Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          4trAtCgIVab4u1Hc+BPRJvYwVdAYOIasWfnwQqNnERI=
Subject key identifier:   57:F0:31:C7:81:04:D5:61:33:C2:86:4A:21:7D:1A:4E:77:63:67:48
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019FA8D004BB74FBCA98F66243935508BC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 13:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:32 +0000
Files and hashes:         1: 80PdpdaZu0agDCN9RQnDf0bgfeU.roa (hash: DH5ZQA3PWXrg29JH5F4jHegGPMYQINXJvtbDzJXlSLo=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: cuCemXmogPm7uUKnlws7wXM2UJu4I3wC9jJUvukbyA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:04:bb:74:fb:ca:98:f6:62:43:93:55:08:bc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Jul 28 13:00:32 2026 GMT
            Not After : Jul 29 13:00:32 2026 GMT
        Subject: CN=57f031c78104d56133c2864a217d1a4e77636748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:70:40:80:59:3e:25:47:63:57:ce:f8:85:
                    fd:73:0d:66:2f:9e:d7:d4:56:82:d1:7c:6c:b8:49:
                    77:3d:1a:29:31:80:40:fb:03:34:71:98:de:10:29:
                    7f:01:be:fc:b6:7e:2b:5a:16:64:3c:f7:a0:b5:75:
                    b7:ba:4e:68:b6:6c:ad:f4:e4:32:c8:54:a5:1d:e4:
                    3a:58:7d:6e:e1:5a:d3:08:71:95:19:92:c4:af:da:
                    ad:09:b5:27:28:97:93:c2:24:1f:7b:cc:54:ca:12:
                    3e:61:72:74:d5:c1:87:08:01:89:d9:53:71:fd:69:
                    d4:9b:6e:0b:00:9d:dc:79:80:8c:80:03:bf:52:8c:
                    7b:eb:40:70:65:25:60:ac:f4:c6:c6:83:dc:0c:78:
                    11:66:73:98:04:9a:aa:16:49:c7:7e:a1:be:fa:dd:
                    9e:70:ef:c7:6e:4f:48:83:87:60:9a:68:2a:50:6d:
                    af:50:db:2f:9a:70:da:6d:40:8f:3a:70:8f:d9:c6:
                    10:43:ac:2a:48:6e:38:f6:e0:7d:aa:5e:8a:5e:c2:
                    b7:0e:2d:7d:d8:1f:79:b5:5e:e2:c3:14:d6:87:76:
                    00:20:46:d2:f9:ce:81:24:0d:e1:92:57:d9:2b:ca:
                    b3:bb:00:80:c5:5c:e1:c0:aa:5c:a9:ee:dc:53:c3:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F0:31:C7:81:04:D5:61:33:C2:86:4A:21:7D:1A:4E:77:63:67:48
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:e4:47:27:40:5c:6d:b4:e8:38:40:74:9c:13:c1:e5:17:
         78:35:51:84:f2:64:77:49:1a:27:25:c0:f5:23:d6:2d:d3:7c:
         77:17:cd:12:07:ce:c6:ef:6a:79:8d:87:eb:5e:18:a3:8e:04:
         ad:22:db:b7:e6:3e:d7:0e:fb:f4:b4:c2:98:e6:a1:47:51:f1:
         09:19:33:20:ad:e1:da:fd:e0:66:27:01:75:22:f5:7b:f0:54:
         0b:c5:2b:81:59:32:94:a1:42:3e:76:07:02:56:24:e6:b1:ab:
         c9:db:eb:40:8b:63:90:71:af:e5:01:ae:98:d5:2c:07:59:00:
         bd:4b:26:5c:f2:ec:d5:47:53:2c:94:b0:bc:00:53:5b:e7:73:
         32:f0:00:03:43:9e:1f:d1:1b:ad:a2:d7:dd:b9:20:fa:f9:eb:
         52:fb:b7:bc:0a:9c:a3:0a:4e:d2:da:d8:a2:37:24:38:1d:f7:
         af:30:c4:9b:62:0c:a7:f4:b9:14:98:2a:43:5d:d5:3e:ba:f9:
         81:b1:46:1e:c2:c2:4b:83:38:9a:a8:4a:70:60:1c:fa:8b:07:
         ff:5c:d3:7e:20:b2:5f:97:89:ff:48:25:54:7c:25:4d:a5:a4:
         8f:ac:c8:f5:cd:85:dc:c7:27:d8:7e:44:b3:1f:8c:85:3e:c4:
         3d:1b:56:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0AS7dPvKmPZiQ5NVCLwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzk1ZWM4ODIxZDhmODE4OTQxMzM5MmJkODc2ZDdiZDc5
NWMxNmMwHhcNMjYwNzI4MTMwMDMyWhcNMjYwNzI5MTMwMDMyWjAzMTEwLwYDVQQD
Eyg1N2YwMzFjNzgxMDRkNTYxMzNjMjg2NGEyMTdkMWE0ZTc3NjM2NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVNwQIBZPiVHY1fO+IX9cw1mL57X
1FaC0XxsuEl3PRopMYBA+wM0cZjeECl/Ab78tn4rWhZkPPegtXW3uk5otmyt9OQy
yFSlHeQ6WH1u4VrTCHGVGZLEr9qtCbUnKJeTwiQfe8xUyhI+YXJ01cGHCAGJ2VNx
/WnUm24LAJ3ceYCMgAO/Uox760BwZSVgrPTGxoPcDHgRZnOYBJqqFknHfqG++t2e
cO/Hbk9Ig4dgmmgqUG2vUNsvmnDabUCPOnCP2cYQQ6wqSG449uB9ql6KXsK3Di19
2B95tV7iwxTWh3YAIEbS+c6BJA3hklfZK8qzuwCAxVzhwKpcqe7cU8NFxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfwMceBBNVhM8KGSiF9Gk53Y2dIMB8GA1UdIwQY
MBaAFMA5XsiCHY+BiUEzkr2HbXvXlcFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQt
ZjdlNzNkZGVmNGUyLzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQtZjdlNzNkZGVmNGUy
LzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLnkRydA
XG206DhAdJwTweUXeDVRhPJkd0kaJyXA9SPWLdN8dxfNEgfOxu9qeY2H614Yo44E
rSLbt+Y+1w779LTCmOahR1HxCRkzIK3h2v3gZicBdSL1e/BUC8UrgVkylKFCPnYH
AlYk5rGrydvrQItjkHGv5QGumNUsB1kAvUsmXPLs1UdTLJSwvABTW+dzMvAAA0Oe
H9EbraLX3bkg+vnrUvu3vAqcowpO0trYojckOB33rzDEm2IMp/S5FJgqQ13VPrr5
gbFGHsLCS4M4mqhKcGAc+osH/1zTfiCyX5eJ/0glVHwlTaWkj6zI9c2F3Mcn2H5E
sx+MhT7EPRtWtg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:43 2026 by rpki-client