Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
File:                     WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft (raw, json)
Hash identifier:          s24eXbp2qmbDrjZU0jFkPFNivHPbscro3PfgTi8vwqA=
Subject key identifier:   9C:AD:CD:96:62:F8:B3:C6:9D:DA:F8:54:16:4F:3A:91:E7:F0:B2:DA
Authority key identifier: 5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4
Certificate issuer:       /CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
Certificate serial:       019FA8D09AB450CBAAE50258C5A1251F7956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
Manifest number:          35
Signing time:             Tue 28 Jul 2026 13:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:11 +0000
Files and hashes:         1: WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl (hash: sspfxY0I3itSlZiOY7ONrLQrnVgaXS/dpX8MJuPuEys=)
                          2: _RnNK1CWDoB78GNeZotGsCFo7ok.asa (hash: pOBlcHniej/BHuoOsHj01R7kFzHaQhLCtJ0YZekM18Q=)
                          3: u2wyBVBRe1bi3p5ICK923c68XQc.roa (hash: vXZzD7YWtZNTws0B20dl9mPgH4pcz9e5Oj2ZoVWg690=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:9a:b4:50:cb:aa:e5:02:58:c5:a1:25:1f:79:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
        Validity
            Not Before: Jul 28 13:01:11 2026 GMT
            Not After : Jul 29 13:01:11 2026 GMT
        Subject: CN=9cadcd9662f8b3c69ddaf854164f3a91e7f0b2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:5c:94:3c:7e:c4:a1:44:30:33:a9:f9:e3:
                    22:47:d2:49:b7:dd:71:29:81:cc:99:cc:d1:68:89:
                    5f:6e:f2:63:e1:67:c6:f2:b5:64:b7:36:60:52:8e:
                    6f:09:96:7e:f3:e2:f3:a8:0d:6f:0d:07:10:88:8d:
                    40:37:a0:ea:fc:e5:b6:02:b7:64:35:d2:30:25:56:
                    1b:4b:4a:f4:34:89:2d:c2:af:bc:49:49:f5:b7:ef:
                    70:37:44:3d:72:53:e7:8f:a9:99:53:cc:98:f7:a0:
                    c2:3b:96:e0:54:71:68:7b:72:88:a6:8e:2c:1f:e9:
                    ff:60:78:42:37:96:70:3d:bc:df:a3:4f:6c:4c:8a:
                    ef:db:db:db:ed:1d:f0:4a:e4:5a:04:59:1d:40:41:
                    f5:29:17:31:67:0a:30:c7:d3:60:12:bf:56:12:73:
                    9f:a3:ba:83:07:c9:12:8a:a3:73:47:f6:7a:5d:4d:
                    63:54:a7:6c:a4:e4:5e:b6:c3:fd:79:d3:00:82:d6:
                    e2:6a:cc:11:b3:11:1c:1c:b6:9d:ec:1a:63:6b:61:
                    df:ed:15:15:0a:aa:3f:25:9f:06:f6:69:06:ba:6e:
                    61:17:c0:6a:66:f3:d6:aa:16:5d:fb:65:a9:2a:1b:
                    b8:f3:14:17:3e:cb:fe:4d:03:d2:7a:b9:33:5d:81:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AD:CD:96:62:F8:B3:C6:9D:DA:F8:54:16:4F:3A:91:E7:F0:B2:DA
            X509v3 Authority Key Identifier:
                keyid:5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:00:fb:8c:e6:3a:9c:93:cd:8b:19:5a:5b:f8:07:c9:36:
         36:0e:29:45:fd:b5:2a:65:8e:6e:e4:2f:12:b2:6d:76:4e:d5:
         a3:52:3a:1d:77:44:98:2a:76:c3:01:63:eb:46:6b:a8:c4:37:
         60:9c:44:ce:2b:1e:81:8c:ba:9c:bc:bc:bd:87:d8:cd:16:d7:
         96:1e:0e:dd:f4:18:3a:1b:41:1e:b7:f1:35:1b:7c:5a:ee:22:
         1e:12:4f:78:27:2c:cf:36:bf:1a:7e:46:7e:0f:10:48:fb:e6:
         fc:79:93:d3:d6:6f:9f:b7:3a:0f:50:7c:62:28:62:60:d5:9d:
         98:26:cd:47:20:8e:fe:94:b3:0f:61:a8:6f:da:88:5d:b9:3f:
         36:51:70:7b:df:15:e4:43:3d:f9:72:78:80:a3:88:24:9e:62:
         67:18:d8:4b:eb:18:c6:26:08:b8:47:a3:f3:aa:34:d5:db:4f:
         32:da:ba:03:be:5f:f3:79:ea:21:f9:97:c0:21:c8:35:48:4a:
         81:fa:b2:c2:4d:e1:ef:7e:da:67:8f:76:68:6e:c4:05:68:e1:
         b9:de:2f:60:aa:53:5b:82:15:4b:c2:4f:45:0b:0b:7e:0d:ed:
         39:c8:63:18:81:c3:d6:3e:eb:0b:e1:34:8f:ee:6d:04:68:3f:
         3d:49:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:26 2026 by rpki-client