Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File:                     WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier:          CUmol5VFnlzZZpx2bqWH1kOA3BZ+byleXqyiqctg9Os=
Subject key identifier:   A5:ED:ED:D1:15:C4:27:FD:6B:18:41:58:FE:C2:9E:53:2B:F5:F8:50
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer:       /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial:       019FAC07E0340CBC14A921E17E6B64E7495A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number:          1551
Signing time:             Wed 29 Jul 2026 04:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:25 +0000
Files and hashes:         1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
                          2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: aJOjYsOJA0ay+7Oj92612tiC0WBxgx49VshYyn9bw9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:e0:34:0c:bc:14:a9:21:e1:7e:6b:64:e7:49:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
        Validity
            Not Before: Jul 29 04:00:25 2026 GMT
            Not After : Jul 30 04:00:25 2026 GMT
        Subject: CN=a5ededd115c427fd6b184158fec29e532bf5f850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:c9:94:ca:d8:fb:06:6e:75:92:c8:b6:44:
                    24:ef:d7:a6:27:62:54:4a:fb:87:11:1a:8a:2d:27:
                    57:f5:86:b0:44:d4:e7:48:ab:4d:02:8a:02:6c:72:
                    19:48:f1:a5:6a:d0:09:0a:10:69:90:48:31:5e:f2:
                    73:06:d8:a9:23:af:a3:b2:a5:ec:e4:67:62:20:bc:
                    27:a1:aa:70:1f:8c:3a:f4:80:b7:ce:a2:a2:01:35:
                    88:24:2b:51:66:80:87:7b:22:91:83:77:88:11:d5:
                    69:b8:fb:05:f0:e8:d1:95:88:19:e5:a3:15:db:0f:
                    ff:56:1a:6d:3f:fe:84:8f:48:08:1a:06:f3:10:21:
                    f8:59:b0:51:04:9d:53:cc:ef:50:24:b3:0c:66:9a:
                    f1:bc:2a:1f:f2:8f:96:73:83:0c:c0:ea:3a:e2:76:
                    9a:c8:98:49:52:7a:83:59:87:5e:6a:60:62:e3:b7:
                    85:fb:f3:61:38:cf:c9:bd:22:e7:14:a6:9d:79:b9:
                    61:15:d0:54:21:c0:1a:92:5c:dd:2f:f6:c9:0d:31:
                    1b:b0:3b:ec:e8:05:bc:51:03:5b:42:81:5d:88:94:
                    ef:5e:7e:22:71:3a:91:eb:29:bf:b3:1d:25:6c:f2:
                    83:9b:c5:cc:82:55:d9:8a:4b:c7:99:02:ae:13:4b:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:ED:ED:D1:15:C4:27:FD:6B:18:41:58:FE:C2:9E:53:2B:F5:F8:50
            X509v3 Authority Key Identifier:
                keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:02:1c:72:5b:04:bf:9e:0b:6b:0b:48:0d:a5:4f:b3:dd:
         34:7f:f7:74:99:a2:c8:71:18:9b:1a:a7:c8:d0:70:0c:bb:93:
         8d:2e:d2:60:ce:14:73:fa:c9:98:63:4a:0b:f0:77:56:28:98:
         12:dc:21:77:cc:e6:4a:d0:e5:f4:b2:48:ca:f5:9c:c9:bc:de:
         5d:5d:0f:10:c2:9e:b3:ac:9f:06:c2:9a:db:2b:05:04:d4:03:
         5d:30:6a:9a:ef:82:20:d7:c1:d5:8a:c8:8e:61:47:16:78:e9:
         3e:86:0f:a8:4c:bf:fd:bd:c2:66:58:c5:6d:4a:20:51:8f:1a:
         17:a5:9c:b0:51:f6:50:32:e5:5c:7b:72:4b:1f:2f:8f:a3:0e:
         6c:c4:17:09:52:36:f4:95:c5:78:f7:4c:12:f2:0c:36:5b:ce:
         0e:a8:81:80:5f:4d:61:a4:44:0f:27:e9:f5:3f:52:07:9c:74:
         08:92:36:19:ee:d5:f5:95:f6:41:05:ee:94:29:d6:c2:13:eb:
         d7:72:65:f2:7f:5e:61:ad:df:68:eb:55:7e:c2:3e:3d:d5:5c:
         42:48:09:4d:19:0a:ed:7d:3d:e1:bb:69:20:db:3c:31:f0:d6:
         d0:9f:f8:cc:80:f7:6d:1f:ce:64:61:8b:06:3a:65:ba:1f:3d:
         f2:2a:28:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sB+A0DLwUqSHhfmtk50laMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjYwNzI5MDQwMDI1WhcNMjYwNzMwMDQwMDI1WjAzMTEwLwYDVQQD
EyhhNWVkZWRkMTE1YzQyN2ZkNmIxODQxNThmZWMyOWU1MzJiZjVmODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOTJlMrY+wZudZLItkQk79emJ2JU
SvuHERqKLSdX9YawRNTnSKtNAooCbHIZSPGlatAJChBpkEgxXvJzBtipI6+jsqXs
5GdiILwnoapwH4w69IC3zqKiATWIJCtRZoCHeyKRg3eIEdVpuPsF8OjRlYgZ5aMV
2w//VhptP/6Ej0gIGgbzECH4WbBRBJ1TzO9QJLMMZprxvCof8o+Wc4MMwOo64naa
yJhJUnqDWYdeamBi47eF+/NhOM/JvSLnFKadeblhFdBUIcAaklzdL/bJDTEbsDvs
6AW8UQNbQoFdiJTvXn4icTqR6ym/sx0lbPKDm8XMglXZikvHmQKuE0tlBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXt7dEVxCf9axhBWP7CnlMr9fhQMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3cCHHJb
BL+eC2sLSA2lT7PdNH/3dJmiyHEYmxqnyNBwDLuTjS7SYM4Uc/rJmGNKC/B3ViiY
Etwhd8zmStDl9LJIyvWcybzeXV0PEMKes6yfBsKa2ysFBNQDXTBqmu+CINfB1YrI
jmFHFnjpPoYPqEy//b3CZljFbUogUY8aF6WcsFH2UDLlXHtySx8vj6MObMQXCVI2
9JXFePdMEvIMNlvODqiBgF9NYaREDyfp9T9SB5x0CJI2Ge7V9ZX2QQXulCnWwhPr
13Jl8n9eYa3faOtVfsI+PdVcQkgJTRkK7X094btpINs8MfDW0J/4zID3bR/OZGGL
Bjpluh898ioonw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:08 2026 by rpki-client