Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          Ix8pStyL2ywMPRpZWXiddb0ca0sA2Q0eyNOozUQq+Cg=
Subject key identifier:   FE:B1:0C:5E:A3:D0:3E:85:6E:20:31:76:DE:4C:6B:F2:6C:F7:D4:64
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       019FAAF5ED466CD3B9CCA8774BF6E26BFDCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          19DA
Signing time:             Tue 28 Jul 2026 23:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:11 +0000
Files and hashes:         1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
                          2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
                          3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
                          4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: u+18NdsleyUATOBW+7d94Lnq7p+fHPGF3GKu1YPqdF4=)
                          5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:ed:46:6c:d3:b9:cc:a8:77:4b:f6:e2:6b:fd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Jul 28 23:01:11 2026 GMT
            Not After : Jul 29 23:01:11 2026 GMT
        Subject: CN=feb10c5ea3d03e856e203176de4c6bf26cf7d464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:c5:e3:55:6c:af:98:0d:03:ba:b9:ad:b8:
                    ce:ee:8c:74:ee:29:e9:d0:fc:6d:7b:55:61:a4:e3:
                    5a:09:82:38:56:1f:a8:ce:20:12:6d:66:a3:6f:05:
                    d5:1d:d4:94:88:18:f8:43:e5:fd:6f:8c:a7:d3:c5:
                    c8:be:2b:d0:3d:ce:84:57:c6:d3:9e:d8:f9:ec:0a:
                    c1:42:2e:d5:f3:f2:ee:6f:43:eb:44:03:70:d7:a7:
                    ac:4a:0e:0d:5e:e0:91:c8:1c:a1:d8:04:90:80:d9:
                    da:ed:f7:c8:31:3d:f8:ed:2f:a5:bf:31:32:52:44:
                    b7:9e:26:63:c0:b8:85:a1:fe:6d:21:fa:8e:59:ba:
                    94:18:3c:ca:bd:01:27:e9:5a:4e:b3:e6:aa:70:ac:
                    9a:8c:86:5f:a5:e7:25:60:0e:83:d5:42:b7:86:5d:
                    60:45:a5:52:1a:23:c8:6b:cd:ca:f6:ca:92:c5:ea:
                    60:4c:ae:5f:17:ed:bb:4d:82:e8:e3:6b:e1:2b:ad:
                    b0:2e:32:0e:81:c7:b4:10:f7:f1:e3:42:4f:0b:e4:
                    42:19:8d:bd:70:9b:87:d9:88:da:f6:8e:6f:a1:33:
                    7e:10:7b:df:13:1f:93:52:c7:6b:f1:99:1b:e4:4c:
                    b9:08:24:56:24:a7:8d:a2:f0:b7:51:e3:0d:fb:be:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B1:0C:5E:A3:D0:3E:85:6E:20:31:76:DE:4C:6B:F2:6C:F7:D4:64
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:21:e5:7b:a4:a6:9d:1e:02:3b:9b:56:66:37:40:e1:e0:
         5c:f5:a8:10:b2:fa:d8:d9:fe:08:e6:c4:82:2d:7f:b8:bd:5f:
         60:89:7a:6a:02:24:07:e8:bc:f8:84:04:ad:95:41:49:7b:ad:
         33:de:cd:0a:1a:eb:97:b9:a6:71:7e:15:73:10:58:24:5d:c2:
         c6:fd:11:cc:41:ab:a2:15:5e:4d:b5:3c:2f:9f:c2:4a:d4:2f:
         cf:d9:8d:ef:d2:08:39:98:4a:78:85:3d:ff:33:02:c3:48:cc:
         84:eb:3a:b3:3d:0c:e6:33:f9:9d:26:95:67:ed:65:e4:2d:82:
         98:22:a3:fe:b7:30:61:8a:70:2d:81:7f:f5:67:cd:9b:01:80:
         67:71:59:bf:95:b6:d0:d8:18:35:cc:d6:93:57:1d:ee:b8:77:
         9b:7c:c7:ad:aa:56:cf:ed:39:8b:ab:48:bc:67:82:f2:98:cd:
         84:be:ee:5e:5a:34:f6:8a:19:0e:2a:6e:7a:e3:96:be:b7:80:
         2e:af:bb:f8:56:7a:89:d3:79:85:39:02:9d:cc:15:f8:bd:2d:
         4b:71:c3:3e:7b:1a:3a:cf:24:65:5e:ad:5b:da:19:65:b1:08:
         39:32:c9:c3:89:c5:d7:4e:ac:92:5f:5b:54:f5:89:ba:f1:68:
         d9:3e:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:27 2026 by rpki-client