Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          S0rgZ8mhtI6mPRtaWmJSE/XgzPffTijUa5HOV5AG7rs=
Subject key identifier:   42:0C:25:61:3D:3F:C6:2C:0E:F7:BB:5C:16:58:64:9A:BF:EF:4E:FF
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       019FAABEFFD8C16970C27D5976820CB0D2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          13FA
Signing time:             Tue 28 Jul 2026 22:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:11 +0000
Files and hashes:         1: DIGCQbMEvX3S2DQ7VERDwaNmPgI.roa (hash: vrQP6CoSztwA+KPM4HiP9pP5zfEZ7MxF+t1JeC7UBYM=)
                          2: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: 3XeVXev4/CqA9bvY41M2RQihmlplviaxMK0HyoehzgI=)
                          3: ubWTx4s1XitX6PHQT8bII0Sr8VA.roa (hash: OkiBE/NUzkKV+xXfw7sua6AgcBbcZ2vjT39S06HxuOw=)
                          4: uhG95XF25QmjvzLstx1n9pIbB5g.roa (hash: nKE/loz1ortOdOeQYwJVvnlVW4oJD/w1eygAfQW6kko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:ff:d8:c1:69:70:c2:7d:59:76:82:0c:b0:d2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Jul 28 22:01:11 2026 GMT
            Not After : Jul 29 22:01:11 2026 GMT
        Subject: CN=420c25613d3fc62c0ef7bb5c1658649abfef4eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:e6:79:7e:06:59:d0:33:7f:d3:72:49:1f:
                    f8:68:00:18:8d:8a:b1:ce:ba:ba:4c:d2:93:5a:3d:
                    4c:7d:57:a5:07:88:8d:75:eb:aa:0a:4f:66:79:aa:
                    20:a6:8d:4d:5d:dd:60:af:8a:50:15:1b:dc:b3:5f:
                    52:34:30:7b:14:dc:c3:a6:ba:a7:cb:b9:7c:01:2f:
                    9f:22:83:fb:16:cb:06:fd:c0:c0:c5:68:d9:24:4c:
                    77:15:70:12:37:11:ed:41:ef:a6:0c:ef:ea:fb:c9:
                    4d:83:cb:8d:90:91:e6:4b:8e:10:5c:77:48:c0:ac:
                    69:d2:76:76:24:35:cb:7f:0e:da:d5:d2:ba:e0:17:
                    f1:51:d8:fd:76:c1:c3:b8:b4:0f:2c:6b:e4:88:29:
                    e4:fc:da:02:9d:94:2b:a8:38:fb:84:45:33:0d:e3:
                    0b:6a:2d:f9:ea:9f:59:d3:95:74:76:50:75:71:7c:
                    d3:c5:b5:40:42:ef:15:35:21:0a:56:97:59:a4:97:
                    a7:1f:79:e8:a0:9d:22:3f:66:d8:b7:6f:68:ae:d3:
                    a5:9d:2a:64:db:2c:d1:71:52:94:fa:da:89:6e:a6:
                    2d:74:29:92:a0:03:08:ad:43:dd:52:81:91:fd:a4:
                    18:0d:6c:ba:df:5f:59:40:c6:18:a1:77:e1:69:56:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:25:61:3D:3F:C6:2C:0E:F7:BB:5C:16:58:64:9A:BF:EF:4E:FF
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:16:71:c3:93:cf:e1:5c:e9:d1:23:a6:10:d0:29:d5:74:37:
         f2:9b:f2:df:be:7e:09:7f:ea:4d:53:0a:5d:4f:da:9b:01:2a:
         88:cf:fb:69:a3:2f:01:ee:a6:b8:b2:a4:b5:0b:41:4c:db:cb:
         ed:4b:75:19:6e:7e:43:21:d8:b0:3b:2c:b4:b2:22:f5:27:c0:
         ff:e4:63:9b:cb:59:69:47:d8:4d:0b:13:ef:36:2a:b7:43:63:
         e3:e9:0c:3a:0a:6c:de:4b:25:d9:6a:f1:e6:9d:d3:e2:ab:92:
         57:72:3c:52:e9:39:73:78:5a:cc:c2:12:68:41:3d:e6:6a:87:
         68:63:31:ca:a2:17:70:b7:ee:4b:54:c1:64:07:2a:7b:8f:0f:
         05:8d:e6:eb:6c:dd:20:3d:88:f1:c8:fa:7a:4f:14:d2:66:77:
         25:3b:4e:f8:10:f0:89:c4:2f:95:2a:d0:6f:9b:bd:62:73:85:
         0f:48:ab:3b:bc:d1:cf:ec:6d:2d:2b:2f:b0:2a:bd:29:6f:38:
         f2:3a:39:7f:fd:39:d2:5a:d8:c5:94:1a:86:36:50:01:ca:8f:
         4b:77:cd:8b:06:ad:f4:99:ac:d1:c5:ee:f6:b8:22:51:1f:de:
         4d:2c:52:ad:74:3f:31:20:16:dc:78:05:57:54:8f:ef:36:32:
         fe:4a:23:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvv/YwWlwwn1ZdoIMsNLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWJmZjlkNDFmNzE5ZjYyNjAwYzMyZDM0MTBkZGI5OWVj
Y2IzMGMwHhcNMjYwNzI4MjIwMTExWhcNMjYwNzI5MjIwMTExWjAzMTEwLwYDVQQD
Eyg0MjBjMjU2MTNkM2ZjNjJjMGVmN2JiNWMxNjU4NjQ5YWJmZWY0ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRTmeX4GWdAzf9NySR/4aAAYjYqx
zrq6TNKTWj1MfVelB4iNdeuqCk9meaogpo1NXd1gr4pQFRvcs19SNDB7FNzDprqn
y7l8AS+fIoP7FssG/cDAxWjZJEx3FXASNxHtQe+mDO/q+8lNg8uNkJHmS44QXHdI
wKxp0nZ2JDXLfw7a1dK64BfxUdj9dsHDuLQPLGvkiCnk/NoCnZQrqDj7hEUzDeML
ai356p9Z05V0dlB1cXzTxbVAQu8VNSEKVpdZpJenH3nooJ0iP2bYt29ortOlnSpk
2yzRcVKU+tqJbqYtdCmSoAMIrUPdUoGR/aQYDWy6319ZQMYYoXfhaVbcIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIMJWE9P8YsDve7XBZYZJq/707/MB8GA1UdIwQY
MBaAFFtb/51B9xn2JgDDLTQQ3bmezLMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEt
ZjBjNjI1OGI5YTA0LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEtZjBjNjI1OGI5YTA0
LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRZxw5PP
4Vzp0SOmENAp1XQ38pvy375+CX/qTVMKXU/amwEqiM/7aaMvAe6muLKktQtBTNvL
7Ut1GW5+QyHYsDsstLIi9SfA/+Rjm8tZaUfYTQsT7zYqt0Nj4+kMOgps3ksl2Wrx
5p3T4quSV3I8Uuk5c3hazMISaEE95mqHaGMxyqIXcLfuS1TBZAcqe48PBY3m62zd
ID2I8cj6ek8U0mZ3JTtO+BDwicQvlSrQb5u9YnOFD0irO7zRz+xtLSsvsCq9KW84
8jo5f/050lrYxZQahjZQAcqPS3fNiwat9Jms0cXu9rgiUR/eTSxSrXQ/MSAW3HgF
V1SP7zYy/kojJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:42 2026 by rpki-client