Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File:                     wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier:          s1CisCGnQ9HtuY3xGTrQwtRKa8DZHFHwKgwmxaIqbCM=
Subject key identifier:   6F:D6:2C:C8:65:53:6C:30:A8:8D:BF:EC:B8:29:7A:DD:31:38:3B:1D
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer:       /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial:       019FA0A907158EE188754EEC242E7DA46C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number:          19D0
Signing time:             Sun 26 Jul 2026 23:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:59 +0000
Files and hashes:         1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
                          2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: au+l1i1knIJMts0xANVPQW5Ibjb0GuYJQ+m7hHw49Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a9:07:15:8e:e1:88:75:4e:ec:24:2e:7d:a4:6c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
        Validity
            Not Before: Jul 26 23:00:59 2026 GMT
            Not After : Jul 27 23:00:59 2026 GMT
        Subject: CN=6fd62cc865536c30a88dbfecb8297add31383b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:64:7d:da:99:d4:dc:d7:aa:30:36:3e:c9:
                    9f:bf:df:d1:50:f7:2d:80:7b:a8:79:2f:5d:c4:97:
                    36:7a:e7:c9:a6:cc:ba:df:19:67:9a:a9:fe:65:a2:
                    65:aa:34:74:b3:2c:d2:65:bc:9e:49:90:de:11:52:
                    86:9d:77:6e:6f:aa:88:aa:5f:c5:62:95:5a:74:d5:
                    ea:dd:1f:72:0d:27:ea:c3:4a:ef:4c:f5:13:0c:d8:
                    10:5c:32:08:9b:49:88:dc:64:80:2f:27:6d:76:8d:
                    fd:1d:e6:75:19:18:a9:72:00:5d:65:34:63:92:cd:
                    48:b1:01:37:ac:af:b4:02:46:a8:a6:20:ee:e3:76:
                    e3:93:82:12:fa:e4:a6:dc:04:59:fa:ce:3e:85:af:
                    11:63:01:83:2c:8e:30:68:bb:e2:69:2b:b0:c0:92:
                    6c:d3:06:ec:e9:b1:b3:e7:42:09:88:f8:e8:d2:15:
                    08:ec:e9:3e:51:91:81:2d:29:cd:4d:ad:6c:51:4b:
                    03:33:b7:68:60:7a:55:e3:05:f5:5b:bb:8d:d8:53:
                    86:ac:37:5b:f0:72:19:fb:56:d4:03:a1:df:04:80:
                    f6:ed:f7:ca:ff:95:52:09:dc:6c:b3:39:45:20:da:
                    d8:c4:8d:b4:79:c2:21:d4:38:4b:63:21:d1:c1:7a:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D6:2C:C8:65:53:6C:30:A8:8D:BF:EC:B8:29:7A:DD:31:38:3B:1D
            X509v3 Authority Key Identifier:
                keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:db:d2:a3:36:42:71:5f:ca:2b:6b:47:a3:31:c0:ea:46:
         2b:b4:3d:c1:76:05:22:43:e3:a9:21:8a:4c:f3:33:59:d7:f6:
         72:6d:8c:d1:30:05:9e:40:a5:44:ae:ff:9c:b9:d9:99:c6:a1:
         8e:f8:7b:38:fa:e9:de:2f:5d:b7:59:34:b4:85:e7:28:06:d4:
         b8:83:75:47:dc:99:d5:58:a3:f3:17:a0:d3:5d:c7:36:ad:73:
         c8:75:bd:ff:35:9e:f1:f0:96:8f:f2:20:3a:24:ae:83:46:27:
         81:73:c1:d4:31:e9:95:80:92:8b:1f:6f:ce:48:2d:c5:c2:51:
         2f:d6:4b:03:99:55:a8:c1:a5:90:b7:14:fe:b2:8a:85:18:e8:
         79:f8:11:a6:74:e1:df:5a:2a:98:e6:56:a0:9d:00:d7:5b:16:
         d9:6a:d5:a8:6d:ae:e7:76:47:db:78:38:8a:46:eb:e0:aa:34:
         da:f8:c3:90:46:55:22:e2:05:08:92:37:88:64:8d:66:d7:84:
         fd:d8:ce:dc:5b:7f:c5:b2:ea:50:3d:7d:bb:d8:b8:c4:c5:5a:
         fd:82:c2:42:07:20:b1:d7:28:5b:6d:3d:c9:d5:bf:07:59:c5:
         ac:c0:92:c0:c8:e3:54:4c:94:d3:e5:c2:10:a1:91:11:02:f6:
         63:00:35:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqQcVjuGIdU7sJC59pGwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzA1ZWNlNmM5MDhhZDg4ODI1MTNkYTNhMjVhMTYwNzAz
YmI3ZjYwHhcNMjYwNzI2MjMwMDU5WhcNMjYwNzI3MjMwMDU5WjAzMTEwLwYDVQQD
Eyg2ZmQ2MmNjODY1NTM2YzMwYTg4ZGJmZWNiODI5N2FkZDMxMzgzYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDBkfdqZ1NzXqjA2Psmfv9/RUPct
gHuoeS9dxJc2eufJpsy63xlnmqn+ZaJlqjR0syzSZbyeSZDeEVKGnXdub6qIql/F
YpVadNXq3R9yDSfqw0rvTPUTDNgQXDIIm0mI3GSALydtdo39HeZ1GRipcgBdZTRj
ks1IsQE3rK+0AkaopiDu43bjk4IS+uSm3ARZ+s4+ha8RYwGDLI4waLviaSuwwJJs
0wbs6bGz50IJiPjo0hUI7Ok+UZGBLSnNTa1sUUsDM7doYHpV4wX1W7uN2FOGrDdb
8HIZ+1bUA6HfBID27ffK/5VSCdxsszlFINrYxI20ecIh1DhLYyHRwXogFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/WLMhlU2wwqI2/7Lgpet0xODsdMB8GA1UdIwQY
MBaAFMHAXs5skIrYiCUT2joloWBwO7f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAt
ZWJiNjNhNDU0YTkxLzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAtZWJiNjNhNDU0YTkx
LzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbnb0qM2
QnFfyitrR6MxwOpGK7Q9wXYFIkPjqSGKTPMzWdf2cm2M0TAFnkClRK7/nLnZmcah
jvh7OPrp3i9dt1k0tIXnKAbUuIN1R9yZ1Vij8xeg013HNq1zyHW9/zWe8fCWj/Ig
OiSug0YngXPB1DHplYCSix9vzkgtxcJRL9ZLA5lVqMGlkLcU/rKKhRjoefgRpnTh
31oqmOZWoJ0A11sW2WrVqG2u53ZH23g4ikbr4Ko02vjDkEZVIuIFCJI3iGSNZteE
/djO3Ft/xbLqUD19u9i4xMVa/YLCQgcgsdcoW209ydW/B1nFrMCSwMjjVEyU0+XC
EKGREQL2YwA1zQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:30:58 2026 by rpki-client