Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          lS/CsgLvenONkAgXz9Ha6FxF7A9h2+d5dOMAgdZCZ00=
Subject key identifier:   BE:BB:B4:29:07:76:4D:B5:F4:8E:68:16:FB:F9:A4:31:4D:0A:68:C6
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       019FA975868F4AB2469C723A9235AC752AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          1454
Signing time:             Tue 28 Jul 2026 16:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:19 +0000
Files and hashes:         1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: 4y7E6kx0N7fbPzJleLfELbnqXciYJyGOLeEnFPALWEE=)
                          2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
                          3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:86:8f:4a:b2:46:9c:72:3a:92:35:ac:75:2a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Jul 28 16:01:19 2026 GMT
            Not After : Jul 29 16:01:19 2026 GMT
        Subject: CN=bebbb42907764db5f48e6816fbf9a4314d0a68c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:d5:18:64:bc:06:4c:ad:be:eb:ed:06:2f:
                    d7:ea:0c:8e:5c:24:30:48:0e:3d:e8:c1:5e:43:18:
                    37:bc:66:4e:c2:84:4c:2f:0f:14:8f:d6:dd:89:f7:
                    86:a6:64:29:8f:8d:2e:09:dd:d8:08:46:9e:ce:ec:
                    63:7f:2e:02:ea:3f:c1:0e:5a:5f:12:56:ff:3a:4d:
                    84:e5:c9:12:81:00:5f:06:00:5d:e5:41:d3:6e:70:
                    17:8d:55:8a:1d:49:9b:cf:9a:1b:87:3c:06:d3:f8:
                    dc:97:1c:6c:87:ec:3e:ca:7b:02:05:bc:01:1f:32:
                    34:ac:75:b9:9c:2b:f7:20:ce:32:86:bb:bb:dc:ad:
                    9b:ba:f4:ad:7f:01:cf:cd:4f:1a:a7:95:c4:dd:9f:
                    e7:b6:ab:27:8c:1f:65:17:65:b3:e3:79:7e:61:61:
                    a7:27:b6:11:54:a8:dc:c3:38:72:41:ce:42:47:90:
                    bc:52:b7:5e:fd:94:df:21:0c:55:9d:9d:91:6b:5c:
                    6c:06:07:6f:b9:af:89:e8:58:e4:1a:5d:46:15:09:
                    c4:93:01:d0:35:3e:06:9e:54:c7:c0:60:19:5d:5f:
                    6c:e0:62:5b:a1:5d:4e:1d:bb:3d:1c:c9:cd:04:07:
                    59:b1:dc:f7:d2:89:1b:b7:44:9e:f7:63:95:92:6b:
                    5a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:B4:29:07:76:4D:B5:F4:8E:68:16:FB:F9:A4:31:4D:0A:68:C6
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:13:0e:cb:17:af:6d:3a:eb:55:96:fe:75:ac:76:53:11:
         80:ba:f1:88:34:c3:e6:cf:ef:0a:19:3e:98:23:81:2f:d0:30:
         b4:58:09:25:8a:5c:1d:65:b8:34:b8:e7:38:6b:2f:26:12:96:
         b8:34:f5:9c:c2:23:9e:cf:6f:fd:74:00:fb:c3:e6:7e:6a:08:
         78:a5:15:1d:cb:36:f5:ee:d9:46:93:9f:e6:f9:68:ad:08:60:
         7d:91:c7:59:d0:f0:9c:33:e9:33:a6:21:2f:1a:6d:a4:e3:bb:
         6b:22:ea:e3:25:98:15:ea:25:20:f1:70:ab:4b:19:f7:b6:50:
         9e:c5:6f:9b:d4:8a:e5:86:ab:34:b3:59:63:6a:19:8d:31:9f:
         78:9c:0a:0e:aa:f3:42:29:64:cf:37:5f:c9:f6:42:dd:e6:78:
         25:61:a6:41:ca:8f:77:35:c5:46:b1:e9:3b:a7:c9:8a:97:f5:
         56:f4:08:06:6e:74:55:40:fc:00:c7:93:ca:9f:a9:30:f5:58:
         6e:78:5e:5f:4b:5c:8b:69:41:d7:c0:00:ad:64:73:87:d7:78:
         84:ee:1b:3b:40:10:26:3c:36:34:1c:f7:d7:e0:e9:90:b7:1a:
         e9:8d:fb:72:95:8e:c0:a2:4c:a0:1e:c7:45:b5:b7:5f:ca:d1:
         63:f2:2d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdYaPSrJGnHI6kjWsdSqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjYwNzI4MTYwMTE5WhcNMjYwNzI5MTYwMTE5WjAzMTEwLwYDVQQD
EyhiZWJiYjQyOTA3NzY0ZGI1ZjQ4ZTY4MTZmYmY5YTQzMTRkMGE2OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SLVGGS8BkytvuvtBi/X6gyOXCQw
SA496MFeQxg3vGZOwoRMLw8Uj9bdifeGpmQpj40uCd3YCEaezuxjfy4C6j/BDlpf
Elb/Ok2E5ckSgQBfBgBd5UHTbnAXjVWKHUmbz5obhzwG0/jclxxsh+w+ynsCBbwB
HzI0rHW5nCv3IM4yhru73K2buvStfwHPzU8ap5XE3Z/ntqsnjB9lF2Wz43l+YWGn
J7YRVKjcwzhyQc5CR5C8Urde/ZTfIQxVnZ2Ra1xsBgdvua+J6FjkGl1GFQnEkwHQ
NT4GnlTHwGAZXV9s4GJboV1OHbs9HMnNBAdZsdz30okbt0Se92OVkmtaWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL67tCkHdk219I5oFvv5pDFNCmjGMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQwTDssX
r20661WW/nWsdlMRgLrxiDTD5s/vChk+mCOBL9AwtFgJJYpcHWW4NLjnOGsvJhKW
uDT1nMIjns9v/XQA+8PmfmoIeKUVHcs29e7ZRpOf5vlorQhgfZHHWdDwnDPpM6Yh
LxptpOO7ayLq4yWYFeolIPFwq0sZ97ZQnsVvm9SK5YarNLNZY2oZjTGfeJwKDqrz
QilkzzdfyfZC3eZ4JWGmQcqPdzXFRrHpO6fJipf1VvQIBm50VUD8AMeTyp+pMPVY
bnheX0tci2lB18AArWRzh9d4hO4bO0AQJjw2NBz31+DpkLca6Y37cpWOwKJMoB7H
RbW3X8rRY/It9A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:46 2026 by rpki-client