:c7:69:a4:60:04:e7:47:72:
                    9f:ec:94:13:1b:ff:14:5a:61:4a:31:ff:d1:aa:31:
                    9c:3b:b1:78:15:f7:39:5b:fb:4b:c1:bb:4c:09:67:
                    8a:10:8f:cd:c2:a3:51:fa:b1:13:ba:1f:ef:d8:35:
                    42:b2:52:66:dc:a9:aa:5c:be:30:ea:8e:ea:d5:2e:
                    17:53:e4:86:60:56:3d:ab:66:c8:2d:e2:8e:6c:18:
                    ff:92:1f:f1:1c:66:19:4e:a1:df:0f:a9:c4:f6:fe:
                    ac:ec:78:a5:4e:b2:0b:ff:3f:4a:1c:73:43:09:27:
                    72:d7:5e:05:c1:58:b6:31:76:47:08:fd:f8:30:25:
                    15:f1:a1:45:f8:cc:00:78:08:b9:7a:13:03:34:7f:
                    72:1c:e9:6e:77:68:13:21:bc:80:09:e6:ec:ab:4f:
                    e6:95:3c:67:c5:7d:1f:6c:20:e3:15:99:f4:c5:20:
                    3a:52:fc:39:3b:f5:1e:d3:f2:cc:11:62:90:c7:a7:
                    ef:8c:21:15:62:75:e8:54:98:17:e9:21:6e:35:b2:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:4D:51:27:2E:D0:07:E3:9A:91:1B:F7:19:31:CB:43:63:64:FD
            X509v3 Authority Key Identifier:
                keyid:5A:F5:47:B7:70:6F:CD:B1:8A:F5:A2:EF:C7:87:41:6D:B0:8A:1E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:e1:62:40:2b:86:0f:a3:2c:43:56:f5:c3:91:06:fc:5b:
         ac:50:8a:61:7e:8a:ef:55:eb:d9:87:2b:1f:dd:ce:64:72:1f:
         92:03:93:c5:82:5d:79:4e:24:8a:60:cb:14:d0:4c:a3:17:33:
         0b:d7:84:91:b8:99:54:1a:74:6a:f1:74:4a:ad:64:99:93:c8:
         5d:69:29:50:ee:90:84:64:d4:dc:4f:97:61:85:e1:4c:bb:8d:
         66:ec:b5:0b:64:18:d6:17:20:32:f2:16:1a:4d:2f:36:d1:fd:
         77:b4:e0:f3:d7:7a:db:17:04:5c:bd:f0:f8:ed:a8:47:95:fa:
         2b:af:e7:97:d2:58:35:f4:d9:18:ed:b1:20:46:18:52:91:0a:
         87:a6:4c:1c:b8:f1:92:e4:d7:04:ee:6f:11:8d:a0:1d:1a:ff:
         16:ea:65:61:4f:e9:66:ad:d5:7c:e5:3e:57:8f:c5:b1:6b:fc:
         8c:19:52:a4:99:06:d6:8e:ca:9e:b8:20:e5:34:a5:cf:b1:6c:
         c6:47:3b:02:45:9a:33:ce:ce:0a:b8:0a:67:35:70:df:ff:7f:
         56:5c:ad:87:10:62:22:b8:a9:74:98:2c:73:4e:ca:e3:98:5e:
         35:40:3b:01:ee:1c:8a:f0:63:0c:f5:cd:a8:0c:ee:51:a0:24:
         40:93:74:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/bBrzR+pwlKrCBcYKBF3B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjU0N2I3NzA2ZmNkYjE4YWY1YTJlZmM3ODc0MTZkYjA4
YTFlYmQwHhcNMjYwODA3MDcwMTE5WhcNMjYwODA4MDcwMTE5WjAzMTEwLwYDVQQD
EyhjMjdhNGQ1MTI3MmVkMDA3ZTM5YTkxMWJmNzE5MzFjYjQzNjM2NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A1hR5KtId36Hg75FhZZqfcwS7xv
JiSY5u9ligCs+vB6pHN3T+smpNnmDjB+Hei1eR5Mx2mkYATnR3Kf7JQTG/8UWmFK
Mf/RqjGcO7F4Ffc5W/tLwbtMCWeKEI/NwqNR+rETuh/v2DVCslJm3KmqXL4w6o7q
1S4XU+SGYFY9q2bILeKObBj/kh/xHGYZTqHfD6nE9v6s7HilTrIL/z9KHHNDCSdy
114FwVi2MXZHCP34MCUV8aFF+MwAeAi5ehMDNH9yHOlud2gTIbyACebsq0/mlTxn
xX0fbCDjFZn0xSA6Uvw5O/Ue0/LMEWKQx6fvjCEVYnXoVJgX6SFuNbKwKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ6TVEnLtAH45qRG/cZMctDY2T9MB8GA1UdIwQY
MBaAFFr1R7dwb82xivWi78eHQW2wih69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZWSHQzQnZ6YkdLOWFMdng0ZEJiYkNLSHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mNzVjZjMtMWY3Zi00M2Y5LWE1YmUt
YmM1Y2I5NjNkZTVkLzEvV3ZWSHQzQnZ6YkdLOWFMdng0ZEJiYkNLSHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mNzVjZjMtMWY3Zi00M2Y5LWE1YmUtYmM1Y2I5NjNkZTVk
LzEvV3ZWSHQzQnZ6YkdLOWFMdng0ZEJiYkNLSHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgrhYkAr
hg+jLENW9cORBvxbrFCKYX6K71Xr2YcrH93OZHIfkgOTxYJdeU4kimDLFNBMoxcz
C9eEkbiZVBp0avF0Sq1kmZPIXWkpUO6QhGTU3E+XYYXhTLuNZuy1C2QY1hcgMvIW
Gk0vNtH9d7Tg89d62xcEXL3w+O2oR5X6K6/nl9JYNfTZGO2xIEYYUpEKh6ZMHLjx
kuTXBO5vEY2gHRr/FuplYU/pZq3VfOU+V4/FsWv8jBlSpJkG1o7Knrgg5TSlz7Fs
xkc7AkWaM87OCrgKZzVw3/9/VlythxBiIripdJgsc07K45heNUA7Ae4civBjDPXN
qAzuUaAkQJN0bg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:34 2026 by rpki-client