Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File:                     W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier:          yyX5eCYWoeG8plRMFFoLI7XpGQAXMm37ocN28PLRfmc=
Subject key identifier:   7A:8A:BE:81:23:96:B6:B2:72:D9:97:B7:34:46:09:E5:79:1B:D5:24
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer:       /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial:       019FAAF5DB8171D7280B7694FF62F783A470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number:          0182
Signing time:             Tue 28 Jul 2026 23:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:06 +0000
Files and hashes:         1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: w+ZETPcCi4WtQ99txlidp7jaX50etTCd9/XkHiyJ654=)
                          2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:db:81:71:d7:28:0b:76:94:ff:62:f7:83:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
        Validity
            Not Before: Jul 28 23:01:06 2026 GMT
            Not After : Jul 29 23:01:06 2026 GMT
        Subject: CN=7a8abe812396b6b272d997b7344609e5791bd524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:38:f4:24:60:08:be:b6:53:d9:7e:fc:af:
                    af:46:e3:bc:33:22:5e:6a:9f:aa:08:99:5b:4a:15:
                    31:9e:93:cb:65:23:62:6c:5c:82:72:a9:43:43:09:
                    fb:7b:57:1f:78:a5:3a:2e:46:f4:56:94:26:6d:67:
                    8a:c2:04:e0:47:cd:ef:33:5a:fe:51:b6:11:ff:ff:
                    bb:da:6e:a5:33:13:1d:5b:8e:c2:24:13:6d:4e:d9:
                    c4:75:39:f2:e6:f7:fe:03:bf:a8:b5:3f:b2:b1:35:
                    a2:4b:8d:b5:76:7f:f4:67:1c:b3:e8:57:5a:82:e3:
                    fd:ca:50:aa:4a:6c:43:a1:ce:13:55:fe:e0:dc:23:
                    62:70:57:20:02:15:05:a8:ac:23:16:8d:ec:b0:14:
                    45:ab:c3:5a:c4:c9:cb:ea:c8:2b:d4:95:f1:50:92:
                    c1:b7:8d:10:7d:67:ee:09:00:f0:5e:df:51:46:3b:
                    22:6c:2a:f7:6a:28:3b:f0:30:cb:22:48:48:0d:04:
                    3b:f7:18:bf:3e:53:e7:40:4b:27:6a:de:fe:10:04:
                    22:5b:d0:ef:14:86:79:4c:fa:2b:34:2f:5c:3d:77:
                    89:4c:ea:9e:c3:0e:d0:fb:e0:23:30:9d:a4:7d:f2:
                    0b:33:ee:81:c6:48:dd:9e:d1:4b:00:d3:f4:56:a9:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8A:BE:81:23:96:B6:B2:72:D9:97:B7:34:46:09:E5:79:1B:D5:24
            X509v3 Authority Key Identifier:
                keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:14:a2:b6:24:a6:fc:f8:6a:4f:79:74:89:53:e4:c3:24:c3:
         35:3a:f5:d3:ee:8f:94:bc:ea:e0:4d:3d:a2:24:54:5c:97:95:
         e2:bd:6f:ca:68:f5:5f:42:74:f4:b4:35:5b:7e:08:86:14:fa:
         c6:ba:20:80:df:4f:03:a7:ed:7d:82:cf:f0:dd:b3:dd:03:55:
         10:8f:67:6b:05:12:25:07:6b:28:8c:11:6a:15:eb:ee:f2:ee:
         ab:1d:9a:f6:5d:b1:fb:a8:bd:3b:9c:77:8c:8f:a7:e9:f7:53:
         ba:04:da:87:39:eb:83:e3:be:6c:f7:ee:39:7c:3f:a3:4d:1a:
         e8:7a:d8:d3:c9:c1:ae:bf:0c:31:16:b4:58:74:3f:74:27:9c:
         1d:3b:5a:0a:d0:d2:81:3f:39:c2:60:8c:9f:a0:98:86:9a:6d:
         1a:57:03:1a:4c:87:52:a6:65:a4:12:9c:d2:40:30:c2:64:59:
         bb:e1:f9:d8:f9:55:a8:76:64:f4:fc:66:41:3d:ec:10:c8:49:
         99:95:78:3f:65:2b:e3:a2:ee:c5:08:ee:26:22:6f:6f:51:1e:
         e1:f5:01:66:f8:3b:85:8b:1f:e6:b1:7b:fa:b6:41:d8:cf:4e:
         72:4c:13:b1:34:d0:eb:2a:96:5d:43:19:71:d1:d9:8c:54:09:
         48:2b:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:36 2026 by rpki-client