Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File:                     WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier:          fod0kPwVvPEeW0r1C8SEdbQ9Rv1vrpblpy602Ad6cKU=
Subject key identifier:   11:F7:35:DA:54:76:0C:C6:70:6C:4C:47:44:1B:F8:56:92:D4:A5:B5
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer:       /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial:       019F9090C2268B637C0451E8DC4120ED01DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number:          05C9
Signing time:             Thu 23 Jul 2026 20:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:33 +0000
Files and hashes:         1: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: 586Da8nedMaSwlzfVIIFjQPJMFaWcmt8MAzngZmN5gE=)
                          2: m5v93tUMRlQaxfIjzpbnrJ9Lohk.roa (hash: 1uqxOdkBAdrXDzt6+/f4JBRjuvDt70ncNU0kmF4G9OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:c2:26:8b:63:7c:04:51:e8:dc:41:20:ed:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
        Validity
            Not Before: Jul 23 20:00:33 2026 GMT
            Not After : Jul 24 20:00:33 2026 GMT
        Subject: CN=11f735da54760cc6706c4c47441bf85692d4a5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:b8:d7:08:9c:c7:26:a8:21:6d:d5:6e:1a:
                    44:38:3a:2e:bf:b7:a7:b5:0b:3a:d7:26:0f:90:9c:
                    fb:48:64:22:7b:63:aa:3e:3c:03:6b:9f:78:62:38:
                    3a:ca:64:c6:b8:b1:96:2c:6a:a3:6d:e4:b7:a7:af:
                    ad:16:52:2d:c4:bc:e6:a3:03:98:81:7a:c7:08:5a:
                    39:bb:2f:44:d8:df:e8:dd:2c:55:a9:d8:6e:03:e9:
                    d8:2e:df:38:d6:8a:b0:fd:fd:43:e0:b3:2d:f1:49:
                    a2:33:e8:15:0f:ae:c9:41:18:a1:40:6e:19:15:03:
                    f4:fa:a9:cb:9a:a1:bc:e5:77:69:6b:4d:da:86:d1:
                    82:f1:f2:dd:41:7c:1e:b7:ce:dd:62:44:af:ee:e6:
                    e1:df:72:16:85:30:b2:c0:d5:f7:11:98:bb:6c:38:
                    aa:82:64:c5:65:ca:ef:26:20:ad:bd:1d:32:8b:01:
                    21:e2:13:18:0d:56:8f:af:0e:e7:0f:24:5c:59:f6:
                    5e:d3:21:82:78:e7:91:dc:1d:7a:c0:76:c0:57:07:
                    ac:ee:9b:d4:a9:7d:3f:e8:67:38:de:01:f6:8d:14:
                    a9:2e:bd:9a:54:30:2c:58:a6:55:03:f1:dd:c2:71:
                    c7:f2:0b:d7:fa:ac:0c:20:67:3c:75:a2:c4:fa:a5:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F7:35:DA:54:76:0C:C6:70:6C:4C:47:44:1B:F8:56:92:D4:A5:B5
            X509v3 Authority Key Identifier:
                keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:92:f7:fe:8c:85:36:df:7d:a7:b0:29:4b:2a:f1:68:4f:d4:
         2a:4d:31:a6:27:e5:b2:d4:24:e4:c7:0f:bb:cb:a7:b0:5a:2b:
         91:46:46:7a:2b:e0:36:f9:97:51:4b:59:dd:9f:b0:3b:98:16:
         04:3f:af:1a:d5:09:c2:64:ad:7c:9d:4d:7f:01:85:ab:69:7c:
         9d:89:e7:e2:55:2e:72:0f:cb:82:77:81:be:56:3e:66:26:4d:
         78:25:7d:42:a7:76:bf:be:b4:ea:f4:1d:8a:a6:f5:6d:b0:26:
         5f:85:b0:fa:37:f1:11:cb:6d:c7:cc:69:91:a2:c1:07:20:0d:
         e4:28:80:04:dc:2a:24:04:65:9c:b6:70:be:43:78:31:0e:6e:
         b7:b8:0b:5b:26:b6:30:9c:90:56:ba:63:67:81:fc:5d:c8:b3:
         c6:e7:77:b5:13:2e:57:4a:f8:49:4b:7a:74:62:c0:6f:d1:c8:
         92:1b:c9:fa:e4:34:29:e4:dd:31:87:e0:43:6b:87:dd:a4:65:
         b1:28:76:b5:63:1f:b6:8b:66:f1:d1:f4:ee:09:e3:c9:3f:88:
         54:4f:c0:8e:36:75:33:25:12:43:19:c2:d4:10:77:50:42:cd:
         4e:d6:53:26:92:88:6a:f8:f6:9f:90:3e:6c:f7:e5:2f:ea:89:
         12:24:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:56 2026 by rpki-client