Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File:                     WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier:          UhfIsd4MYJpYzNB+1X805HkBaZ2DQ6xeGTsUiAfsoH8=
Subject key identifier:   CE:A6:2E:96:68:2E:1C:AC:9B:07:B2:A5:56:82:97:3E:8C:24:51:CC
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer:       /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial:       019FA3AA777E24033095C062E32D41ED11D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 13:01:25 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:25 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:25 +0000
Files and hashes:         1: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: aetnL++jb5mWlqqsRN8+M+fNn8CwCJcHhD2isstsxH8=)
                          2: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (hash: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:77:7e:24:03:30:95:c0:62:e3:2d:41:ed:11:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
        Validity
            Not Before: Jul 27 13:01:25 2026 GMT
            Not After : Jul 28 13:01:25 2026 GMT
        Subject: CN=cea62e96682e1cac9b07b2a55682973e8c2451cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:e9:a7:83:a5:16:ee:55:0b:7a:5f:9a:9b:
                    d7:37:12:27:c9:c9:44:39:06:69:2b:b6:5e:62:ce:
                    27:16:7a:0e:09:d0:95:a1:12:fe:57:2f:4e:c0:14:
                    97:a8:6d:ad:f0:6e:ff:db:dc:de:ed:4d:40:d3:e2:
                    42:ab:ed:54:af:7a:2f:fb:71:16:5a:55:ff:96:9e:
                    85:02:d1:0d:c6:4a:d9:ec:7c:0b:b8:77:3a:ad:ba:
                    79:19:ca:cf:8c:a4:8e:70:89:78:ae:f0:89:0f:af:
                    ce:79:c3:1f:6f:90:19:40:09:f7:7a:e1:f9:3e:00:
                    f7:48:ef:fb:83:4b:2b:ad:b5:e0:b1:c9:ce:8c:99:
                    8f:f3:52:04:33:f0:27:62:86:e2:40:02:3f:53:a6:
                    c5:42:bc:48:c6:d9:83:c9:88:cc:df:2f:05:7c:6e:
                    84:d6:97:a6:3f:53:f9:16:cb:1b:24:e9:ea:27:e1:
                    3b:66:45:e5:33:8b:9d:5d:e2:59:66:36:9a:25:5f:
                    51:c1:dc:66:3c:08:61:2e:48:b6:c8:ea:02:21:b8:
                    4d:6e:39:5b:25:21:df:c7:9b:b6:54:af:99:99:06:
                    68:8d:00:1d:5b:16:1b:4a:21:f8:a4:e0:9d:e6:14:
                    9b:be:a1:92:cc:b0:3f:a9:76:d8:6f:87:7f:21:75:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A6:2E:96:68:2E:1C:AC:9B:07:B2:A5:56:82:97:3E:8C:24:51:CC
            X509v3 Authority Key Identifier:
                keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:37:98:5c:11:4c:03:3a:f4:38:8b:1b:b1:7b:00:d1:df:72:
         95:46:0e:77:aa:17:f2:e0:a8:e8:8d:3a:58:8e:3e:7c:6d:f7:
         b0:3b:bf:9c:b8:60:b1:e0:0f:0c:54:01:96:c7:92:c5:32:69:
         77:76:82:0b:fc:9a:27:8f:1e:3f:a0:e9:26:47:ef:39:6d:da:
         0c:cf:92:d3:0a:80:89:84:a6:d3:13:88:d3:25:f7:1e:c3:bc:
         61:2c:0b:df:ce:3e:03:64:02:00:09:a3:86:7f:bc:3a:4a:9a:
         84:53:cd:77:3b:45:99:d5:f1:27:3a:9c:65:1b:cc:18:16:7a:
         f6:64:c5:2d:46:bd:55:6c:42:b9:ec:4b:69:f6:e2:54:0b:9b:
         ec:45:13:9f:3f:01:97:df:f8:2d:8d:2f:88:a6:5f:6f:50:12:
         1a:f0:28:cb:b2:9a:af:22:e3:3b:7d:72:a7:6b:ed:26:94:34:
         ab:4f:f6:dc:49:de:1e:a4:f1:db:54:31:73:93:55:23:cf:da:
         9d:43:ca:6a:ad:d3:64:01:ae:f4:b3:84:37:c9:d0:e2:95:8a:
         d6:78:99:e6:c3:23:c9:25:fe:3e:cf:bb:7b:4d:37:d3:52:b1:
         5a:fa:02:43:28:4d:da:04:26:8e:8f:a2:37:2f:d5:4c:4a:b8:
         17:23:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:23:29 2026 by rpki-client