Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File:                     WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier:          J6heQDTLhPOug++NcNaT6UlT5wIbtwBRyfMsCSIXaOw=
Subject key identifier:   5F:F2:D2:6C:B3:F3:98:8A:A8:3A:5F:6D:4F:F5:98:3D:1E:54:7A:C2
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer:       /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial:       019FAB9A23AE2183DC9F2E6F250CD84673E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number:          05D7
Signing time:             Wed 29 Jul 2026 02:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:33 +0000
Files and hashes:         1: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: 7N7K7xrgpnizoDL3z0LcoBRhgELyDUFiieFQhcBPEpk=)
                          2: m5v93tUMRlQaxfIjzpbnrJ9Lohk.roa (hash: 1uqxOdkBAdrXDzt6+/f4JBRjuvDt70ncNU0kmF4G9OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:23:ae:21:83:dc:9f:2e:6f:25:0c:d8:46:73:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
        Validity
            Not Before: Jul 29 02:00:33 2026 GMT
            Not After : Jul 30 02:00:33 2026 GMT
        Subject: CN=5ff2d26cb3f3988aa83a5f6d4ff5983d1e547ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:d7:f5:8c:56:b2:35:fe:3a:54:42:a4:39:
                    63:f1:c2:68:7b:3d:5c:81:6f:c1:ef:02:1b:df:e9:
                    21:a6:8e:58:da:73:98:2e:00:2f:86:00:d0:b8:a1:
                    e3:68:31:9a:64:0d:2e:4d:76:f0:0f:37:8e:39:9b:
                    ae:2e:ac:9f:45:b2:08:4e:27:3a:74:00:cc:c5:9a:
                    4a:8b:ed:5d:d2:4b:0a:6b:87:f2:1a:67:b5:47:d2:
                    7c:4c:4d:dc:00:c3:ea:f8:09:0d:88:bb:e6:a4:ed:
                    f1:a6:0b:b1:39:63:42:a7:6e:4c:a2:00:7b:8f:a9:
                    04:54:41:a9:0b:9e:00:c4:9b:72:d4:ca:d5:0e:f9:
                    d9:1e:2d:9a:84:b7:36:41:72:54:df:aa:8f:28:a6:
                    61:b7:d3:93:df:50:c4:cc:ab:39:02:4c:11:9a:25:
                    0e:08:ba:ec:96:64:a7:a9:2f:48:ab:31:9a:58:a2:
                    37:9d:9e:35:04:69:6d:da:6b:49:31:ba:73:f4:25:
                    0b:17:dc:02:19:a3:85:1d:02:3f:c2:12:e2:b5:61:
                    b7:6b:69:ab:0f:a6:59:3d:21:65:40:f8:6a:58:e5:
                    a1:f7:85:64:dd:f1:5a:cf:29:94:a9:a5:05:cb:d7:
                    b4:ca:88:bf:e6:a0:a5:ce:55:d6:71:74:08:63:76:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:D2:6C:B3:F3:98:8A:A8:3A:5F:6D:4F:F5:98:3D:1E:54:7A:C2
            X509v3 Authority Key Identifier:
                keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:57:de:4b:0e:c7:39:4a:48:5c:36:3d:d9:e5:a9:53:f4:
         a3:ed:be:95:1d:ca:b9:1d:83:16:2c:12:90:0e:a8:6d:d9:9d:
         8c:08:50:fb:d3:8e:d2:0b:52:e1:47:12:11:31:cc:1c:c3:0b:
         29:f2:9c:88:59:3e:33:3d:d3:0c:c7:3f:e6:f1:96:c9:97:77:
         f9:a1:66:11:fb:8b:e7:b0:be:f0:92:e3:77:a4:dd:8d:9a:52:
         20:07:5a:ab:0f:3d:66:ad:d7:d2:7e:16:1b:2d:41:82:f6:ca:
         5a:4d:e8:bf:02:b7:03:30:d4:09:e0:13:ce:9b:f7:a3:fd:04:
         44:99:d0:3a:73:97:78:1c:46:6e:4f:3b:06:1b:20:55:48:5c:
         c7:33:56:98:a8:0c:39:0d:75:41:92:9b:95:94:6b:16:4d:9b:
         4c:44:d2:00:97:ed:31:6c:ad:3e:4a:d8:59:ba:01:b7:dd:96:
         6a:53:4d:4e:8c:a6:ab:e0:d8:e3:ed:f2:c4:16:f0:c4:cc:8f:
         e0:a0:58:c7:8c:bc:2d:43:91:93:a5:a7:d3:3a:6b:a3:30:a3:
         e8:88:af:4e:cc:0b:29:52:8f:d7:e8:15:12:ef:31:1b:a9:6e:
         bc:b9:4d:73:14:38:22:48:2d:e8:4a:6f:3c:db:c4:62:56:5c:
         64:69:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:10 2026 by rpki-client