Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          sfMKLfVGSAClUwEJxYC1chccW8QzVibuohjmEePCMsI=
Subject key identifier:   F1:F2:AE:80:38:0F:FA:68:5E:98:E1:12:A9:42:59:94:74:43:93:4A
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       019F818C571A12BDA6D1F9466B84C97669C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          0A8E
Signing time:             Mon 20 Jul 2026 22:01:25 +0000
Manifest this update:     Mon 20 Jul 2026 22:01:25 +0000
Manifest next update:     Tue 21 Jul 2026 22:01:25 +0000
Files and hashes:         1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
                          2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: RGB+xHxGirtloXwZVLnwdcp40h4K5J8nr4h9MFhtiTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:8c:57:1a:12:bd:a6:d1:f9:46:6b:84:c9:76:69:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Jul 20 22:01:25 2026 GMT
            Not After : Jul 21 22:01:25 2026 GMT
        Subject: CN=f1f2ae80380ffa685e98e112a94259947443934a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:b7:28:ac:80:d7:60:7d:33:af:66:bb:c6:
                    8a:30:79:59:f8:1b:44:6d:16:29:71:dd:8d:25:87:
                    f0:1a:bc:62:fe:cc:72:db:0b:d3:15:75:6e:bc:d9:
                    ff:2a:af:c7:ed:38:dc:72:84:1a:5c:06:99:45:78:
                    7b:a8:10:fd:a7:7b:77:ba:3f:0c:04:d1:8e:eb:c7:
                    4d:84:d8:2f:a9:14:5a:7b:db:73:bb:c5:5c:9a:d3:
                    aa:12:93:f6:b1:30:6b:4e:32:64:2c:8b:de:83:ea:
                    ad:eb:c5:62:65:fb:94:0c:d7:40:dc:2a:48:dd:7b:
                    d0:60:e5:aa:8f:6d:e7:5f:a8:84:4b:63:32:43:3f:
                    c4:3d:7f:15:fa:c3:66:6b:11:24:b1:7d:e7:4f:bc:
                    a0:9a:22:fc:40:08:36:17:7a:97:d5:75:3a:6f:4c:
                    28:ca:9e:e2:71:5e:65:77:69:c1:a4:1b:e0:66:7c:
                    e7:67:79:ef:26:62:de:bf:85:f5:00:a6:99:ac:fd:
                    65:87:25:81:aa:3f:10:28:8e:5e:2a:10:53:0a:54:
                    b9:11:fa:eb:de:f1:bb:e4:d6:b8:e1:1f:fa:9f:80:
                    35:a1:e6:89:4e:e0:0f:d7:2e:a2:80:3f:bc:a1:46:
                    71:5a:c6:89:8c:9e:7a:6c:d2:b4:8f:9f:3e:cd:c5:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:AE:80:38:0F:FA:68:5E:98:E1:12:A9:42:59:94:74:43:93:4A
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:0b:50:f7:91:ec:1f:65:d8:83:75:31:16:6e:8a:db:11:
         76:5e:9b:57:c6:ef:6e:95:84:c6:22:ba:36:5e:76:68:ea:32:
         7a:91:04:cd:d3:bc:ad:09:32:02:d5:aa:64:af:76:de:de:2f:
         04:e8:4f:d3:8b:09:b8:a1:74:8d:b8:60:d6:3e:8d:ab:4a:fa:
         3c:d6:6e:e8:5f:23:04:cb:ba:70:8f:40:86:b8:30:54:ca:7f:
         e7:23:5d:85:80:cf:e1:d7:9f:21:e9:88:a0:77:2f:c9:e3:67:
         a5:cc:50:e6:d6:d9:fb:fb:98:ad:6c:15:89:88:88:8d:5d:97:
         c6:b3:c4:5e:04:5e:0f:a9:d6:2f:68:82:b2:e1:13:58:11:0a:
         f6:46:ae:ed:77:d7:8c:27:9e:a4:3c:ea:e3:65:ea:1d:2e:12:
         1d:71:6c:e0:62:6b:c8:3f:e5:3f:ba:1b:f2:ab:f0:44:e8:8a:
         c4:ba:ca:a6:81:b2:5b:d2:68:2d:bc:84:34:4b:f6:a6:b0:b0:
         1e:88:5c:98:5f:64:a1:ab:5a:66:fe:05:f3:95:48:ac:b0:25:
         38:f7:dc:8a:76:28:f2:b0:28:c2:9e:fc:91:4b:46:86:3a:24:
         47:18:ec:22:bf:c5:a7:1f:db:ea:d2:fc:18:e9:f2:79:ba:8a:
         c6:52:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:29:30 2026 by rpki-client