Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File:                     WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier:          fQfzZrv5eugZCxL7+7YAUMSlc9upSkppbw/KcdSuDPQ=
Subject key identifier:   E9:89:E0:3F:8D:AC:6F:0A:F2:B7:0D:F0:43:12:A8:83:F2:1C:0E:8D
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer:       /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial:       019FABD12C102A5C0092050B2BCB71E8E30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 03:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:39 +0000
Files and hashes:         1: 1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa (hash: fRzTkPN8a27bua2wzuTpxH2x1y519ujmqn10IN10rFw=)
                          2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: QCiJZtuhSQjRiTp0qBHMMI7ZUoqjHAPwTDH2QkV7idI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:2c:10:2a:5c:00:92:05:0b:2b:cb:71:e8:e3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
        Validity
            Not Before: Jul 29 03:00:39 2026 GMT
            Not After : Jul 30 03:00:39 2026 GMT
        Subject: CN=e989e03f8dac6f0af2b70df04312a883f21c0e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:28:b2:d7:30:98:45:2a:02:ae:5f:2b:3a:
                    2a:8c:f2:6b:c2:74:54:78:06:ce:cb:92:f5:ff:43:
                    f6:af:bf:59:70:8c:1e:0e:f2:62:e2:68:38:d2:aa:
                    a4:f6:2e:23:28:5a:ea:e8:37:7a:16:e8:a0:e8:b7:
                    28:d8:66:ce:be:9d:36:34:e2:a2:b0:12:bf:52:53:
                    6e:5c:ef:7e:fe:ea:d0:e2:ad:ff:2e:7c:f9:5e:1b:
                    b4:2d:4b:92:9e:41:63:98:96:04:f5:19:4f:e5:c1:
                    5d:36:bb:46:a1:ee:37:40:fe:f6:55:a3:7b:47:dc:
                    33:28:87:4d:b4:c1:b4:04:3e:f5:9e:89:de:a9:c2:
                    ca:00:80:eb:1f:69:ec:2d:ce:f7:1e:39:95:c9:84:
                    83:7d:29:90:83:ac:c1:30:fe:4d:00:6e:b5:66:1d:
                    7f:8b:c6:bd:00:73:c8:4e:92:7c:97:23:e0:02:a7:
                    36:a1:55:60:67:8f:44:fe:c5:8b:9d:e0:7a:1f:12:
                    cc:1b:eb:68:83:b8:6b:74:4d:8c:70:3a:22:3d:a1:
                    a9:ad:b0:78:03:04:f9:24:7e:0b:bf:14:f2:9a:53:
                    80:05:ab:39:0c:5c:46:42:18:55:04:67:7a:9a:67:
                    6f:7d:f3:73:f4:2a:5e:25:ce:f6:00:34:79:99:e6:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:89:E0:3F:8D:AC:6F:0A:F2:B7:0D:F0:43:12:A8:83:F2:1C:0E:8D
            X509v3 Authority Key Identifier:
                keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:24:1b:d9:9c:25:4d:e8:2b:cb:12:0c:88:43:e6:2b:24:49:
         ad:9e:1b:92:c2:1b:e1:4d:4d:60:ad:49:2b:e6:36:25:9b:b4:
         60:2f:9c:6d:a8:34:1c:d0:07:07:a5:ed:ae:88:04:02:a5:19:
         7d:65:59:7c:d9:16:6d:6d:b6:91:53:ec:5e:15:e8:67:c2:b7:
         a5:7d:25:fd:e3:0d:4c:23:c2:c6:fa:6a:af:ad:1f:8e:ce:69:
         cb:fa:ac:8d:c7:7d:5b:39:27:40:93:87:e9:bc:5d:81:6d:1c:
         79:ac:24:64:08:b2:67:88:39:cf:ae:47:d1:52:c6:c8:ef:7f:
         04:37:07:b5:22:db:de:c0:80:33:17:41:a2:a2:87:35:96:c3:
         25:d1:11:ee:76:f4:0c:eb:26:eb:21:1b:cc:3f:5f:46:fc:20:
         ea:84:87:31:e5:f0:ae:59:23:ef:f7:10:7b:49:79:e3:06:27:
         01:5f:64:f0:f0:85:e2:9a:17:83:0f:7d:fd:10:03:3c:cc:bc:
         d5:9d:b0:f5:ef:97:1b:df:2f:5c:76:58:2b:95:6f:2c:f5:83:
         1a:75:61:ae:b6:9a:99:77:0d:e2:f5:c5:a3:e3:83:31:c3:af:
         a5:e4:11:64:a6:52:f1:fa:64:92:b6:71:2c:d2:99:a7:49:bc:
         a8:14:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:32 2026 by rpki-client