Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          vGFB8DrXDsut3Nj4NsdvqE38zgWrEAxXM5HCcfhMT2s=
Subject key identifier:   24:89:F6:58:E4:B8:FE:52:12:67:CB:4A:76:B6:BA:8B:1C:5B:49:B7
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       019F9D71744B893A92E3431F6C4F5360459F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          19D3
Signing time:             Sun 26 Jul 2026 08:01:25 +0000
Manifest this update:     Sun 26 Jul 2026 08:01:25 +0000
Manifest next update:     Mon 27 Jul 2026 08:01:25 +0000
Files and hashes:         1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
                          2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
                          3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
                          4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: YtbL0q05GxV7p1aYYf2WAX3IpA+RI54xhfgFrXKXPrw=)
                          5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:71:74:4b:89:3a:92:e3:43:1f:6c:4f:53:60:45:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Jul 26 08:01:25 2026 GMT
            Not After : Jul 27 08:01:25 2026 GMT
        Subject: CN=2489f658e4b8fe521267cb4a76b6ba8b1c5b49b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:2f:cf:1c:55:63:50:70:6c:e1:9a:70:bc:
                    d0:dd:c5:60:9b:97:26:b5:a7:e2:00:c4:fd:5b:c2:
                    0b:36:45:da:31:6e:26:2b:f5:2a:d1:03:19:2f:76:
                    bc:f9:82:60:8e:67:ef:3e:09:ea:a4:b8:c9:a5:1e:
                    f4:3c:01:c5:4b:77:73:d3:6b:6a:90:13:25:ae:5b:
                    51:d8:6b:ce:6f:d9:e0:d1:ef:91:a6:7a:85:90:aa:
                    df:1b:49:9c:dd:11:63:70:37:f4:75:51:8b:5f:cc:
                    77:58:41:8d:e8:88:36:09:39:ec:8c:3b:0d:a9:30:
                    4a:f5:b3:b8:69:6f:89:17:65:bc:b5:40:48:37:63:
                    45:57:64:be:37:b4:ec:e4:72:9a:4e:eb:4b:7b:9c:
                    ee:3f:d5:a6:78:2b:df:d1:c9:e4:bc:48:63:0d:8b:
                    ec:47:e7:30:8f:b1:04:9f:1b:d6:33:b9:bf:7f:b8:
                    29:65:bc:a3:40:6a:20:a2:7e:e7:29:46:84:2c:d8:
                    94:e6:76:24:bc:95:b0:fa:88:7c:f8:ff:28:d4:54:
                    ab:a5:41:3a:5e:4f:85:f7:94:ab:86:54:fe:af:3f:
                    18:44:08:b9:0c:62:6c:b8:51:1b:d1:a5:26:df:f1:
                    a6:9d:25:97:6f:f5:96:3d:9e:49:fd:cc:56:77:ce:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:F6:58:E4:B8:FE:52:12:67:CB:4A:76:B6:BA:8B:1C:5B:49:B7
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1a:78:bc:1c:78:d9:7e:f4:8e:8f:72:fa:05:b1:fa:0d:8e:
         ad:73:82:c5:41:7c:fa:91:7d:8b:c7:94:5a:6b:f1:ac:6c:5c:
         ed:67:fa:2e:dd:29:34:47:f4:12:fb:4f:63:d5:3a:17:cf:89:
         a3:8b:ee:42:2d:01:43:d0:38:7e:26:20:e7:c0:50:93:cf:24:
         b0:75:8f:d1:51:7c:1e:d5:af:b4:64:00:75:5c:25:2c:c6:8d:
         79:12:0f:bf:88:91:25:60:af:0c:41:39:f5:af:7e:33:57:de:
         31:0f:91:61:36:55:5d:0b:d8:fb:d0:9f:a2:41:49:0f:0f:3d:
         b3:2a:97:23:0b:06:be:f3:0d:af:d2:60:e3:0f:ed:c1:cd:fc:
         aa:b1:3e:14:36:32:98:d7:78:05:8c:78:39:24:65:af:c7:aa:
         3d:dd:02:94:6f:9d:db:fb:0a:34:d8:78:25:8d:00:65:34:75:
         37:ad:3b:97:27:b0:d2:d7:06:3b:38:aa:e0:ce:71:fc:3e:fe:
         9d:0f:84:93:53:3f:c4:9d:bb:a8:57:8b:77:6f:6d:34:b1:f0:
         38:1d:61:f2:57:85:06:5e:03:ed:ff:4e:a0:2c:ed:c3:ec:fe:
         68:41:af:08:8e:46:58:15:d5:77:8c:ca:c5:67:a6:2e:ac:a2:
         7b:80:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:51:04 2026 by rpki-client