Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          3weVG3k3RTjk1r1I7AJYOg94wUtRzHs7ecewaCr18eE=
Subject key identifier:   4D:50:0C:3A:15:AD:37:E6:D4:39:EE:5F:28:4B:C7:7E:B2:D8:1E:79
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       019FA899817DB2DF0F62F3A3570795ACBFAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0BE1
Signing time:             Tue 28 Jul 2026 12:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:00 +0000
Files and hashes:         1: 1-TF-JoXo3nwcNcfQRcHbGY3qmXw.roa (hash: SQN5hmAjWwammFizA41s1F2xWOAm+YxghfyjGPYdQT8=)
                          2: 1-iWOVrefjs9HBIASRdjsq7CSI7Q.roa (hash: m7ouBQ2qviW5hyE9F7O8F0y6LhZUjUrkwEJiugNgPHU=)
                          3: 8GcZVYe92v13intCg5ID91bOLno.roa (hash: b3DSszyVIPa0dAbS/Sd5p3m5O/sg4MNTHqFlJONsIZM=)
                          4: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
                          5: A6OT-fb--rqUtmZHSlBfqHGwoR4.roa (hash: Hjob8qIhm/ZZvMCqBuLDpJpFpTEXuiZwGkh8XZDVltg=)
                          6: GOY9-g4eYZKr3CUc2VmgYHD648g.roa (hash: rHoaqUeCplV2dnhZowplHvJXPbD1HPyMQLvKsO9NHOU=)
                          7: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
                          8: TXq41OJpiiStce3AQr_RGstn8ZU.roa (hash: 3P6YdvPURjNL2ftvcv6OGf8HEYCpwGLQS8LFvTEPzI4=)
                          9: Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa (hash: jK+oCYMLPr8WRuiPIxuvKDK2N1EAkUXmk9TrZ4+llQU=)
                          10: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
                          11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: +VE20NIas2PMyElfU0wyhvNaaVTQvFJZq5Z/R0tTpjw=)
                          12: XCdVMh8AKADdJDPu6KFSe_oQz38.roa (hash: nLSSyY1/QncLqqHV2lGPsT2caZ8SwcYowKfgfgbtkOk=)
                          13: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
                          14: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
                          15: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
                          16: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
                          17: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
                          18: ogCVM0_FD3R6QEvyBDBHVazHJl0.roa (hash: P5tzcX+u+5K9X4wyuw7Cue/raY9HNdmFL+lkgKXUyB4=)
                          19: oiOso2ah4DIMtsn2kxKAzGDyirs.roa (hash: aLcgxvos1HLAujPoJMMu3Y2LHkeSWIRqhOML8XYEQlQ=)
                          20: rvqu1safjRLAF6KvzQ7EIXBDtAw.roa (hash: l1iJNOWrCthSzMX4gh9W3WWiCyK3s7TGkqXWkdDcu9c=)
                          21: tgSRqnQnZUD0Fu4ANbQFDigMoEo.roa (hash: NZR02viri4xDg6oLTnJWANSbonEFpMqlapgOxg1s9+0=)
                          22: tpruxi4WfnJbBB5IjFb5ybMY3jg.roa (hash: Q0taTJKgI/MX/UvsvMDePMKEwoMw7JMzAzcey8JjxXw=)
                          23: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
                          24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:81:7d:b2:df:0f:62:f3:a3:57:07:95:ac:bf:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Jul 28 12:01:00 2026 GMT
            Not After : Jul 29 12:01:00 2026 GMT
        Subject: CN=4d500c3a15ad37e6d439ee5f284bc77eb2d81e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:44:51:b0:e4:aa:ab:ed:38:ee:42:ae:ef:
                    7d:68:86:b7:96:b4:dc:fd:42:8a:b0:65:64:cc:0e:
                    f7:06:cb:83:93:15:91:67:ee:55:68:d8:df:87:77:
                    8b:3e:67:60:33:4d:2e:43:ec:97:f0:06:42:d9:c2:
                    14:31:42:bf:ad:06:9d:4b:d8:2c:48:c0:81:40:1a:
                    59:61:35:9f:61:3c:ee:01:3d:2a:48:09:0a:e2:51:
                    d1:c1:51:75:8e:6f:a5:60:df:a2:30:0f:96:44:cb:
                    30:6c:22:d2:35:6d:0e:36:16:41:00:b4:f7:c9:a4:
                    cc:36:59:9e:28:70:36:0d:b8:41:8d:5f:e4:ee:87:
                    9f:78:21:cc:58:98:48:d6:3a:f6:7d:b6:f2:c2:75:
                    02:f7:0b:e0:52:78:cb:9c:27:c7:af:87:46:40:77:
                    7e:a0:af:1d:30:2c:f6:48:64:a2:b4:42:f0:6e:3c:
                    55:c8:87:8f:2b:15:0d:66:d7:35:c0:e1:b1:e4:6b:
                    64:e5:56:31:a5:5c:b5:db:5d:2f:fc:17:6f:84:00:
                    ac:60:b3:a8:d9:a0:0a:f0:20:1b:73:93:f9:e5:8b:
                    1b:06:c9:45:6e:01:1d:51:1a:8b:98:b4:fc:93:53:
                    4b:bc:75:e2:2c:bf:16:f2:62:d3:1c:c9:9e:63:3e:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:0C:3A:15:AD:37:E6:D4:39:EE:5F:28:4B:C7:7E:B2:D8:1E:79
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:89:ca:81:d7:2a:fc:06:d9:78:3c:90:bb:99:2c:91:0c:
         80:aa:7f:67:53:b9:59:b7:d7:28:6d:b7:36:13:75:08:40:74:
         ed:06:63:85:26:3b:90:6d:f5:f4:c4:9e:24:fa:6b:49:f4:0c:
         13:2c:98:a0:eb:4e:3e:36:3c:87:ca:7f:f7:16:3f:b0:0f:23:
         50:3e:45:19:f3:18:d5:2f:6d:0b:a3:26:a3:03:3e:01:9f:44:
         ca:2a:aa:dc:a4:49:7c:9d:ef:b9:e0:22:b7:07:33:d1:e8:19:
         be:9f:0c:8e:eb:87:60:4f:0b:fb:69:81:b6:e7:2c:5a:10:ee:
         30:55:e8:ff:21:76:14:fe:c3:f3:0d:c5:07:2f:ee:44:b8:4b:
         ad:a9:7a:d3:07:57:51:fa:a4:c7:85:55:1c:9d:b4:be:e5:f0:
         ee:27:14:2a:3a:e6:08:22:2a:07:4f:a2:bb:93:fa:bc:6b:30:
         ca:7f:c0:15:02:15:f9:ca:8a:5f:86:8f:ce:1d:db:16:f4:90:
         ba:67:3b:58:d0:09:47:79:e7:b1:f8:6f:81:ff:b9:55:b3:af:
         18:53:07:d6:b4:a2:0a:5f:72:ec:14:e7:0a:cf:1e:d7:ec:72:
         e3:23:2f:c2:fb:d6:8d:46:04:f2:31:d4:f4:e9:53:aa:7b:fb:
         b7:a1:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:47 2026 by rpki-client