Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          3+OdY60W+2AXQAKhhjicTacPztJAw71nnCXjkicP3yM=
Subject key identifier:   8C:77:A6:57:1F:86:DF:00:EF:8F:B3:FA:73:B4:B9:A5:E6:53:24:FA
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       019FAB9AA96B7EDB0FB8FB579A0E7CEB9F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          04DA
Signing time:             Wed 29 Jul 2026 02:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:07 +0000
Files and hashes:         1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=)
                          2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: 8MZLN1UKLvWInqn1D6/jvjRXk6u+nEDNwE2NGO/YQic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:a9:6b:7e:db:0f:b8:fb:57:9a:0e:7c:eb:9f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Jul 29 02:01:07 2026 GMT
            Not After : Jul 30 02:01:07 2026 GMT
        Subject: CN=8c77a6571f86df00ef8fb3fa73b4b9a5e65324fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:24:69:97:98:58:79:bb:5e:76:9c:76:fc:a5:
                    c6:8f:40:4d:0b:36:f3:1d:a0:f0:f3:3d:a0:28:26:
                    f0:a7:e8:34:b6:52:c3:33:f8:ad:89:3b:47:16:ec:
                    14:72:97:f4:28:5b:c2:9a:bc:7e:49:a1:d2:f6:18:
                    1a:4c:cf:58:d4:34:13:43:f3:08:f1:00:a2:e4:07:
                    71:aa:31:5d:04:c4:a2:ea:73:40:ba:1d:28:9e:01:
                    a1:1c:77:99:85:19:18:3c:7d:16:76:88:0e:11:83:
                    60:a6:14:c3:e2:15:14:c5:6b:d8:94:c0:5e:ec:81:
                    72:fc:f6:64:f4:ec:81:95:ed:d0:78:71:95:51:df:
                    b7:de:31:30:68:4a:52:b5:5a:20:a3:82:ab:75:12:
                    28:c1:25:ff:ac:6b:42:f2:c0:21:a3:b5:5a:e2:93:
                    c3:27:03:80:2c:a3:53:e6:6e:94:39:af:d2:e7:19:
                    72:84:b3:7d:b5:ca:eb:45:96:34:c6:fc:d1:f8:41:
                    7d:7b:38:65:f4:8f:f8:14:df:6b:3f:7e:07:4f:43:
                    eb:0f:29:8e:f7:ec:31:37:e7:f5:ca:08:0b:d1:5d:
                    5e:dc:e3:26:17:6a:85:f5:66:c7:82:e3:78:97:30:
                    9e:b0:1e:27:fe:42:a6:14:eb:bf:6c:72:e4:22:7a:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:A6:57:1F:86:DF:00:EF:8F:B3:FA:73:B4:B9:A5:E6:53:24:FA
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:7e:f9:cc:e2:94:5e:27:16:48:04:4b:6b:a2:bb:bb:0b:
         03:ee:a3:2d:47:ea:61:e8:34:e4:13:41:80:81:a3:f6:6f:bd:
         79:72:8b:dc:ea:e9:04:40:f6:7b:38:c4:ea:4a:88:39:d5:b5:
         63:ec:04:19:7c:29:0f:4f:54:8a:28:5c:f3:7e:67:25:9c:46:
         94:21:c4:6d:a7:64:38:27:d2:73:cf:42:eb:e8:f8:ce:d1:74:
         37:c7:51:61:77:b6:1d:ba:70:c1:27:b0:61:ae:9a:83:37:b9:
         25:f8:3a:e8:d1:d7:d0:d8:b6:d3:74:c7:ea:a3:ac:51:88:35:
         e1:4b:29:87:84:6b:ea:da:f9:7d:bf:4f:a4:c5:75:a2:f6:85:
         3c:2a:9b:5d:ab:82:7c:e6:0d:ce:16:76:7f:87:e9:05:a1:fd:
         cf:56:ba:63:14:c9:f6:43:e6:c5:51:9c:e1:d9:ab:82:e0:d4:
         d3:49:78:b1:4f:be:db:f0:2b:46:3e:43:b1:90:fd:b7:2a:e8:
         53:0b:1a:d3:21:b4:1b:06:5d:d1:b6:62:de:34:fc:65:27:89:
         60:6a:30:c6:72:75:82:72:c2:a1:e5:4f:4f:92:3d:69:77:25:
         e3:7a:9c:73:d7:99:9d:2d:76:4b:f4:c8:73:83:ef:2a:30:c7:
         21:79:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:05 2026 by rpki-client