Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
File:                     WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft (raw, json)
Hash identifier:          r35HI5srZZJK2E8NijyTZOmJkurNsayGyeWbFLVIrg8=
Subject key identifier:   DE:4A:9B:03:F2:0F:98:97:6E:D3:51:03:CD:B8:B5:BB:85:1B:F2:3E
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Certificate issuer:       /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial:       019FAA88AB45D379CF015766CD1CB5A93B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:51 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:51 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:51 +0000
Files and hashes:         1: HZsbbCQV184FMKGhunsSvE-BnQg.roa (hash: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=)
                          2: WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl (hash: V3DJtBiNkBo0/ubZ9cot3o43n0wuyqvKwZkCVNmso/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:ab:45:d3:79:cf:01:57:66:cd:1c:b5:a9:3b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
        Validity
            Not Before: Jul 28 21:01:51 2026 GMT
            Not After : Jul 29 21:01:51 2026 GMT
        Subject: CN=de4a9b03f20f98976ed35103cdb8b5bb851bf23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:30:5c:a0:15:c5:76:3d:55:3d:51:0e:7a:
                    23:13:a5:17:40:75:58:68:be:ff:45:05:80:44:76:
                    99:f7:cc:bf:b7:30:a3:39:76:c9:fe:50:92:3a:ea:
                    f3:6a:c8:75:ea:60:b6:bb:c1:d1:45:7f:a8:0d:e5:
                    13:7a:1c:25:33:8e:c9:c2:49:19:b4:39:7e:65:44:
                    4e:04:34:40:5e:7c:78:8a:da:e5:33:c7:1f:4d:76:
                    4a:57:67:93:24:bf:f9:a5:12:80:ef:d5:8e:ac:c3:
                    ef:64:7a:17:93:51:4c:f3:a6:13:07:e4:85:32:fd:
                    b3:e9:50:b7:63:f4:00:91:f5:f1:43:18:c3:3f:65:
                    f8:56:9d:6d:fd:68:ac:2f:28:83:a5:58:94:c0:2c:
                    c3:3d:3b:aa:db:16:d4:5e:5d:a4:77:cb:9c:28:9d:
                    4b:06:24:a0:1f:b1:bd:78:46:4e:65:3a:13:f7:0d:
                    99:5a:cf:a2:65:ec:5e:ad:22:0e:e8:a4:6d:a0:2c:
                    bf:ec:82:49:f5:e4:6f:93:d4:e9:59:d8:5e:c3:71:
                    3c:41:8a:ff:b8:d8:ff:28:90:e2:b1:2f:93:2f:7e:
                    7a:f0:8c:34:23:8e:d4:f5:91:07:16:75:95:f2:86:
                    28:03:9d:ef:53:66:e5:82:09:ca:87:76:42:2d:fe:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4A:9B:03:F2:0F:98:97:6E:D3:51:03:CD:B8:B5:BB:85:1B:F2:3E
            X509v3 Authority Key Identifier:
                keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:db:f1:ce:76:fe:6c:74:a9:89:48:78:b7:d5:da:04:02:
         41:82:20:2e:57:dd:52:5e:9b:dc:27:ff:45:ab:88:14:86:f5:
         e3:89:c8:b3:17:70:52:54:07:14:f6:d0:6a:5e:3d:ec:6d:05:
         c3:9a:48:63:1d:65:28:6b:70:da:17:e9:54:6d:d5:40:cc:0a:
         85:ca:7f:4d:f6:e5:29:32:c2:c2:4b:e9:71:0c:81:7b:2e:e4:
         14:89:21:8d:fa:8b:27:f3:fe:ad:ff:9f:a7:56:1e:fe:1e:46:
         d9:17:10:98:0f:b6:86:dd:9c:1d:55:9d:8d:ae:ab:93:54:37:
         ec:73:51:8a:b3:13:b9:53:e0:bb:ac:9a:c8:48:08:14:f1:05:
         07:52:0c:a1:d5:00:85:d0:48:ed:38:ad:b8:4a:2b:20:2f:ca:
         a9:67:04:e6:1e:94:fe:48:51:09:64:17:15:19:f8:f3:fc:1a:
         13:a3:bd:df:aa:e9:24:71:42:9f:24:f5:30:ee:98:61:95:eb:
         fc:7c:35:a2:a4:e9:f4:59:f8:dc:84:24:cc:47:27:bd:f4:21:
         fc:d6:8a:0c:72:8e:85:26:58:82:4a:d5:a5:91:45:d4:6b:18:
         72:4f:c4:19:a8:9a:eb:5f:07:3e:59:d8:9d:8f:42:17:14:73:
         ca:a0:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:37 2026 by rpki-client