Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          4s6RnoJnFrRNw44WrT8l4CGjS9sO4zaKgzRtqxvTWIU=
Subject key identifier:   CD:82:FE:A3:BF:25:22:C0:7B:DC:DC:55:03:81:BC:FE:2A:B3:F6:61
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       019FAB2CCC3B39986F7F40CBE7833FCE9AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 00:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:07 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: v5z+VJkNyf80Eng0yuMAcSnoxYkPKFtHfed30sNnRhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:cc:3b:39:98:6f:7f:40:cb:e7:83:3f:ce:9a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Jul 29 00:01:07 2026 GMT
            Not After : Jul 30 00:01:07 2026 GMT
        Subject: CN=cd82fea3bf2522c07bdcdc550381bcfe2ab3f661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:c2:d6:8c:9a:86:1e:f5:12:1b:61:a9:7a:
                    90:30:fa:9f:9e:09:37:63:78:64:22:4b:bf:94:0b:
                    64:9f:1a:03:3e:bb:b7:d3:50:c9:54:d4:40:39:c3:
                    07:cf:20:de:9b:6c:2c:04:da:3f:0f:af:a2:0c:18:
                    2d:78:db:dc:14:2b:09:b4:35:f6:e6:6d:f5:97:80:
                    30:17:24:cf:80:19:2c:9d:63:13:ab:da:07:74:f3:
                    53:ef:53:b9:41:8a:ce:20:8c:6a:2f:25:38:ff:6b:
                    55:2c:cd:7f:75:5f:30:3e:9b:fb:ec:24:c6:11:c5:
                    fe:18:93:dc:88:9a:65:99:05:4e:29:7b:7a:c6:fb:
                    0e:9c:91:14:05:cc:bf:82:7a:28:eb:2d:c7:3a:ea:
                    37:2e:72:b2:77:7a:37:65:61:ed:ce:3e:cd:3f:d4:
                    38:ac:f2:57:70:bf:52:d3:25:20:15:ef:4f:af:a1:
                    f5:62:b2:c8:7a:3e:4f:a1:9f:79:38:a7:2a:b7:ef:
                    50:8b:03:7f:42:18:8b:52:f8:6b:f2:ab:7b:87:df:
                    46:e9:b5:d4:50:1f:f2:ea:a7:6c:6a:8b:c8:45:16:
                    60:b8:59:56:79:e5:42:da:b4:d8:86:0f:02:f2:5d:
                    5f:35:0c:15:df:57:d0:d0:bb:9d:c1:1c:7d:20:df:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:FE:A3:BF:25:22:C0:7B:DC:DC:55:03:81:BC:FE:2A:B3:F6:61
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:fc:cb:22:78:27:fb:f7:4d:7e:c0:30:a5:4b:16:b4:b3:
         31:bf:af:f5:67:87:ce:a0:c7:6e:b2:af:86:73:19:64:65:7d:
         56:28:59:53:3c:c2:b7:32:4b:8e:e4:76:27:f4:0b:4d:57:30:
         09:75:8d:80:27:83:45:05:4d:7d:08:16:c0:10:6c:fb:4a:e9:
         0c:28:77:8c:34:f2:2a:34:db:f8:66:d1:85:35:5e:78:6c:da:
         7c:d2:38:35:be:b6:ec:4a:36:5d:44:81:1d:98:93:f2:60:88:
         a4:cf:d3:21:c3:9e:23:93:15:99:ce:53:34:1b:f0:51:27:a0:
         df:c5:83:4c:64:e7:07:d2:03:2f:ee:35:39:14:c5:e7:fe:4c:
         52:79:14:a2:25:ea:1d:f7:78:bc:25:4b:39:7c:68:21:6c:4d:
         17:88:02:d1:3c:da:4c:c7:a1:cb:92:8e:a8:6e:a8:d7:8f:ca:
         3c:09:da:64:89:db:69:d4:ac:80:62:49:7b:09:c0:18:dc:93:
         33:e5:d1:69:fb:7b:59:f3:66:85:e4:34:46:cc:57:3a:85:84:
         29:bb:be:43:46:29:db:9a:9d:e0:f1:de:4d:ec:b7:05:e6:d1:
         6b:95:3d:ad:af:ac:5c:1f:1e:f9:eb:cc:46:5d:a2:76:d1:86:
         68:a8:3a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLMw7OZhvf0DL54M/zprDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWEyY2YyZjEzNzQ1ZWUxYmJmN2YwYTc0YmVhZDNjZTUw
NzQ4NTUwHhcNMjYwNzI5MDAwMTA3WhcNMjYwNzMwMDAwMTA3WjAzMTEwLwYDVQQD
EyhjZDgyZmVhM2JmMjUyMmMwN2JkY2RjNTUwMzgxYmNmZTJhYjNmNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxHC1oyahh71EhthqXqQMPqfngk3
Y3hkIku/lAtknxoDPru301DJVNRAOcMHzyDem2wsBNo/D6+iDBgteNvcFCsJtDX2
5m31l4AwFyTPgBksnWMTq9oHdPNT71O5QYrOIIxqLyU4/2tVLM1/dV8wPpv77CTG
EcX+GJPciJplmQVOKXt6xvsOnJEUBcy/gnoo6y3HOuo3LnKyd3o3ZWHtzj7NP9Q4
rPJXcL9S0yUgFe9Pr6H1YrLIej5PoZ95OKcqt+9QiwN/QhiLUvhr8qt7h99G6bXU
UB/y6qdsaovIRRZguFlWeeVC2rTYhg8C8l1fNQwV31fQ0LudwRx9IN+RNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2C/qO/JSLAe9zcVQOBvP4qs/ZhMB8GA1UdIwQY
MBaAFFsaLPLxN0XuG79/CnS+rTzlB0hVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAt
N2Y5MDI1ZTUzMTA5LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAtN2Y5MDI1ZTUzMTA5
LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqX8yyJ4
J/v3TX7AMKVLFrSzMb+v9WeHzqDHbrKvhnMZZGV9VihZUzzCtzJLjuR2J/QLTVcw
CXWNgCeDRQVNfQgWwBBs+0rpDCh3jDTyKjTb+GbRhTVeeGzafNI4Nb627Eo2XUSB
HZiT8mCIpM/TIcOeI5MVmc5TNBvwUSeg38WDTGTnB9IDL+41ORTF5/5MUnkUoiXq
Hfd4vCVLOXxoIWxNF4gC0TzaTMehy5KOqG6o14/KPAnaZInbadSsgGJJewnAGNyT
M+XRaft7WfNmheQ0RsxXOoWEKbu+Q0Yp25qd4PHeTey3BebRa5U9ra+sXB8e+evM
Rl2idtGGaKg6Kg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:52 2026 by rpki-client