Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File:                     leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier:          WASSK0KlnCZB905uYnBhygIjwl6FHBeNH6wyKrd/De4=
Subject key identifier:   73:7A:0B:7C:21:44:DD:CD:20:9A:B1:E8:4B:93:CC:76:F9:A2:D6:A9
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       019FAA874CD56FFF263D5164B4BBCFCCCB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number:          0796
Signing time:             Tue 28 Jul 2026 21:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:21 +0000
Files and hashes:         1: S66d551JroD6MSIEZ_42ExhqO5k.roa (hash: t3UcVYuNtk2YzWoEW72cC2ZSBix9HCSCO3JVqXCUzCU=)
                          2: VxEWsPAkHIxtvkrHED-wCH1kUI0.roa (hash: 8vUxWPnKT69GjCXQn0MXD3bHdB31nVJ/4lTKFyOpw+g=)
                          3: aVFkjMqYn2rDvWK_4Er7veowmzc.roa (hash: a0eU89LPDvn15SbN8UifKQ8En1lFGp7ZEcjuxOeXD3w=)
                          4: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: b7fm+YE8tnf4Hidj4/kz/UHSiMFY+ZlAaVtBoU6cBA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:4c:d5:6f:ff:26:3d:51:64:b4:bb:cf:cc:cb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: Jul 28 21:00:21 2026 GMT
            Not After : Jul 29 21:00:21 2026 GMT
        Subject: CN=737a0b7c2144ddcd209ab1e84b93cc76f9a2d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:7d:ad:0e:2d:4e:a4:24:ab:6e:7f:d5:60:
                    3e:cb:81:83:a4:bb:e7:7f:da:62:69:1d:a8:66:86:
                    c0:31:9d:d0:99:28:82:c0:96:f9:8e:39:ab:46:84:
                    17:01:a8:f9:12:d5:b5:67:1f:00:2b:28:94:7d:ae:
                    f5:fc:21:9a:bb:d8:1f:4c:c1:15:e8:e1:06:b3:14:
                    07:a9:1c:c6:b4:8f:8b:7f:df:ec:c9:04:14:54:de:
                    8f:6c:a9:97:9b:36:f9:d5:36:ed:52:26:77:53:a9:
                    63:53:9e:e5:84:9c:b9:e5:d9:b5:42:ba:16:d7:4d:
                    94:64:03:4a:de:d4:46:98:ce:25:17:c3:ff:a0:a4:
                    b0:b9:9a:26:b5:7a:da:25:9b:d4:63:b0:74:6b:68:
                    82:d0:b9:b7:9b:c5:5c:d0:08:e1:4e:21:fd:58:63:
                    7a:e3:ef:a5:ee:ff:c2:d0:2e:e1:b0:ad:ea:40:3a:
                    64:93:c1:53:23:7c:e7:bf:ee:fc:5a:6d:75:35:79:
                    3a:a1:6c:1b:fc:65:45:4c:9d:45:09:ce:4c:e9:6d:
                    31:71:c0:22:4e:fe:9f:5c:a8:b3:cd:eb:24:97:22:
                    e9:a2:18:62:93:a3:75:79:c0:ee:8b:29:c1:37:f9:
                    96:3c:fc:aa:ab:ed:95:05:67:b2:a5:ee:c5:bd:73:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7A:0B:7C:21:44:DD:CD:20:9A:B1:E8:4B:93:CC:76:F9:A2:D6:A9
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:a4:fd:54:51:d2:bc:48:49:0a:95:db:c5:5f:8c:93:0e:
         c9:bb:4c:24:a2:b0:c3:94:f6:05:7b:b4:0a:f4:8a:69:07:29:
         d8:91:d5:46:b5:ca:79:cb:65:c8:d8:2d:e5:fe:57:8b:19:63:
         14:43:74:22:6b:cd:f8:ec:ca:78:61:60:e9:11:e5:8c:67:a7:
         70:b2:53:4c:84:b8:2f:15:3b:a5:65:15:57:4c:10:85:5d:d2:
         bd:9a:2e:9c:4f:d5:2b:e9:7c:be:89:fc:01:b8:44:e7:fe:61:
         3a:88:7e:73:ed:49:cf:95:3b:a6:65:dd:d8:55:8d:83:12:df:
         79:4e:a0:14:dc:1b:71:bf:6f:7e:5d:25:e4:9d:5d:e2:31:4f:
         3f:11:eb:3d:30:30:af:00:96:32:4c:21:a6:66:8f:6a:1f:65:
         30:49:7a:00:2d:57:5f:5b:60:e9:f2:c7:0f:95:e3:69:2a:09:
         6c:d3:08:fd:ad:d8:9f:16:b2:0a:68:a1:f6:9a:bf:23:4e:a6:
         2a:df:a0:ba:e0:87:28:a5:61:59:24:50:7a:62:7a:4f:2a:ee:
         f1:f2:fa:9c:4f:35:66:67:6b:75:19:49:dd:fe:9b:ba:d4:5d:
         60:53:61:e9:f1:5b:ae:c7:0c:1b:5c:d4:3f:38:a1:2b:b2:26:
         be:3f:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:57 2026 by rpki-client