Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File:                     WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier:          IDopHb2QqDfXBHkzu/4yxgtShP9KvSGSMaeNi46K0KA=
Subject key identifier:   54:D4:A4:2F:4B:0D:D6:80:0F:BE:37:8A:BD:0E:93:F1:5F:7B:8B:2E
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer:       /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial:       019F90FF5B7C75F265C241345D910AA8E147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number:          13FE
Signing time:             Thu 23 Jul 2026 22:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:21 +0000
Files and hashes:         1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
                          2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: R6/PoHulpSc6pLWBvX9Qb64kCAUSQEk1UM6ewo2gpus=)
                          3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:5b:7c:75:f2:65:c2:41:34:5d:91:0a:a8:e1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
        Validity
            Not Before: Jul 23 22:01:21 2026 GMT
            Not After : Jul 24 22:01:21 2026 GMT
        Subject: CN=54d4a42f4b0dd6800fbe378abd0e93f15f7b8b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:e5:c6:3a:19:3a:d1:11:36:78:70:a9:9a:
                    56:7a:ec:ad:7b:4f:e0:3f:72:53:8f:31:1f:b9:33:
                    72:10:42:18:2d:91:e6:0d:9f:78:4e:aa:f1:84:c2:
                    cb:d8:44:cf:cb:64:2e:06:e7:2c:96:74:a8:ed:4f:
                    fa:06:a1:15:78:74:c7:15:2a:42:5c:c5:b7:40:fb:
                    e0:f3:4d:79:d0:c7:8b:90:7b:df:57:73:ed:7b:ad:
                    89:95:55:04:ad:ab:c7:c6:8b:05:cb:1a:8e:b2:dc:
                    e2:49:15:27:e1:aa:4e:c5:9a:8a:2e:67:3f:d0:08:
                    99:55:f3:9c:a1:7e:95:9b:86:25:0a:69:71:d7:67:
                    76:ca:bd:31:4c:02:84:fe:24:0d:14:56:95:70:c8:
                    2f:65:94:f5:d7:d1:69:cf:a0:8f:11:d1:b6:89:fd:
                    60:d5:55:34:1c:ea:21:75:98:47:39:49:b5:6b:c4:
                    f5:8f:a2:aa:94:e6:37:00:42:6c:16:d3:22:2a:76:
                    46:01:3b:54:9b:01:e4:73:c0:17:be:4a:77:01:9a:
                    6c:cd:b9:bb:99:79:dd:6e:c7:f7:4c:9b:40:e8:20:
                    71:1b:0e:71:49:03:90:33:bd:6d:34:6c:c1:fb:ad:
                    1a:53:0b:9d:73:78:e5:5b:12:26:d5:f7:bc:c6:b0:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D4:A4:2F:4B:0D:D6:80:0F:BE:37:8A:BD:0E:93:F1:5F:7B:8B:2E
            X509v3 Authority Key Identifier:
                keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:54:63:e6:6c:53:af:91:2f:ab:e5:51:b7:92:2e:e3:6c:
         83:6e:f6:04:98:16:f1:b1:7f:c5:fd:47:cc:b0:6c:85:20:34:
         4e:35:16:20:e7:5b:7c:bb:30:f4:a1:a8:18:5c:32:5d:04:e2:
         fd:63:51:88:93:d7:db:41:06:64:da:ba:ba:d0:eb:bf:21:3b:
         11:46:c7:b6:e1:1b:ec:29:79:b9:de:c8:b4:3b:26:29:28:ab:
         ae:72:af:a6:dd:98:5c:47:1f:08:e3:9c:cc:c2:ae:a5:9f:0d:
         ff:28:98:47:5e:63:0d:e2:46:0a:45:7c:6c:eb:b0:54:70:87:
         bd:06:4a:91:ff:5f:d0:27:c2:e1:53:b7:88:77:72:a9:73:24:
         c3:2f:29:ee:d6:75:9f:aa:9c:ac:b2:0e:98:02:0b:0e:43:5e:
         72:8a:cc:3f:8f:b3:cb:c2:81:54:54:74:d1:6d:2c:b6:eb:6a:
         e2:62:85:b7:c9:04:09:1c:94:0b:71:fe:7a:17:18:b9:16:c0:
         87:a9:b7:50:fb:f8:00:20:93:60:50:29:99:19:df:60:61:15:
         4f:49:f5:d6:62:b0:a3:b4:87:05:e7:79:c9:28:66:f4:26:25:
         0d:42:90:b0:46:84:98:0b:8f:2f:6f:f8:d8:38:d7:dc:71:72:
         92:f7:90:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/1t8dfJlwkE0XZEKqOFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjYwNzIzMjIwMTIxWhcNMjYwNzI0MjIwMTIxWjAzMTEwLwYDVQQD
Eyg1NGQ0YTQyZjRiMGRkNjgwMGZiZTM3OGFiZDBlOTNmMTVmN2I4YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPHlxjoZOtERNnhwqZpWeuyte0/g
P3JTjzEfuTNyEEIYLZHmDZ94TqrxhMLL2ETPy2QuBucslnSo7U/6BqEVeHTHFSpC
XMW3QPvg80150MeLkHvfV3Pte62JlVUEravHxosFyxqOstziSRUn4apOxZqKLmc/
0AiZVfOcoX6Vm4YlCmlx12d2yr0xTAKE/iQNFFaVcMgvZZT119Fpz6CPEdG2if1g
1VU0HOohdZhHOUm1a8T1j6KqlOY3AEJsFtMiKnZGATtUmwHkc8AXvkp3AZpszbm7
mXndbsf3TJtA6CBxGw5xSQOQM71tNGzB+60aUwudc3jlWxIm1fe8xrAEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTUpC9LDdaAD743ir0Ok/Ffe4suMB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoZUY+Zs
U6+RL6vlUbeSLuNsg272BJgW8bF/xf1HzLBshSA0TjUWIOdbfLsw9KGoGFwyXQTi
/WNRiJPX20EGZNq6utDrvyE7EUbHtuEb7Cl5ud7ItDsmKSirrnKvpt2YXEcfCOOc
zMKupZ8N/yiYR15jDeJGCkV8bOuwVHCHvQZKkf9f0CfC4VO3iHdyqXMkwy8p7tZ1
n6qcrLIOmAILDkNecorMP4+zy8KBVFR00W0stutq4mKFt8kECRyUC3H+ehcYuRbA
h6m3UPv4ACCTYFApmRnfYGEVT0n11mKwo7SHBed5yShm9CYlDUKQsEaEmAuPL2/4
2DjX3HFykveQ1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:44 2026 by rpki-client