Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
File:                     wIi1a9ngFvm8Uhr03CSebRJWsd8.mft (raw, json)
Hash identifier:          aUrGMTXq2kSCIM2m2GA4dDzogbdfEZjp4RXBOu/jFe0=
Subject key identifier:   E2:35:C9:E2:8F:21:4B:65:1D:1C:A0:97:12:F9:26:4A:42:AF:CD:11
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Certificate issuer:       /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial:       019FAB6387D7CC96C14E37E09E9584CC3AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 01:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:54 +0000
Files and hashes:         1: 84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa (hash: 2XJZi7mXa4opeuJIyNfWmpTnxGxuMecCcsVg8EKeWbU=)
                          2: kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa (hash: wiygXWg117FYrb4QXRydtTU624Ret1FMbW/7q/ighUY=)
                          3: wIi1a9ngFvm8Uhr03CSebRJWsd8.crl (hash: 5VRi6eTtw9FDTPI9918iaG00easlTd116jl/RBcgrT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:87:d7:cc:96:c1:4e:37:e0:9e:95:84:cc:3a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
        Validity
            Not Before: Jul 29 01:00:54 2026 GMT
            Not After : Jul 30 01:00:54 2026 GMT
        Subject: CN=e235c9e28f214b651d1ca09712f9264a42afcd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:b4:e2:eb:8a:77:e7:cd:7d:bc:4b:01:cd:
                    4a:7f:5a:8d:69:f3:2d:62:bd:08:13:9b:a0:6d:03:
                    71:85:9b:ec:5f:33:a6:90:22:5c:e1:81:71:6e:61:
                    b4:8a:42:e3:34:77:4b:d4:29:90:d0:72:0a:fa:ab:
                    8e:5f:a9:1e:8a:d8:0c:84:37:8c:c6:76:56:f0:77:
                    6e:5b:d2:b4:33:29:4c:16:30:cb:9e:a8:28:a2:13:
                    5a:58:a4:9f:7e:a4:67:ef:5a:85:90:8d:9c:ef:e2:
                    66:9f:c5:d4:f1:af:87:ab:e9:ed:58:b2:72:c1:e5:
                    65:8a:5f:41:48:76:89:c7:44:06:b1:be:f8:78:f3:
                    54:b0:59:6c:75:12:b5:f0:8c:dc:78:3b:79:45:61:
                    b9:94:e0:c8:a8:eb:16:bb:22:dc:43:ec:b7:43:73:
                    88:e0:e2:57:df:78:8d:47:0f:96:14:ce:1e:e2:b2:
                    78:d6:30:1c:26:47:75:e6:f6:e3:51:d0:5c:f2:83:
                    e6:d7:d2:98:3b:f7:d3:27:d1:cc:f2:38:c3:3c:ff:
                    fa:f5:50:7f:51:43:c3:b4:63:d8:93:c7:23:4e:42:
                    b7:9a:ce:77:0c:ec:4b:db:07:57:13:b7:67:d2:fe:
                    bf:2b:db:ed:53:ce:c0:56:af:ea:82:48:93:c3:af:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:35:C9:E2:8F:21:4B:65:1D:1C:A0:97:12:F9:26:4A:42:AF:CD:11
            X509v3 Authority Key Identifier:
                keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:27:de:e1:f3:93:0b:c6:9e:fb:f2:55:eb:be:77:08:c2:
         60:e8:23:ad:9c:f9:72:f1:b9:69:74:43:89:c9:ea:e6:6c:68:
         ea:81:7b:73:93:06:b4:b8:5f:9b:16:be:eb:42:65:17:26:24:
         bb:16:82:3c:80:41:db:bc:fa:5d:30:00:a5:19:0f:e2:c3:da:
         c2:23:64:76:60:33:91:93:c2:e0:a8:0c:b8:7b:6b:1c:24:6a:
         94:04:42:8d:19:02:48:ee:32:8e:e3:02:f1:36:b4:de:0a:33:
         c5:df:53:98:49:af:e3:b0:22:0e:f8:b5:af:9d:a1:bc:3a:48:
         6d:37:5e:69:3b:70:e4:31:20:e0:6c:eb:0a:ee:92:69:af:e7:
         b2:36:8f:e7:86:7a:b8:2f:da:fe:b4:d2:5b:b3:7f:73:47:3f:
         9c:25:77:a7:9b:bc:8c:99:ba:1f:3d:7f:13:ab:57:b8:2b:f5:
         0b:42:01:a7:70:f9:74:00:16:21:2f:25:16:54:4a:3f:e7:92:
         ac:01:cf:1b:4a:59:bf:2d:dc:e2:7e:20:f6:7b:90:83:55:0d:
         6b:0e:1f:6c:02:cf:99:10:56:19:80:a9:f3:32:28:28:54:0d:
         54:a8:b1:83:80:b6:0d:63:10:23:74:ec:b8:3d:55:6c:84:ef:
         25:38:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:32 2026 by rpki-client