Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          npzt1kRu/ADV7GJTdwKXQcsBeTp479YV5Nu3zNS+1iY=
Subject key identifier:   AD:C7:D5:A4:A5:79:0C:0F:FD:6D:50:DC:EE:C7:06:E6:BC:E1:AD:D3
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       019FAAF5E94A741FEB8805BBAB532EEB0000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          11CC
Signing time:             Tue 28 Jul 2026 23:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:10 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: 9n/qPGoSTVk64pm1RcG/pw5vuPR4Xr6uF2d2YCv+wDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:e9:4a:74:1f:eb:88:05:bb:ab:53:2e:eb:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Jul 28 23:01:10 2026 GMT
            Not After : Jul 29 23:01:10 2026 GMT
        Subject: CN=adc7d5a4a5790c0ffd6d50dceec706e6bce1add3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:ac:12:d3:ae:72:d6:c7:89:7e:42:9d:eb:
                    7e:7b:93:09:51:6a:18:d3:f7:11:d5:4e:83:c4:60:
                    f1:6f:8d:ff:25:30:01:61:57:3f:b5:28:00:52:bb:
                    c9:dc:34:f2:5b:7c:7e:18:6a:68:22:38:c0:aa:1f:
                    93:bb:63:6c:5c:6d:ba:ef:67:a8:8a:c9:35:c5:4b:
                    5a:03:22:14:2c:1a:2f:89:53:cc:95:ae:0a:20:6b:
                    ee:58:e2:94:0a:a3:0c:64:9c:80:d9:15:69:c1:60:
                    47:a1:b7:dc:65:20:02:7e:1a:9a:5e:ff:a9:b2:16:
                    d3:f3:e8:61:68:2d:04:18:df:d5:a7:93:96:4e:85:
                    c0:56:3f:b5:24:be:e9:5f:ab:0d:d5:7a:ec:9c:31:
                    54:86:eb:c8:0c:fd:b8:ce:81:7e:79:3b:96:fa:e8:
                    35:52:44:67:0b:2c:49:52:b8:f7:09:c5:85:f1:d8:
                    37:0d:98:fa:3b:b5:a8:22:29:6b:35:23:fb:6c:a4:
                    5b:21:ab:d3:b7:6e:71:7e:6d:d0:da:e2:59:22:30:
                    da:79:1d:fa:79:50:44:99:53:bd:e7:69:69:63:af:
                    59:1d:06:7c:e6:9f:4b:d8:a4:c7:f0:61:5a:67:21:
                    49:ae:a9:5a:0a:33:ad:d3:30:7b:e6:1e:37:24:1e:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C7:D5:A4:A5:79:0C:0F:FD:6D:50:DC:EE:C7:06:E6:BC:E1:AD:D3
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b1:69:21:2c:e2:fa:30:c7:19:8e:47:52:dd:ed:26:9f:ca:
         a9:4c:e2:7e:22:14:c4:65:23:12:a2:f4:9a:6a:17:c3:aa:f1:
         43:be:92:02:85:50:43:68:be:f0:5e:f4:37:fa:01:2d:59:38:
         f0:d1:7b:bb:4f:bb:b2:e2:9f:b3:11:79:8b:89:04:7f:ea:ec:
         cf:46:78:19:f1:bd:3c:73:4a:7d:71:af:07:6b:c2:3b:7d:76:
         17:dc:bd:6b:2b:c6:b3:ba:4f:e0:91:e7:c4:d8:61:d6:14:50:
         3d:76:36:f7:10:10:b6:6e:a2:ed:c0:46:ac:c1:03:31:d3:fc:
         99:d0:44:94:3d:0a:b4:f0:91:5f:ce:5a:b4:fd:11:b5:d7:d4:
         92:c5:27:c6:3e:ab:95:34:a1:29:27:aa:81:01:5a:f6:ac:8f:
         a0:12:1b:54:e9:82:15:49:3d:05:c9:aa:f1:42:68:cc:c3:30:
         5e:01:a9:45:a7:fb:77:03:48:c2:07:b4:db:de:52:3d:40:54:
         24:e0:f2:a4:85:07:17:3a:27:11:5c:7f:9e:f9:f5:33:f3:b2:
         36:bf:71:9f:fa:f4:17:d1:e4:ae:fb:6f:f4:5d:f6:cc:8a:00:
         42:ba:c6:a7:cc:7c:fb:05:e9:e0:98:df:e7:6c:0a:40:1e:59:
         1f:64:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:27 2026 by rpki-client