Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          3MPGFrEU6qKk+CHwgDn5w81Poq+SgUoa6daXMAE6bjU=
Subject key identifier:   C3:1A:1B:5F:CA:13:51:7D:32:3F:5A:5B:E4:C7:F2:94:93:D4:FD:F9
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       019F95801179391252AB1E8A1C2137AA24D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 19:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:25 +0000
Files and hashes:         1: EAHkC7o9VL-S2-gmEhIR8E0Rx9o.roa (hash: OdYtd2ANkkqc8l4EyXlFU9oU1QIesxnnDbHz973YpsU=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: ZyyB253gAG1LvAk2Sjt7Ean1GRra8HvuKpoLU+X8kLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:11:79:39:12:52:ab:1e:8a:1c:21:37:aa:24:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Jul 24 19:00:25 2026 GMT
            Not After : Jul 25 19:00:25 2026 GMT
        Subject: CN=c31a1b5fca13517d323f5a5be4c7f29493d4fdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:b8:b4:37:f8:e4:11:5f:50:03:b8:9d:db:
                    91:70:85:10:f7:3b:ba:7a:5a:1a:c5:9c:ae:93:ca:
                    1e:5f:39:3f:c7:e3:a1:54:a7:0c:29:e5:16:15:30:
                    6d:07:19:e5:11:60:30:ab:17:59:21:ed:79:a7:b3:
                    63:3a:9a:58:66:96:35:2d:d8:b4:89:b5:2f:ef:89:
                    0c:47:53:97:97:d7:f4:e7:37:df:fd:37:c8:93:4e:
                    c2:2c:56:4d:83:94:7a:e7:cf:72:c1:0e:9c:d3:52:
                    19:c6:29:49:5f:9c:97:24:c8:8e:0b:ba:e0:53:4f:
                    7c:10:d9:e4:1d:95:47:99:8b:77:08:47:05:8a:8d:
                    ec:e9:be:86:a5:a0:b6:bc:45:62:13:87:c9:9a:9b:
                    02:38:2f:ab:7e:3c:fd:62:e3:04:88:f1:3d:e1:66:
                    60:1d:a4:70:02:39:01:27:b3:c7:73:3d:1b:51:64:
                    f9:5e:59:35:82:f1:64:59:db:1c:5c:ce:e0:c0:f1:
                    34:c5:3f:43:d2:95:61:04:81:f5:28:3e:61:95:d6:
                    07:65:5e:da:6a:9b:89:ed:5d:29:6e:ad:50:0e:0f:
                    9a:77:fa:67:c1:14:3f:e8:0d:61:1f:27:03:94:63:
                    13:71:d9:d4:f8:59:ee:64:7a:15:8f:2b:db:df:d4:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1A:1B:5F:CA:13:51:7D:32:3F:5A:5B:E4:C7:F2:94:93:D4:FD:F9
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:92:f8:6e:43:cd:69:ac:b2:ff:4e:dc:61:f1:e4:7c:9d:
         18:a3:85:01:1f:54:db:14:cf:2d:25:62:25:97:5d:89:68:cd:
         75:90:8b:77:13:c2:9a:cf:d6:cc:f2:a2:72:de:b5:05:42:c8:
         0e:92:20:0e:17:1c:59:1b:48:d3:08:0d:91:c9:10:7e:4b:89:
         ce:9f:b6:c7:6b:f0:e7:74:c4:f6:d7:38:81:44:04:55:dc:5a:
         58:57:94:69:fd:af:0e:5f:18:65:23:5a:69:eb:9b:92:fe:e3:
         7b:dd:ef:c2:4e:bb:e5:62:75:d5:f1:2f:b9:26:70:57:10:e4:
         81:a2:2f:2b:6a:f7:e9:06:af:f8:71:e9:de:34:97:6a:59:7f:
         0f:dc:6a:b3:83:20:e3:7a:8d:d4:b5:a8:de:95:2f:0c:ed:c7:
         0b:74:d0:6c:1b:50:11:c6:d5:e0:71:25:fd:10:0a:3a:91:52:
         a8:a8:e5:8a:d5:d8:c1:8c:cc:25:b8:47:f1:93:97:aa:e0:a9:
         de:ab:97:47:8c:8c:d2:fa:71:78:17:2c:02:f6:66:c7:d1:05:
         98:b2:d8:6a:e0:10:6e:e7:eb:0d:3f:c3:2c:59:0b:c5:7f:d5:
         92:0a:50:8c:e7:e4:b5:e6:da:8c:5f:71:06:3c:42:da:dd:1d:
         73:63:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:57:17 2026 by rpki-client