Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          AAKfXrnTSQdqYMXtncPa+88XCcda1wAwlni94B/9xNo=
Subject key identifier:   5F:7E:57:FC:52:62:18:34:52:C2:79:C2:6C:5A:1F:10:E7:39:6F:64
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       019F94DB489680F9EA54F512F87B8C3BAEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          0E7A
Signing time:             Fri 24 Jul 2026 16:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:26 +0000
Files and hashes:         1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: p6ZnRnjXCPZ97/sDdDou7X08Yw8udcpOkA+mjztbX6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:48:96:80:f9:ea:54:f5:12:f8:7b:8c:3b:ae:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Jul 24 16:00:26 2026 GMT
            Not After : Jul 25 16:00:26 2026 GMT
        Subject: CN=5f7e57fc5262183452c279c26c5a1f10e7396f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:d9:05:c0:46:af:95:9b:df:56:61:18:dd:
                    ad:76:0f:aa:19:65:1d:18:5d:53:55:af:d4:33:a9:
                    91:cc:0f:d8:4d:2c:f1:4b:8f:a8:5c:4c:ff:62:6d:
                    0f:c5:9b:d7:9d:f1:2c:a8:58:a0:5e:84:09:e0:0e:
                    02:68:e3:87:2e:35:18:d0:a9:83:01:36:83:0d:de:
                    55:f2:ad:1e:b8:67:17:ee:dd:c0:c7:06:14:0d:ab:
                    40:11:a7:b6:ac:7d:bb:58:48:71:2a:b7:d0:af:ae:
                    9a:86:14:1d:25:a2:20:84:0b:72:f9:7f:97:6a:60:
                    69:5e:50:3b:4f:75:b2:3c:c1:5f:99:9b:f1:b5:2e:
                    4f:13:2d:ba:ed:80:0e:20:57:1c:fd:1c:e0:b8:33:
                    df:01:6d:51:53:ff:8f:26:16:55:81:7d:bb:07:13:
                    37:20:fe:60:73:f3:5d:87:bf:4e:95:89:bd:08:52:
                    4b:4c:41:24:e0:a2:ad:70:62:5a:51:5d:79:cc:28:
                    97:6d:12:ff:4b:95:d6:0f:70:87:64:c8:3b:fa:7c:
                    0e:f0:a5:1a:fa:a7:80:5c:cf:29:22:19:1d:7c:c7:
                    92:98:46:ce:28:a3:a7:fa:30:b2:79:a0:13:a4:05:
                    1a:d7:be:c9:f6:aa:ce:56:83:a6:89:57:12:3c:1e:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:57:FC:52:62:18:34:52:C2:79:C2:6C:5A:1F:10:E7:39:6F:64
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:09:fa:cd:93:58:be:63:88:66:c4:f6:56:79:2d:94:23:
         e7:4b:c5:46:b6:6d:be:4a:71:61:4a:2f:a3:ec:db:bc:63:72:
         4e:b6:e4:e8:46:9f:3e:29:da:23:17:3a:f5:3a:3e:3a:f8:43:
         e4:1c:28:f1:d5:90:43:91:b7:22:79:4b:74:06:17:b9:3e:1f:
         12:05:79:8c:59:74:01:55:e3:e5:46:0d:b9:08:da:f1:f3:a1:
         61:af:b0:22:75:b1:c4:17:d5:26:c8:bb:ad:e4:30:fd:7d:c4:
         3d:5b:d5:92:12:5d:01:66:e0:5d:07:f7:e5:eb:8e:a8:0e:84:
         2e:e7:dd:f9:e4:e3:3b:af:c2:01:3f:73:c0:94:7f:9c:70:0b:
         0c:e1:cc:b8:62:1e:32:f7:ae:42:55:f1:2e:bd:a2:6c:85:60:
         2a:ae:e3:d0:e1:95:7c:7e:5a:8b:56:3f:da:ff:35:5b:f8:93:
         fc:a5:94:51:9f:09:18:dc:88:84:3f:81:1b:f4:52:27:7d:92:
         a3:55:b3:a5:a1:62:26:5b:f5:bb:46:48:33:e4:55:b1:2c:1d:
         36:14:90:42:1d:e8:d3:bc:97:01:87:31:15:b1:de:e5:bd:98:
         84:53:d3:20:33:d6:ba:1a:ff:c0:4a:e1:12:ff:72:3a:5f:ec:
         8f:88:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:02 2026 by rpki-client