Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          /l4o7gA6r366ZmjCUFUaIL5gzBvidjv+Uti7+GPhhzk=
Subject key identifier:   0C:F7:26:9A:DD:4A:20:33:4D:C4:33:32:1E:0B:F8:DE:FE:C3:90:3B
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       019FAC3EC683734AA16AEB42E4A66F754A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 05:00:22 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:22 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:22 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: TFdzSfOCa63FwS4eH/XLztArk8nNmw9kMA5cpeNlPuo=)
                          2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:c6:83:73:4a:a1:6a:eb:42:e4:a6:6f:75:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Jul 29 05:00:22 2026 GMT
            Not After : Jul 30 05:00:22 2026 GMT
        Subject: CN=0cf7269add4a20334dc433321e0bf8defec3903b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:4e:24:4c:89:fd:70:48:26:b8:d8:e8:d8:
                    4f:fc:ca:34:cf:34:cd:d9:d9:fb:d5:4d:71:1c:74:
                    37:30:fb:b8:dc:a9:a5:6a:62:75:90:d8:38:64:53:
                    dd:6c:50:ec:17:98:6e:22:c0:69:43:b8:14:b2:a5:
                    91:c2:11:64:cf:c1:db:d8:fd:8e:68:eb:8d:f7:e8:
                    ee:81:4a:25:fb:38:39:eb:83:57:bc:70:80:5a:6f:
                    8f:b6:a9:3b:6a:e4:76:54:a0:48:31:26:0b:b5:1b:
                    7e:cb:1a:3f:ee:fd:c1:75:14:c9:22:67:a6:6d:a6:
                    02:78:82:a0:3d:fa:b0:d3:bb:df:df:41:8e:08:fe:
                    5d:ca:cd:19:b5:1d:43:5f:ed:64:88:13:38:27:f7:
                    6e:79:d9:66:de:96:c6:31:d4:23:9c:4e:0f:9d:31:
                    56:16:4f:f4:31:b4:b1:8b:d3:c1:37:a0:4b:c8:17:
                    c9:f8:e5:63:d1:47:6f:b3:d8:b6:fb:4b:50:03:d9:
                    b0:09:a8:ba:7e:69:36:a6:96:a0:b2:d6:33:ec:93:
                    00:60:5a:96:be:63:f9:41:c3:c1:b0:e1:1d:5a:85:
                    4b:2b:a7:05:b6:21:be:9f:79:a2:1d:1b:2b:04:35:
                    a0:45:2b:07:1a:08:b1:80:23:b6:9b:b9:39:3f:95:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:26:9A:DD:4A:20:33:4D:C4:33:32:1E:0B:F8:DE:FE:C3:90:3B
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:18:50:71:c4:d8:da:9c:19:be:1a:62:2b:65:ab:30:6b:8f:
         46:75:cb:c9:d0:17:84:7f:e4:79:b2:00:54:2f:8b:fc:22:14:
         37:b9:cb:6c:10:f8:c2:29:e6:9a:00:d4:79:8b:3a:03:9c:4f:
         69:1d:dd:a8:63:65:fe:28:cb:71:08:5c:15:57:4f:a1:47:71:
         bb:ab:7a:12:f1:20:ec:90:37:1a:2c:3c:61:7c:bd:be:e3:58:
         bd:49:cf:86:a1:9c:e2:47:61:d8:fa:a2:01:69:63:cb:55:73:
         89:e2:0b:59:85:0c:f3:06:54:50:ee:73:9e:b4:6a:3f:51:87:
         71:97:ba:2b:62:b9:0f:7c:78:86:51:84:e2:e4:a7:a8:ab:66:
         ed:50:74:f3:de:df:ee:44:07:00:bc:40:f2:b9:0f:42:3d:10:
         f5:15:d2:6e:13:cc:62:08:3b:ba:05:33:ce:f2:af:b5:63:bb:
         0d:c2:3f:54:9d:3b:95:8b:8a:cc:3b:ef:0d:2f:b1:f0:f9:51:
         64:7b:07:49:2f:74:f1:1c:0e:7f:ac:e7:19:af:8e:e8:66:13:
         b5:4a:d8:dd:00:f0:05:57:4a:56:2b:6a:76:17:1d:79:00:47:
         f2:15:b6:42:fb:92:fb:85:d8:23:ac:a0:e8:7f:a7:06:8f:b9:
         27:03:8a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPsaDc0qhautC5KZvdUooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjYwNzI5MDUwMDIyWhcNMjYwNzMwMDUwMDIyWjAzMTEwLwYDVQQD
EygwY2Y3MjY5YWRkNGEyMDMzNGRjNDMzMzIxZTBiZjhkZWZlYzM5MDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2dOJEyJ/XBIJrjY6NhP/Mo0zzTN
2dn71U1xHHQ3MPu43KmlamJ1kNg4ZFPdbFDsF5huIsBpQ7gUsqWRwhFkz8Hb2P2O
aOuN9+jugUol+zg564NXvHCAWm+Ptqk7auR2VKBIMSYLtRt+yxo/7v3BdRTJImem
baYCeIKgPfqw07vf30GOCP5dys0ZtR1DX+1kiBM4J/duedlm3pbGMdQjnE4PnTFW
Fk/0MbSxi9PBN6BLyBfJ+OVj0Udvs9i2+0tQA9mwCai6fmk2ppagstYz7JMAYFqW
vmP5QcPBsOEdWoVLK6cFtiG+n3miHRsrBDWgRSsHGgixgCO2m7k5P5V9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz3JprdSiAzTcQzMh4L+N7+w5A7MB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhhQccTY
2pwZvhpiK2WrMGuPRnXLydAXhH/kebIAVC+L/CIUN7nLbBD4winmmgDUeYs6A5xP
aR3dqGNl/ijLcQhcFVdPoUdxu6t6EvEg7JA3Giw8YXy9vuNYvUnPhqGc4kdh2Pqi
AWljy1VzieILWYUM8wZUUO5znrRqP1GHcZe6K2K5D3x4hlGE4uSnqKtm7VB0897f
7kQHALxA8rkPQj0Q9RXSbhPMYgg7ugUzzvKvtWO7DcI/VJ07lYuKzDvvDS+x8PlR
ZHsHSS908RwOf6znGa+O6GYTtUrY3QDwBVdKVitqdhcdeQBH8hW2QvuS+4XYI6yg
6H+nBo+5JwOKbA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:18 2026 by rpki-client