Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File:                     1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier:          RsDif3CbO7MYisacfFkzvfWXmWFzaOAlft8u9Gy9E1A=
Subject key identifier:   37:30:31:82:D8:33:8F:02:FA:8A:8F:B2:C8:E7:C0:83:16:52:FE:D6
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer:       /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial:       019F9090AC7643687F8F777FCED91EBA50A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number:          199A
Signing time:             Thu 23 Jul 2026 20:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:28 +0000
Files and hashes:         1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: YHWLJiiOL0xy+rtk9VJPLPdsUiijkrZhl+2+Vzwpyqc=)
                          2: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (hash: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:ac:76:43:68:7f:8f:77:7f:ce:d9:1e:ba:50:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
        Validity
            Not Before: Jul 23 20:00:28 2026 GMT
            Not After : Jul 24 20:00:28 2026 GMT
        Subject: CN=37303182d8338f02fa8a8fb2c8e7c0831652fed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:2e:4e:c9:6c:bd:e9:55:5b:0c:17:b3:65:
                    cb:cb:b3:08:0b:6a:95:9f:74:8b:27:2d:93:a8:5d:
                    1d:fa:2d:06:89:8d:05:2e:01:87:a6:99:6e:3a:ba:
                    06:9f:ab:19:3b:72:a4:c8:ac:16:ba:bd:ca:2c:35:
                    7f:c1:85:3c:11:54:54:c6:29:22:48:53:2c:6c:fd:
                    b9:01:a4:47:e7:dc:2e:39:95:e8:82:15:b4:93:72:
                    9b:55:60:2f:49:0c:7f:e0:80:50:27:6a:4f:c4:11:
                    90:11:23:38:b3:8a:8d:67:57:03:61:ee:47:8c:78:
                    8f:a0:b3:55:cc:c1:12:8a:98:7a:28:45:02:34:3d:
                    90:7e:35:81:27:77:71:d9:ba:03:71:3a:58:d3:5c:
                    56:9d:bd:5d:5b:9d:cd:70:cf:06:2e:89:18:57:6b:
                    b8:25:f5:3c:6f:3d:20:05:5f:46:e1:89:2d:00:99:
                    e1:a2:5d:69:a5:7f:1a:dd:b6:99:55:0e:63:3d:92:
                    4e:f5:bb:f7:80:ad:f2:b1:1e:cb:10:10:5b:a2:23:
                    23:7a:17:61:6e:7b:74:cd:c8:29:78:43:b7:71:6f:
                    5b:97:6a:aa:ae:d0:36:ab:d1:d6:44:9b:60:4d:33:
                    1f:ba:b2:a9:7a:b1:77:53:e0:8a:a9:d8:67:17:31:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:30:31:82:D8:33:8F:02:FA:8A:8F:B2:C8:E7:C0:83:16:52:FE:D6
            X509v3 Authority Key Identifier:
                keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:35:98:53:86:af:31:ca:65:69:2a:62:b2:81:e1:eb:55:
         25:da:5a:39:2a:b6:4a:45:73:45:dd:1b:db:ba:c0:1e:3a:dc:
         7a:92:4e:e3:cc:3a:36:58:ff:49:2c:5c:13:f6:f0:00:44:49:
         8b:de:5f:47:98:81:c1:38:4a:0e:78:de:be:09:9d:38:ba:ca:
         bb:ca:56:4a:ea:7e:1b:84:76:9f:6d:02:fc:61:1f:37:db:17:
         16:f5:1a:61:4d:9f:72:12:cd:54:d9:9c:87:9f:92:f2:36:f7:
         73:46:e1:99:55:4b:eb:88:9d:f3:0b:57:3d:08:f6:72:6d:64:
         12:ee:7c:c8:59:d2:ff:13:14:f3:61:ee:73:5b:3a:4c:0c:48:
         69:e1:7e:0e:c2:9c:48:72:36:c6:58:2a:ff:f7:a7:30:2b:43:
         1a:e5:bf:79:f7:d1:87:57:0d:27:1c:0e:d9:91:95:f2:34:fb:
         e4:9f:e8:d3:6a:0b:43:da:e8:93:62:1a:ec:5f:8c:04:01:ed:
         30:ed:c5:dc:28:00:4e:d5:97:73:db:17:ba:97:a9:0e:ad:31:
         35:d3:f5:89:0c:99:6e:c0:ae:c5:cf:a0:3f:af:19:aa:29:01:
         5b:b0:16:67:a2:84:86:5b:c0:72:e5:23:3c:28:bc:be:b5:6b:
         77:6c:5d:78
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+QkKx2Q2h/j3d/ztkeulCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmE2YTIwMzJmOTZkNzAyMzcyMjIzOWM5ZmE1ZWRkNTU5
NmY4NjMwHhcNMjYwNzIzMjAwMDI4WhcNMjYwNzI0MjAwMDI4WjAzMTEwLwYDVQQD
EygzNzMwMzE4MmQ4MzM4ZjAyZmE4YThmYjJjOGU3YzA4MzE2NTJmZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0kuTslsvelVWwwXs2XLy7MIC2qV
n3SLJy2TqF0d+i0GiY0FLgGHppluOroGn6sZO3KkyKwWur3KLDV/wYU8EVRUxiki
SFMsbP25AaRH59wuOZXoghW0k3KbVWAvSQx/4IBQJ2pPxBGQESM4s4qNZ1cDYe5H
jHiPoLNVzMESiph6KEUCND2QfjWBJ3dx2boDcTpY01xWnb1dW53NcM8GLokYV2u4
JfU8bz0gBV9G4YktAJnhol1ppX8a3baZVQ5jPZJO9bv3gK3ysR7LEBBboiMjehdh
bnt0zcgpeEO3cW9bl2qqrtA2q9HWRJtgTTMfurKperF3U+CKqdhnFzGXhQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDcwMYLYM48C+oqPssjnwIMWUv7WMB8GA1UdIwQY
MBaAFPlqaiAy+W1wI3IiOcn6Xt1VlvhjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XcHFJREw1YlhBamNpSTV5ZnBlM1ZXVy1HTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04Yjdh
LTEzZmY2YTBhZDQ0MS8xLzEtV3BxSURMNWJYQWpjaUk1eWZwZTNWV1ctR00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2LzM3NmUxZi05NmIxLTRmZTEtOGI3YS0xM2ZmNmEwYWQ0
NDEvMS8xLVdwcUlETDViWEFqY2lJNXlmcGUzVldXLUdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf41
mFOGrzHKZWkqYrKB4etVJdpaOSq2SkVzRd0b27rAHjrcepJO48w6Nlj/SSxcE/bw
AERJi95fR5iBwThKDnjevgmdOLrKu8pWSup+G4R2n20C/GEfN9sXFvUaYU2fchLN
VNmch5+S8jb3c0bhmVVL64id8wtXPQj2cm1kEu58yFnS/xMU82Huc1s6TAxIaeF+
DsKcSHI2xlgq//enMCtDGuW/effRh1cNJxwO2ZGV8jT75J/o02oLQ9rok2Ia7F+M
BAHtMO3F3CgATtWXc9sXupepDq0xNdP1iQyZbsCuxc+gP68ZqikBW7AWZ6KEhlvA
cuUjPCi8vrVrd2xdeA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:27 2026 by rpki-client