Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File:                     1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier:          JPU0SCoLLYCLowKsOricX9fUfl+WPMQxelU3m8kszZg=
Subject key identifier:   67:65:26:D7:65:89:72:BB:CF:99:BB:D7:82:F6:08:C9:F1:E8:EC:8E
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer:       /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial:       019FA93DC42B9ED3C68B744DBE10E85B4FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 15:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:25 +0000
Files and hashes:         1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: 35cTDZ4XSRIuoP2ilgl6MPmpmANHz33kvDqtpk59ztM=)
                          2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:c4:2b:9e:d3:c6:8b:74:4d:be:10:e8:5b:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
        Validity
            Not Before: Jul 28 15:00:25 2026 GMT
            Not After : Jul 29 15:00:25 2026 GMT
        Subject: CN=676526d7658972bbcf99bbd782f608c9f1e8ec8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:35:49:6e:ff:51:a6:26:fb:c0:08:6c:17:
                    bb:aa:30:66:cb:be:a1:eb:f8:c9:82:b7:ab:3e:44:
                    62:09:7f:cb:4b:dd:84:d6:63:37:54:3e:a2:d7:ef:
                    37:4a:e8:78:5b:11:69:0b:34:6a:b6:f2:4e:47:2d:
                    53:7b:7f:15:85:9e:bf:7c:f3:f6:40:e4:6f:3a:88:
                    8a:2e:3e:67:bd:a1:e8:01:2a:82:db:15:07:6c:83:
                    7c:f4:58:ba:2b:94:b3:a0:87:79:79:a8:3d:48:3c:
                    d4:fa:e3:8c:db:25:b3:e4:c6:69:51:0b:a2:42:0c:
                    f7:2d:cf:77:f7:3f:02:31:05:b8:ae:52:88:64:8e:
                    2b:b2:e9:6c:46:6a:67:89:c4:9e:91:25:a9:3d:3a:
                    92:89:95:59:db:49:cd:5c:33:71:f1:b4:34:7c:58:
                    20:5d:70:1a:65:e7:33:43:c4:53:7b:f8:7b:d4:59:
                    ba:7b:7f:5e:3f:a9:5a:91:86:7a:e5:d8:2f:ec:e9:
                    5a:c5:93:24:71:5d:c7:18:60:73:2a:f9:7e:61:ca:
                    8f:71:1d:f6:17:62:10:72:ac:8c:e1:e7:8e:98:f7:
                    a8:f8:46:a6:8e:38:db:a6:b8:17:e2:3a:7d:23:90:
                    68:ad:c6:88:f3:8b:df:a3:c8:5d:62:72:5e:33:df:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:65:26:D7:65:89:72:BB:CF:99:BB:D7:82:F6:08:C9:F1:E8:EC:8E
            X509v3 Authority Key Identifier:
                keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2a:40:d7:41:d6:39:7b:be:df:83:65:64:02:aa:d9:eb:a9:
         1e:4e:c1:d5:ef:86:cd:8d:9e:6d:d6:bb:fc:1b:c3:d0:76:1d:
         9a:0f:58:74:3a:1d:49:55:55:66:3f:d3:17:f9:83:b5:f6:a2:
         68:59:12:e1:31:59:ed:56:87:19:5b:22:cf:66:d8:7b:0b:a8:
         4f:b9:90:ce:66:0b:75:d8:48:a9:70:c7:3d:89:26:e4:93:c2:
         44:06:9d:5a:d9:df:fe:aa:62:48:c3:64:a3:fb:f2:7f:18:b1:
         3d:3c:43:19:7a:94:91:42:07:8c:48:af:9b:5d:e2:8a:97:f3:
         42:57:25:f7:4b:15:a3:e7:29:57:b1:26:f7:d8:ab:82:28:79:
         db:16:6d:a8:f1:aa:83:bd:41:a0:88:d0:ea:d3:77:ae:cb:d4:
         f3:89:b5:01:dd:03:9d:f1:5f:45:e6:62:43:80:75:08:5a:64:
         93:2a:cd:45:5e:aa:0f:c7:42:2d:19:3a:30:62:ca:2f:f9:26:
         23:42:f2:61:17:b5:33:07:7c:ad:c7:99:40:2f:64:88:2f:80:
         ba:db:6c:81:19:89:d9:04:fe:1c:4d:2a:96:69:81:ab:d6:9b:
         2d:79:cd:0e:3c:fd:44:25:97:8c:68:7a:56:d3:60:df:14:d8:
         57:95:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:52 2026 by rpki-client