Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          lUmp4lQxPRGUCb8w7G9gFqFRWOjavP9672R/IXYNl6c=
Subject key identifier:   57:6F:12:D9:EC:79:72:9C:15:82:AE:E4:DD:23:DD:92:6C:2E:2E:46
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       019F932448FE78C1904255CC87A954F18DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 08:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:56 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: mH98SbaJ0u2PmD0ivnAaPM8VRKkzN9oN43RQhqWrGug=)
                          2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:48:fe:78:c1:90:42:55:cc:87:a9:54:f1:8d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Jul 24 08:00:56 2026 GMT
            Not After : Jul 25 08:00:56 2026 GMT
        Subject: CN=576f12d9ec79729c1582aee4dd23dd926c2e2e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:e3:21:55:08:f3:2f:64:36:73:3d:1f:c8:
                    f0:1c:f5:df:ea:c1:04:c0:31:62:c1:1f:50:97:63:
                    2d:02:a3:10:a8:04:ac:56:3f:af:e2:db:5d:39:3e:
                    1a:a8:da:4d:10:50:47:96:02:d7:b4:31:20:0b:0d:
                    e5:a6:60:2f:ca:cd:a6:92:0c:28:cf:36:f2:78:8a:
                    15:2a:59:42:76:1a:db:e4:c1:ea:2c:7e:d6:2c:7f:
                    b6:d5:1b:01:27:74:7c:ce:48:f4:28:5e:ac:f5:6e:
                    ef:b5:7d:ae:a3:70:b6:7f:3e:32:e6:5c:75:45:3f:
                    90:84:3c:80:20:a3:93:fd:74:ee:8c:fd:69:15:e4:
                    28:02:eb:6b:a0:10:ea:c2:bd:c2:f5:bd:c4:b7:9c:
                    ad:8e:6f:8e:a5:b6:98:75:95:68:c2:12:01:22:67:
                    ea:fb:24:1f:04:9e:0b:72:18:c0:35:e4:8e:25:98:
                    e8:05:60:5d:31:f7:37:a1:57:ab:82:02:4d:17:c0:
                    96:68:64:22:9e:67:d6:90:a4:a7:96:73:c0:e4:cd:
                    76:51:29:04:26:3a:0a:a0:d3:8a:0b:c4:bd:7b:6b:
                    16:a9:ec:b0:a2:8c:9f:fe:3a:4f:c3:20:27:a0:0a:
                    4c:6a:ff:f0:c9:02:6c:cd:af:09:ba:c6:7a:e6:3b:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:12:D9:EC:79:72:9C:15:82:AE:E4:DD:23:DD:92:6C:2E:2E:46
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:76:ad:c8:b8:a0:9f:bd:b7:53:a4:63:a9:5d:89:c9:8d:f3:
         5c:a5:72:ab:f2:c9:89:44:f6:3c:50:12:01:a2:7d:41:d3:f7:
         71:54:fc:b7:a2:67:94:e8:f4:f3:11:09:91:bb:c6:bb:82:ea:
         22:70:1a:44:8c:57:15:06:6d:fc:6d:12:7e:46:25:c7:53:de:
         02:b6:73:17:38:d7:d1:7e:fc:a6:5d:63:42:dc:5b:5a:2b:fd:
         73:e1:0f:8d:9c:9b:b8:49:05:97:8d:00:e3:c6:29:a6:c8:5b:
         5f:db:f7:b6:8f:05:3b:5e:02:b5:4c:cf:33:9f:9c:bf:2a:a9:
         3d:0b:3a:51:a0:5e:21:17:28:ee:55:8f:0c:33:53:bc:91:98:
         7b:67:66:71:f6:ff:e8:e1:73:14:3e:59:66:d6:2e:04:91:1c:
         42:fb:6d:8c:09:ec:df:f4:e7:2a:e9:80:d1:1d:1b:5e:e8:cd:
         08:b2:5b:9d:ff:47:54:3f:88:e7:41:be:2f:5e:97:cf:80:d7:
         1a:76:9e:67:f3:5d:12:1e:71:2d:3f:0d:18:89:d4:57:ee:db:
         e0:c4:16:92:2e:26:b3:a7:eb:04:39:93:32:02:b1:15:6e:a5:
         20:27:7d:0a:de:7e:0f:f0:18:6b:d2:e8:0d:a0:71:ab:da:13:
         ac:89:58:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJEj+eMGQQlXMh6lU8Y3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjYwNzI0MDgwMDU2WhcNMjYwNzI1MDgwMDU2WjAzMTEwLwYDVQQD
Eyg1NzZmMTJkOWVjNzk3MjljMTU4MmFlZTRkZDIzZGQ5MjZjMmUyZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41XjIVUI8y9kNnM9H8jwHPXf6sEE
wDFiwR9Ql2MtAqMQqASsVj+v4ttdOT4aqNpNEFBHlgLXtDEgCw3lpmAvys2mkgwo
zzbyeIoVKllCdhrb5MHqLH7WLH+21RsBJ3R8zkj0KF6s9W7vtX2uo3C2fz4y5lx1
RT+QhDyAIKOT/XTujP1pFeQoAutroBDqwr3C9b3Et5ytjm+OpbaYdZVowhIBImfq
+yQfBJ4LchjANeSOJZjoBWBdMfc3oVerggJNF8CWaGQinmfWkKSnlnPA5M12USkE
JjoKoNOKC8S9e2sWqeywooyf/jpPwyAnoApMav/wyQJsza8JusZ65jvQEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdvEtnseXKcFYKu5N0j3ZJsLi5GMB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnatyLig
n723U6RjqV2JyY3zXKVyq/LJiUT2PFASAaJ9QdP3cVT8t6JnlOj08xEJkbvGu4Lq
InAaRIxXFQZt/G0SfkYlx1PeArZzFzjX0X78pl1jQtxbWiv9c+EPjZybuEkFl40A
48YppshbX9v3to8FO14CtUzPM5+cvyqpPQs6UaBeIRco7lWPDDNTvJGYe2dmcfb/
6OFzFD5ZZtYuBJEcQvttjAns3/TnKumA0R0bXujNCLJbnf9HVD+I50G+L16Xz4DX
GnaeZ/NdEh5xLT8NGInUV+7b4MQWki4ms6frBDmTMgKxFW6lICd9Ct5+D/AYa9Lo
DaBxq9oTrIlYEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:33 2026 by rpki-client