Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          Lv2TIdgsKRCY23rog9cE9heXMjMsp0RIh86/ZjtqVkI=
Subject key identifier:   51:E8:E1:B6:3B:F1:1B:C5:84:AC:CD:1A:F2:3E:06:59:8F:A4:0A:E0
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       019FAA19C40537DFA2F22BD1A9C9221C8B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          156B
Signing time:             Tue 28 Jul 2026 19:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:43 +0000
Files and hashes:         1: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (hash: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM=)
                          2: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (hash: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA=)
                          3: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (hash: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: zwc3VyIvi4GlreQ2SPsZLhdt7C+BdrKuZdNeIC1r0CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:c4:05:37:df:a2:f2:2b:d1:a9:c9:22:1c:8b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Jul 28 19:00:43 2026 GMT
            Not After : Jul 29 19:00:43 2026 GMT
        Subject: CN=51e8e1b63bf11bc584accd1af23e06598fa40ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:55:4f:09:a9:fb:38:40:34:e9:d7:12:17:
                    49:23:fe:7f:3e:0e:31:e3:b7:6d:26:c2:bb:38:c8:
                    5b:70:da:1d:ad:f6:2d:b0:d4:2e:65:1c:d1:a7:ab:
                    eb:29:14:e9:84:00:44:ac:f0:62:40:54:49:e1:af:
                    be:be:13:2a:9d:d7:51:77:57:4b:37:40:46:6d:bb:
                    1e:59:9e:fb:7f:f6:60:cb:56:72:5f:58:c4:04:b2:
                    a9:a5:50:8a:49:4e:c2:a0:4f:07:0a:ae:3d:8e:fe:
                    00:6c:8e:1d:db:8f:91:df:7b:a5:4d:8a:d2:1d:5e:
                    d8:aa:6c:fd:fc:a8:d0:a4:3c:58:af:f6:dc:ce:1d:
                    f4:0b:9f:36:fc:c4:41:8a:0c:fa:b4:4c:63:2d:73:
                    b5:96:09:24:1f:b0:a3:b9:95:92:24:1c:65:20:a3:
                    32:e1:e2:ad:fd:a0:fc:c5:4d:cc:68:f0:54:3d:da:
                    b9:ee:3b:a4:23:83:d7:d9:f1:e9:da:4b:57:29:67:
                    ac:e9:2f:a5:fb:be:d3:94:e3:e9:bb:b1:c4:50:0f:
                    ed:97:f6:16:68:07:4b:25:b8:23:b0:37:02:3e:ef:
                    20:6f:90:46:fc:38:68:f2:82:09:8c:39:bc:f5:52:
                    30:f1:26:f0:bb:36:8a:df:56:66:0c:83:a1:8c:a2:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E8:E1:B6:3B:F1:1B:C5:84:AC:CD:1A:F2:3E:06:59:8F:A4:0A:E0
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:de:10:42:02:61:54:d4:5b:82:da:51:c7:4a:ff:78:32:bb:
         85:bf:0a:2c:dc:2d:58:de:30:e2:64:32:6a:16:6c:b5:a6:9b:
         81:23:b3:09:54:91:20:cc:5c:07:a2:2a:1f:04:88:8a:e1:70:
         95:9b:66:ca:c5:ec:a4:15:c4:be:e3:82:88:ac:e3:01:67:32:
         5e:f9:e8:cf:d0:1c:86:3d:50:30:e8:c7:3a:c7:f6:c6:00:48:
         8b:6c:6b:d3:da:36:f6:46:a2:c9:10:95:1b:4c:a8:44:19:76:
         6b:8d:e4:4e:79:fb:74:ae:f7:7d:b0:97:7a:4e:64:33:bf:bd:
         b0:6f:d8:af:d7:83:26:d8:00:86:98:24:b6:d7:1e:f8:d2:73:
         4a:da:d5:1c:3d:6b:d7:59:dc:48:6c:48:f9:e4:a9:39:3e:29:
         35:02:d5:25:cb:3b:e6:3c:92:6f:7f:e5:8c:da:9a:0e:0d:3a:
         d7:96:ec:1a:1b:27:09:7b:36:5e:fb:08:05:61:1e:b7:e9:6c:
         cd:c1:b1:6d:7b:57:2e:e8:c2:78:46:4d:68:62:96:ad:a5:8c:
         34:d5:f7:97:ad:56:2f:61:ec:88:43:6c:47:10:b0:19:ed:f4:
         ea:e6:93:17:8e:bd:e1:79:04:25:ba:19:39:ac:6c:db:28:83:
         48:42:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:25 2026 by rpki-client