Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          parAME4T/cxL057ps/EulEISYrC4E+l9Fq+FDjLlrJ4=
Subject key identifier:   D8:79:B8:68:31:3D:DF:B2:28:B3:2A:53:82:E7:BE:54:66:AC:D7:1E
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       019FABD10592779D56974ECF2CD5940A53CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 03:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:30 +0000
Files and hashes:         1: E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa (hash: y8rSEBRdZoC/DsraWGFCwBOgPT4J+IhEzX382mx+Nv0=)
                          2: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: ouRyFg6ds2Xs0ICm3AkGp2rTCX0NLPb3Q5PVvdKMNUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:05:92:77:9d:56:97:4e:cf:2c:d5:94:0a:53:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Jul 29 03:00:30 2026 GMT
            Not After : Jul 30 03:00:30 2026 GMT
        Subject: CN=d879b868313ddfb228b32a5382e7be5466acd71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:cb:fd:89:f4:43:39:1b:21:c2:48:37:6c:
                    be:e5:bb:d5:d9:34:d4:f5:ee:8c:a6:dc:88:da:5d:
                    1e:29:32:98:ad:e9:37:a7:d0:cd:7f:ae:39:8c:00:
                    54:5e:84:4b:c4:40:fc:24:69:33:06:d4:d9:ed:5c:
                    d3:03:4c:9a:8a:df:bc:b0:8d:14:aa:20:7a:82:2f:
                    08:96:e6:9b:40:ac:8a:14:59:de:72:50:70:bf:78:
                    66:a9:60:8d:5c:32:de:2b:32:29:c4:c1:5c:ce:b4:
                    3d:a4:5a:98:a7:56:f7:99:ae:7f:4c:15:b9:78:c7:
                    72:b9:b5:e4:b2:3e:ad:cc:78:a7:33:1f:63:b3:c7:
                    f2:c8:f0:f4:40:6b:de:1c:28:0c:9d:f3:f9:2a:75:
                    c5:7b:eb:a5:a6:e1:60:ab:44:71:7b:0a:88:6d:08:
                    7d:32:4c:28:e2:73:2f:10:34:80:7f:28:fb:ce:cb:
                    c1:8d:d1:1d:bb:78:73:62:7b:1f:28:8b:ea:56:e4:
                    a5:26:db:e4:ff:f2:43:87:cd:ed:6f:2e:a3:ea:40:
                    eb:8a:48:57:53:87:bc:8a:c1:a8:9c:f3:4b:f6:ee:
                    9d:20:5e:0d:5b:f8:9e:72:bc:1a:45:3e:d1:2a:dd:
                    84:ce:95:79:4e:3c:9a:cb:88:67:7e:ba:b9:94:22:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:79:B8:68:31:3D:DF:B2:28:B3:2A:53:82:E7:BE:54:66:AC:D7:1E
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:03:33:c0:d1:53:6e:e4:69:c2:4b:8b:f5:b0:81:79:34:
         5a:42:1a:ea:fe:6e:5f:76:3b:25:9f:5b:b6:12:37:c3:b7:35:
         46:7b:c4:d1:a2:9d:67:c4:63:5a:c2:60:45:7f:99:92:97:9f:
         05:5e:5d:36:74:b2:b3:fd:fc:78:2c:7c:ad:aa:2d:10:19:26:
         7c:96:64:26:6b:ef:6a:f5:58:88:95:40:a6:ab:4f:6d:66:6b:
         59:88:b3:0d:00:d0:9f:a5:99:f1:a6:a2:be:63:47:26:aa:40:
         96:4a:70:59:09:50:59:c7:89:5e:35:2d:0a:01:e9:d7:e0:e8:
         f2:29:ee:ed:97:e7:34:c1:26:75:cf:6b:cd:23:ed:fe:33:51:
         cc:68:a3:93:ca:06:1b:af:0f:72:31:de:41:69:57:22:0a:3a:
         ff:f0:9a:ad:84:48:b4:aa:ae:9d:13:0b:db:76:ee:55:53:08:
         d1:ba:44:89:ff:de:20:ec:db:09:c1:38:67:c5:d2:27:09:23:
         4d:85:dd:b9:d3:b8:8e:4c:8a:9e:36:c7:d3:27:11:ca:95:46:
         5c:09:0d:80:23:da:46:64:e9:07:d9:40:23:bb:d2:73:68:4e:
         45:2d:0b:c2:98:50:ae:40:c2:ad:9c:4d:ff:70:a3:7e:d5:55:
         14:a2:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:54 2026 by rpki-client