Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File:                     W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier:          jx2DYqyIyNYMB6g5yv+lMicYDkLri6U71aaW6oYqeYA=
Subject key identifier:   FC:DA:FD:1E:03:A9:F6:D2:5D:58:BD:14:BC:1A:9D:BC:CD:58:01:7E
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer:       /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial:       019F954A7BC5FB1D1C1D8B9AF022EE9C8BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 18:01:54 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:54 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:54 +0000
Files and hashes:         1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: baKbzQCvSiNCARgT9la2tNgK/ENsrpK2TN6RlIXDFb8=)
                          2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:7b:c5:fb:1d:1c:1d:8b:9a:f0:22:ee:9c:8b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
        Validity
            Not Before: Jul 24 18:01:54 2026 GMT
            Not After : Jul 25 18:01:54 2026 GMT
        Subject: CN=fcdafd1e03a9f6d25d58bd14bc1a9dbccd58017e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:6c:3d:16:5a:53:5a:ce:0b:91:c4:d6:94:
                    e9:07:00:7e:b4:7e:69:f9:9a:dd:65:4f:36:6d:ea:
                    a4:0f:8e:6e:9d:48:80:2c:59:46:67:83:45:12:77:
                    bc:29:f0:bf:61:f1:41:75:4d:e0:1f:6d:52:ec:0a:
                    f8:83:19:61:cc:f9:6b:b5:ab:7c:cc:b9:a0:6c:5d:
                    a7:5d:fb:24:d6:ca:86:79:69:5b:58:e4:6c:a0:26:
                    95:5d:88:03:09:ac:76:34:23:f9:f8:23:0b:92:92:
                    3c:56:33:e0:bf:8c:29:3a:ec:3a:23:f4:23:e9:9b:
                    d7:c2:ff:4c:05:a9:e8:23:3c:c5:f9:03:1a:aa:63:
                    2e:07:39:30:cd:3c:cb:5f:6b:de:47:d7:87:0c:cb:
                    d0:69:3c:6e:d0:bf:e3:da:c5:06:93:41:96:c8:93:
                    45:59:a8:84:b4:5d:73:0c:77:3f:84:22:f7:39:47:
                    f4:0e:f9:e5:d8:74:8d:a0:94:84:f8:bf:47:4d:ab:
                    56:8f:de:a2:6b:d8:51:ba:f0:0f:3f:b2:e0:c8:65:
                    ed:86:29:f8:7f:47:84:7e:ea:eb:a4:e6:18:30:fa:
                    64:58:88:61:d9:c5:50:12:d9:a8:82:4e:72:4d:c8:
                    33:f0:f3:ea:69:5a:2d:3d:43:34:ce:29:1d:66:bf:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:FD:1E:03:A9:F6:D2:5D:58:BD:14:BC:1A:9D:BC:CD:58:01:7E
            X509v3 Authority Key Identifier:
                keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:76:72:95:8f:7c:af:d4:7d:22:45:30:b1:a2:cd:b4:b5:
         bc:da:99:38:fa:44:89:4b:c9:75:ee:ef:dc:ea:21:93:ec:dd:
         75:b8:96:aa:80:2d:3e:c6:85:31:b6:ea:db:72:44:b4:b1:f9:
         b0:12:f4:9a:61:fa:19:0d:fb:69:49:8f:48:3c:a3:88:ce:fb:
         78:bf:a3:f3:30:fb:02:50:79:ea:31:1e:9d:18:1e:c5:5b:7d:
         2f:6a:57:59:b5:e7:86:5e:f8:37:e0:a6:7f:d1:7b:f0:c7:45:
         a6:77:bd:86:9b:f7:52:b0:3e:e1:a5:0d:8f:0f:7d:c2:60:57:
         19:f5:e5:79:6f:c7:cf:be:95:de:25:7f:c0:e3:ac:50:28:bb:
         c0:54:25:09:84:ea:31:d7:d5:48:f7:61:16:29:38:57:09:de:
         3e:74:73:90:0e:87:cc:65:8d:a5:8f:52:18:51:30:50:e9:04:
         4d:d8:6b:d6:7f:f7:65:98:6a:3f:1d:c4:81:d0:ef:49:dd:72:
         b7:52:83:de:2c:d5:e8:5e:0b:2e:4c:bb:d3:69:0c:4d:26:61:
         84:d9:13:85:59:38:d1:e9:c8:2f:94:8e:85:5c:50:fb:a4:86:
         9c:c3:64:2e:26:eb:46:e1:a2:1f:4e:b6:12:96:dd:1f:d8:07:
         a7:cf:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:54 2026 by rpki-client