Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File:                     CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier:          HUAdGtDUG86YHUvKfguaBKSN2dhrRlR+FVfI2w5tfrc=
Subject key identifier:   1E:4D:5D:77:1A:AA:82:0A:25:CB:7E:28:5F:1E:A9:B7:B0:17:71:C2
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       019F9090F8B97EF2B53F4E52131DBB081448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 20:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:47 +0000
Files and hashes:         1: 3pHQTzxvnePiZsDxPy-BBwbaxHE.roa (hash: Y44S6ZmGxtTJuSR6q9viqsdpr1+gHx7RTzN1MdK3yOs=)
                          2: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: l4gFQNcCSrkk6WPfsOg1JN3bxBDbhKBPZX8oNm8/AXk=)
                          3: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (hash: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f8:b9:7e:f2:b5:3f:4e:52:13:1d:bb:08:14:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Jul 23 20:00:47 2026 GMT
            Not After : Jul 24 20:00:47 2026 GMT
        Subject: CN=1e4d5d771aaa820a25cb7e285f1ea9b7b01771c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:e5:f7:47:f4:39:21:1a:cd:5a:e0:71:6e:
                    4d:eb:c4:67:25:86:60:24:8f:d4:7d:81:ab:c3:fc:
                    2c:90:1e:50:9c:e3:0b:53:11:fd:96:82:60:15:39:
                    07:b9:60:c6:75:e9:e0:5e:92:6e:c0:ac:a5:d7:63:
                    ce:32:97:f3:c9:17:69:30:a1:c2:49:cf:3d:79:c8:
                    0c:6d:99:d0:c0:7d:77:f0:e4:ed:08:19:76:b5:b2:
                    00:3c:9f:83:64:66:f5:6b:b3:04:e9:dd:7f:ce:2b:
                    da:69:1d:37:6b:70:8a:02:9b:1a:b6:7d:59:67:46:
                    73:74:ff:23:aa:fb:f1:18:53:03:d6:d3:cb:e3:f8:
                    7c:ab:3b:b3:a8:29:0c:76:38:15:52:07:54:4d:50:
                    80:3f:7c:c9:e2:a8:84:03:5e:dd:b2:42:73:49:4b:
                    7e:ba:3a:0a:18:18:31:1c:60:78:b0:1a:b5:14:5c:
                    41:44:b8:58:5f:20:8a:1f:07:88:a5:6b:5e:61:e2:
                    73:f7:b3:95:7b:a6:d4:89:b4:e6:bb:a8:e6:da:2b:
                    e0:89:be:04:0e:2b:0d:f6:1b:7a:d0:ca:9e:36:d9:
                    4e:02:93:37:9d:ad:b1:d5:8a:0c:4d:98:31:5d:c0:
                    a7:30:3a:34:20:16:df:9c:9b:31:61:11:4f:8b:d4:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:5D:77:1A:AA:82:0A:25:CB:7E:28:5F:1E:A9:B7:B0:17:71:C2
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ab:e0:77:d0:73:8d:d4:51:29:a1:4a:96:20:9f:ec:48:59:
         a8:65:88:85:01:8c:bd:8f:27:19:6d:bb:01:d9:93:8f:7a:13:
         cf:ed:30:88:12:77:9a:a4:a8:e6:92:7a:ab:19:ad:77:05:44:
         8c:c2:a8:f2:dd:83:2b:6c:00:d1:25:e9:d6:8c:8b:5d:70:38:
         c2:cb:5e:9f:fa:c8:cd:d3:b4:3f:73:b6:df:80:23:d0:b9:24:
         54:3f:b1:a0:e6:ac:88:52:d5:3e:10:29:52:cd:e4:d1:eb:9b:
         ab:d0:89:22:50:25:42:66:c8:57:b2:7a:ec:fb:52:f2:73:6a:
         fa:4e:c7:4f:5f:01:3e:e8:ba:70:1b:7b:4f:91:52:ff:e0:4a:
         eb:66:79:63:d5:38:0e:d4:77:83:47:0d:61:84:5c:66:0c:f3:
         0c:74:36:6d:4a:86:1e:a2:d6:9c:c1:50:4a:4d:4c:6d:63:6a:
         f1:6d:fc:0d:0b:d6:24:58:8b:8c:f3:04:36:96:02:1a:0c:dd:
         4c:14:11:61:92:b0:13:af:3a:ef:17:20:7b:4f:bd:06:9b:b4:
         f5:5a:7f:f5:fa:c4:a3:c1:64:4a:76:9e:1a:ed:cf:aa:55:5e:
         91:06:4b:86:fd:a9:b2:bb:70:23:09:74:4c:8f:1f:41:c9:7f:
         62:c4:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:30 2026 by rpki-client