Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File:                     wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier:          1FyU6nkvlJWFiU58zVCA41UcuS/rLcdAWRbTm9YA9PY=
Subject key identifier:   DA:84:49:A7:7B:2E:97:C7:6F:32:7F:F2:12:F6:BF:4B:91:2C:ED:49
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer:       /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial:       019F830C84A32EA128B5CBD0FFE9D545C840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number:          141E
Signing time:             Tue 21 Jul 2026 05:01:03 +0000
Manifest this update:     Tue 21 Jul 2026 05:01:03 +0000
Manifest next update:     Wed 22 Jul 2026 05:01:03 +0000
Files and hashes:         1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
                          2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
                          3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: HUtlbxY5CKmGcQFd+kaFP7SHeufoyaXw6uu6N0+tbTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:0c:84:a3:2e:a1:28:b5:cb:d0:ff:e9:d5:45:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
        Validity
            Not Before: Jul 21 05:01:03 2026 GMT
            Not After : Jul 22 05:01:03 2026 GMT
        Subject: CN=da8449a77b2e97c76f327ff212f6bf4b912ced49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:e5:56:91:fa:78:a7:0e:87:c3:37:53:b3:
                    e3:7b:d3:df:bf:05:6f:15:e8:0f:31:9d:81:ef:22:
                    c6:0b:27:83:01:6b:30:85:08:12:06:6a:ba:92:1f:
                    4e:d0:67:f1:0e:f3:65:87:8a:0d:2a:c8:8d:5c:32:
                    bb:3c:b5:2e:09:1a:8a:26:cb:cd:44:92:04:79:6e:
                    c0:50:ac:57:5a:36:b6:24:f0:3b:b7:3c:41:a8:c5:
                    a0:f5:9e:1a:22:7e:05:07:de:72:c8:46:25:45:5f:
                    82:38:f6:8a:1b:89:96:b2:57:f8:2e:41:d0:af:6f:
                    70:4c:a2:62:99:93:d2:2a:a3:54:6f:0c:c0:fd:75:
                    a5:94:9d:d1:b6:22:c0:58:ea:28:71:17:e4:d1:b5:
                    ae:fb:f8:47:db:34:6b:f1:82:bf:2a:91:0d:96:a6:
                    53:7b:0a:98:6b:39:0a:ed:c3:3f:6f:53:7d:a3:ed:
                    7b:e0:4d:02:29:78:85:73:23:23:3d:71:07:52:67:
                    60:e0:83:ae:55:fe:66:d2:49:83:b7:14:1a:15:56:
                    63:41:6f:6a:4e:4b:33:43:0a:e0:c2:28:71:2d:9b:
                    2e:c2:62:39:1b:88:14:a1:1a:a6:d7:bf:b2:78:d6:
                    5d:35:38:9b:6e:d2:0d:3a:68:e5:74:df:74:a5:58:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:84:49:A7:7B:2E:97:C7:6F:32:7F:F2:12:F6:BF:4B:91:2C:ED:49
            X509v3 Authority Key Identifier:
                keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:73:d3:81:cb:10:fd:d9:94:c0:bb:17:00:6f:5a:fb:0f:6f:
         6e:e8:ae:cf:b8:4b:cd:39:6f:08:8f:4f:d9:0f:1c:66:b5:c6:
         7f:23:e5:a6:5d:e5:a0:cc:2f:4f:d2:9a:a4:69:da:22:ca:80:
         3b:e2:25:b2:13:81:4b:86:2e:08:30:0d:15:8c:06:a7:24:ec:
         a7:41:75:af:ba:6b:95:4d:7f:c6:ce:e0:a2:4c:89:3c:46:67:
         c3:36:c7:a0:a2:2d:ac:79:34:9a:c2:88:31:2b:76:b3:24:85:
         bb:ed:c3:6a:df:07:83:11:f5:c9:11:f3:66:68:82:5f:0f:b1:
         46:fa:a3:83:a5:7e:a7:d9:e8:59:2e:2c:84:6c:37:59:e3:5f:
         47:86:9f:4a:00:53:ec:7f:3d:c9:57:a1:88:f8:79:d9:bd:d3:
         65:67:ea:f5:0b:63:68:56:52:6d:a8:55:f9:6b:ac:a5:2b:6c:
         f3:ba:bd:21:c0:2c:71:66:66:a8:48:a7:fa:c9:4e:ea:c6:13:
         41:99:b6:9a:6b:40:7e:66:53:bb:5f:76:ea:09:81:a8:29:38:
         82:6e:ac:8a:df:e2:6f:b2:90:a6:88:ca:fd:41:be:58:fd:66:
         49:08:f9:d2:ff:dd:2c:0e:09:ae:d3:f5:23:4e:db:cc:04:0a:
         44:1b:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:20:46 2026 by rpki-client