Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File:                     W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier:          CvQv1rdne2nhaG+GnYBlK9O/uccbu8m+KC0xwxwuXMU=
Subject key identifier:   84:4E:C8:47:29:61:84:32:21:E0:3E:96:58:C7:D5:89:7A:0B:60:84
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer:       /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial:       019FAAF5AE9F7360539B1B1CD51EBEFAB66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number:          18BE
Signing time:             Tue 28 Jul 2026 23:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:55 +0000
Files and hashes:         1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: tyyaIcJdzvFabV4Uq8CjpApg7aVrHnljlBxHg1dsemE=)
                          2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:ae:9f:73:60:53:9b:1b:1c:d5:1e:be:fa:b6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
        Validity
            Not Before: Jul 28 23:00:55 2026 GMT
            Not After : Jul 29 23:00:55 2026 GMT
        Subject: CN=844ec8472961843221e03e9658c7d5897a0b6084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:13:ed:ff:b7:db:6d:f0:48:6e:31:f5:c4:
                    e6:51:d1:91:f0:24:c4:dd:4a:86:84:bf:0a:03:c1:
                    ad:fb:c8:7e:0b:94:33:d9:67:f0:eb:0e:57:8c:47:
                    32:d7:35:b0:e8:fc:55:31:2a:28:45:97:89:ed:db:
                    59:69:72:0b:b8:68:00:57:6f:2e:c2:56:58:f8:a3:
                    4c:33:ca:6b:19:35:1e:bd:f9:a3:45:39:e8:8f:5f:
                    4c:f2:80:5a:ff:d9:c1:1a:eb:5f:bf:32:52:5a:ec:
                    c1:10:1c:57:4c:53:c4:34:c7:84:95:43:a8:e5:bc:
                    5e:08:cf:60:92:26:4e:3e:4f:e8:89:1c:e1:dd:13:
                    40:7e:c8:b2:be:c6:b8:2c:0b:a4:40:28:d4:33:a4:
                    40:89:dc:86:1a:08:d1:2c:69:7b:73:3c:40:ca:d0:
                    60:a7:f3:db:c4:08:8d:3f:1f:ec:2a:d2:e2:a4:1d:
                    1e:64:75:55:49:fd:71:79:5e:7c:e2:b6:ec:f5:2b:
                    c5:42:e2:ce:63:d3:77:d9:a6:54:65:ff:86:7a:95:
                    04:c2:36:ac:71:c3:ac:b6:d7:23:9e:1c:41:b3:96:
                    2e:b6:62:bf:49:b7:81:94:19:9b:5a:49:de:75:31:
                    8b:0e:01:7e:b4:71:7a:38:c0:dc:f3:f7:c7:eb:01:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:C8:47:29:61:84:32:21:E0:3E:96:58:C7:D5:89:7A:0B:60:84
            X509v3 Authority Key Identifier:
                keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:1c:2d:9d:c7:f5:92:aa:aa:76:89:61:ae:41:ed:46:64:
         ef:03:0e:09:0d:b4:fa:3c:10:c3:1a:eb:5f:81:c4:a4:56:dd:
         e1:52:25:5a:b1:aa:42:7a:87:58:e8:60:5b:b9:16:4b:72:d3:
         ef:b4:a3:04:18:2c:f9:35:09:13:99:2e:6e:89:aa:01:b9:30:
         bf:5c:fe:96:31:c2:39:62:6d:34:e5:2f:fa:3f:cd:bf:ab:d4:
         7c:bb:bf:6c:6d:ba:d3:c8:fe:2a:06:09:9f:45:e3:d1:4e:06:
         dd:46:34:45:5b:41:3e:ef:0c:24:e9:0c:26:a4:2e:3e:18:b6:
         52:36:0b:1e:39:c9:65:30:81:e1:31:b6:34:b6:57:86:26:7a:
         5e:8c:58:47:22:94:9a:3b:df:94:05:ec:0e:6f:27:fc:3c:a0:
         a7:69:a5:2c:6f:79:d0:0d:98:8e:e2:87:6a:9c:f3:58:31:04:
         d5:d8:52:70:6c:59:30:ea:cc:31:fc:6a:16:5d:31:b8:2c:6c:
         aa:31:e3:f7:fb:61:ab:b2:b5:bc:4e:7e:2a:7b:c3:30:59:2b:
         14:0c:5b:23:d8:f8:10:f7:d2:7d:b6:fe:8e:54:f6:1d:1f:c0:
         29:27:5b:67:9b:44:91:c7:6b:12:95:8c:8c:3b:0e:df:71:98:
         c4:0a:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:55 2026 by rpki-client