Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          vL4SXoQ2nKEXlrrPmN+et65vjCATMiB5FtNnxc7czco=
Subject key identifier:   AD:9E:CA:22:87:11:77:F7:93:F8:8F:01:F8:56:8C:94:85:5C:E2:B6
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       019F63EFFB1C4162DEE3EF22A38A34322B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          1916
Signing time:             Wed 15 Jul 2026 04:01:39 +0000
Manifest this update:     Wed 15 Jul 2026 04:01:39 +0000
Manifest next update:     Thu 16 Jul 2026 04:01:39 +0000
Files and hashes:         1: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: MFAo+Ycr9h/88e4WghxxWVcu799NlvZaZw6YrzA1m7I=)
                          2: uXS0bdbFdOHb6Fis6v93sRggyKI.roa (hash: 5dDzWf7HGqV8pXI0aYhhoLgb4jJbNqsLqa/M4syFKfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:63:ef:fb:1c:41:62:de:e3:ef:22:a3:8a:34:32:2b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Jul 15 04:01:39 2026 GMT
            Not After : Jul 16 04:01:39 2026 GMT
        Subject: CN=ad9eca22871177f793f88f01f8568c94855ce2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:23:86:f1:c7:3a:53:e0:2b:c2:39:c2:04:
                    78:77:29:58:7b:b0:e5:54:6e:6b:59:ea:09:dd:f8:
                    d3:29:22:c5:54:a2:a3:6d:56:97:54:33:1a:60:17:
                    c2:79:3d:78:59:73:b8:fd:64:26:fa:13:1d:cd:ad:
                    9d:fe:15:ef:de:6e:70:41:5c:49:07:51:35:3d:6a:
                    b1:8c:b6:25:d1:46:43:4d:77:c6:a5:b1:ad:a7:17:
                    04:bf:95:ef:1c:ff:fa:3d:e3:99:ea:3a:d4:ca:57:
                    1c:c1:4a:36:79:b2:d9:19:8f:48:0b:d3:f8:bf:80:
                    12:49:74:17:a5:7e:10:aa:cc:f6:0a:c5:5c:c3:f3:
                    8a:5b:e8:46:ff:c7:15:92:d0:3f:eb:6f:1e:e9:fd:
                    31:03:88:fd:cd:b6:2c:b2:ce:bf:17:0c:63:b4:6b:
                    fd:0c:1b:cd:f7:8e:96:5d:91:a3:15:41:26:f7:4c:
                    ab:f9:f5:f7:7b:0e:5a:aa:f2:a6:26:f6:8c:64:e3:
                    9c:ab:fe:ea:8c:7f:22:75:65:b8:66:75:18:63:2f:
                    5d:3b:96:93:67:52:0e:13:2a:84:af:a6:da:bf:ee:
                    32:18:1e:00:45:4c:67:e8:ec:92:0d:ec:c3:7f:19:
                    79:d0:48:0a:33:0c:8e:65:f9:ab:6e:52:be:2d:9f:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:CA:22:87:11:77:F7:93:F8:8F:01:F8:56:8C:94:85:5C:E2:B6
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:34:13:c7:85:b9:6d:ec:39:b1:dd:94:bc:ab:e3:11:e6:
         4b:73:4d:fc:bb:ba:7d:49:41:9e:66:59:bb:70:1a:c3:38:da:
         38:bc:84:63:6b:13:cc:44:9c:fd:d2:3a:93:a3:5c:76:a4:d9:
         c5:35:f4:0a:ef:c4:f8:60:38:46:8a:c1:44:bf:2f:a6:4e:bc:
         e1:60:0b:fc:10:29:a5:23:ca:4b:0a:a6:83:80:8c:c7:6e:05:
         4d:b5:f0:fd:84:d4:5f:98:3a:ea:12:50:fa:f1:d2:b2:7e:57:
         59:84:00:2e:14:a9:49:64:b8:b7:06:4e:00:e4:63:34:ce:c8:
         30:d6:a1:a9:58:75:c8:ef:33:05:b8:7b:5f:94:e5:4a:b5:9a:
         cf:14:48:0c:12:ea:df:e4:69:95:8d:e4:6c:f9:d8:e0:43:00:
         da:ff:95:f1:04:0c:16:33:e9:0f:2a:0f:8a:15:75:7e:ae:dc:
         d6:1a:86:aa:d8:94:74:63:6a:11:a3:e2:93:e9:20:2f:bd:9b:
         30:19:d8:3e:4e:96:a5:bf:04:03:38:ad:de:7b:b3:8e:e2:0f:
         2c:13:60:07:a9:e9:34:86:ef:29:32:de:e7:a0:ef:7d:5b:9e:
         a6:a4:6f:51:46:66:63:fd:e5:da:7b:1c:56:3a:94:0a:63:e9:
         f2:91:29:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9j7/scQWLe4+8io4o0MiuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2
NjkyNTAwHhcNMjYwNzE1MDQwMTM5WhcNMjYwNzE2MDQwMTM5WjAzMTEwLwYDVQQD
EyhhZDllY2EyMjg3MTE3N2Y3OTNmODhmMDFmODU2OGM5NDg1NWNlMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgIjhvHHOlPgK8I5wgR4dylYe7Dl
VG5rWeoJ3fjTKSLFVKKjbVaXVDMaYBfCeT14WXO4/WQm+hMdza2d/hXv3m5wQVxJ
B1E1PWqxjLYl0UZDTXfGpbGtpxcEv5XvHP/6PeOZ6jrUylccwUo2ebLZGY9IC9P4
v4ASSXQXpX4Qqsz2CsVcw/OKW+hG/8cVktA/628e6f0xA4j9zbYsss6/FwxjtGv9
DBvN946WXZGjFUEm90yr+fX3ew5aqvKmJvaMZOOcq/7qjH8idWW4ZnUYYy9dO5aT
Z1IOEyqEr6bav+4yGB4ARUxn6OySDezDfxl50EgKMwyOZfmrblK+LZ+jawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2eyiKHEXf3k/iPAfhWjJSFXOK2MB8GA1UdIwQY
MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt
OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm
LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG80E8eF
uW3sObHdlLyr4xHmS3NN/Lu6fUlBnmZZu3AawzjaOLyEY2sTzESc/dI6k6NcdqTZ
xTX0Cu/E+GA4RorBRL8vpk684WAL/BAppSPKSwqmg4CMx24FTbXw/YTUX5g66hJQ
+vHSsn5XWYQALhSpSWS4twZOAORjNM7IMNahqVh1yO8zBbh7X5TlSrWazxRIDBLq
3+RplY3kbPnY4EMA2v+V8QQMFjPpDyoPihV1fq7c1hqGqtiUdGNqEaPik+kgL72b
MBnYPk6Wpb8EAzit3nuzjuIPLBNgB6npNIbvKTLe56DvfVuepqRvUUZmY/3l2nsc
VjqUCmPp8pEpiQ==
-----END CERTIFICATE-----
Generated at Wed Jul 15 14:32:13 2026 by rpki-client