Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          lZUjVzBhw50XNVi+b0twccjxPSiivgspyVngpZ8ynpI=
Subject key identifier:   FE:F4:36:E5:9B:33:EA:21:87:B2:98:05:DB:86:72:5D:AA:C4:99:22
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       019F905A482CBB29D4C5D4B222779E915F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          1447
Signing time:             Thu 23 Jul 2026 19:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:03 +0000
Files and hashes:         1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: hptIXRlb02UCL2rEoxVe+HDOUU5vTF934YytgCWC8dM=)
                          2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
                          3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:48:2c:bb:29:d4:c5:d4:b2:22:77:9e:91:5f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Jul 23 19:01:03 2026 GMT
            Not After : Jul 24 19:01:03 2026 GMT
        Subject: CN=fef436e59b33ea2187b29805db86725daac49922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:89:12:52:77:c8:64:1a:0a:ba:da:83:26:
                    24:77:51:21:1b:2d:bf:43:e7:55:a5:14:63:98:05:
                    8a:71:97:c7:cf:c1:07:e5:e9:59:0f:29:f4:74:75:
                    b2:d9:81:35:27:53:a5:91:c0:1c:2b:6d:4e:ff:3e:
                    e4:e0:1f:32:cb:d7:08:36:5f:6d:0a:11:40:bf:4a:
                    c3:22:46:7a:4b:ab:9f:d1:53:82:4b:53:d5:3a:92:
                    a5:e0:65:43:fa:54:9d:3a:98:c7:ac:98:38:23:38:
                    a2:f3:d6:41:1b:ab:37:56:ba:f6:58:eb:75:e7:f5:
                    85:9e:ce:50:23:bd:75:75:43:52:fd:31:b6:9b:8e:
                    93:46:31:71:a1:52:e5:54:52:2b:e7:1e:98:7d:8d:
                    ff:47:7a:34:40:ef:03:f8:82:8e:a6:9a:af:62:5f:
                    da:f1:4b:c4:ca:54:7c:2e:95:b3:d1:be:ab:75:95:
                    a1:98:c2:ac:96:21:d3:94:ba:51:33:09:13:c9:36:
                    d0:86:9d:3d:fb:32:4d:30:e4:b0:8c:04:6e:87:d2:
                    c0:47:d6:5c:aa:89:cb:f5:e6:ed:75:6a:6b:e5:7d:
                    da:07:b4:e2:c5:f3:0c:10:ec:35:2e:48:63:d0:78:
                    63:4f:f6:1b:d0:6e:bb:b8:67:78:4c:b0:0b:dc:51:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:36:E5:9B:33:EA:21:87:B2:98:05:DB:86:72:5D:AA:C4:99:22
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:a9:4e:43:41:04:a7:42:96:5a:0f:2e:50:64:22:4f:d5:
         6c:38:a1:88:cc:f3:db:cc:de:0e:6e:4d:47:49:d8:01:ef:82:
         a7:8e:25:03:61:1d:e5:b6:90:10:50:e6:13:45:51:74:0d:65:
         2a:6b:ba:f9:9c:08:3f:2c:1b:df:a8:97:b7:ad:a7:62:dd:48:
         a6:78:b0:cc:d1:97:50:6e:15:12:8f:3d:94:4f:e8:1c:3b:59:
         7b:6c:20:d1:0f:cc:79:a3:5b:50:6e:54:ae:53:5f:fc:25:d2:
         c6:1f:38:10:6f:91:3c:2e:a4:29:da:81:c9:ef:19:3a:53:3b:
         d3:f5:1a:89:07:f8:89:67:06:c3:5c:9b:33:5f:e8:8c:5f:12:
         96:2e:f6:1f:d5:e4:e9:ea:8b:b8:54:62:5a:f7:5e:7a:03:27:
         12:e5:df:55:cd:b7:62:6a:a7:d8:a1:b0:d7:57:70:56:9a:2c:
         9c:8a:30:9e:45:26:5a:3a:e3:20:4f:0a:79:cc:8f:31:39:3e:
         2a:70:06:fd:26:71:f6:6b:37:e2:eb:46:53:16:a3:5d:0b:91:
         e9:50:9f:81:09:fb:46:94:42:e4:0d:df:98:0d:0c:49:74:2a:
         95:0b:22:cd:7c:f9:6b:45:27:4b:82:ae:bc:30:d4:54:8a:0d:
         66:e1:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:00 2026 by rpki-client