Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          EFu8Rx/Fn7hDZnRHF+ADDfvMILa7d+8dNlZ347ZLYu0=
Subject key identifier:   0D:AA:BB:DF:D0:29:4C:28:D0:94:B5:C8:D4:90:CD:71:D4:41:D9:B0
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       019F8F7DCE1F75E583CE6829226F34F72AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 15:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:14 +0000
Files and hashes:         1: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
                          2: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
                          3: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: 5jInl6KKGwM/Ii4mQL+Kp+GrI1c1Pb6qnumopYOBjH4=)
                          5: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
                          6: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
                          7: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
                          8: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=)
                          9: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=)
                          10: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:ce:1f:75:e5:83:ce:68:29:22:6f:34:f7:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Jul 23 15:00:14 2026 GMT
            Not After : Jul 24 15:00:14 2026 GMT
        Subject: CN=0daabbdfd0294c28d094b5c8d490cd71d441d9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:00:7a:7c:e0:3e:e7:17:7e:39:17:42:1c:
                    39:dd:de:d9:72:e8:7b:35:ab:7b:8b:3c:f6:26:86:
                    34:1e:19:36:19:59:fe:d9:25:c1:29:57:a4:fd:e8:
                    f8:d2:d6:40:61:1e:5d:c3:1c:31:7f:77:0f:a5:bd:
                    3a:0b:86:6c:10:5e:4a:99:89:4d:39:ae:e0:43:4d:
                    ed:02:d0:6e:25:ca:55:73:c2:da:92:99:c8:6b:1c:
                    2e:f4:e6:6b:d4:6b:15:8d:1e:ad:3d:05:22:c8:ce:
                    c2:53:be:1b:f4:6b:04:8e:1a:db:66:76:cd:46:e9:
                    eb:fc:b7:f7:2e:e5:38:18:7c:33:26:0f:8c:8a:cd:
                    b8:7c:f6:f3:68:2d:52:d8:73:2b:64:b7:fc:ed:d4:
                    e8:d4:55:57:2d:de:3b:b2:9c:fd:20:7e:cb:03:c1:
                    3c:f5:2a:ee:35:35:90:b4:ad:14:5d:0f:ae:a3:5d:
                    f1:fd:0a:24:d1:d4:d7:8b:e8:dc:14:69:49:7c:53:
                    d8:01:99:d1:ce:b6:d5:58:f5:e8:ed:af:d2:ff:57:
                    77:6f:b8:82:9c:b4:28:77:4c:ce:56:04:71:e4:93:
                    fd:08:e4:c0:91:37:cc:bb:70:a0:d7:88:77:4e:18:
                    c2:de:a0:a5:1e:da:a5:8a:ba:02:56:22:30:a6:97:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AA:BB:DF:D0:29:4C:28:D0:94:B5:C8:D4:90:CD:71:D4:41:D9:B0
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:f5:b1:b9:77:06:af:9c:20:4c:bd:96:cd:88:b1:66:dd:
         45:73:a7:ea:99:3b:97:8c:99:57:ac:35:37:61:94:a6:00:cb:
         a8:62:4a:1a:be:a9:52:e4:ba:89:a9:d5:a8:fd:3c:b3:77:30:
         7f:8b:0b:f1:84:b9:4c:43:39:6a:19:fd:e1:c6:04:12:07:2d:
         f9:b9:f0:45:2e:4b:5b:30:d4:c7:c3:2e:51:61:8f:5e:79:47:
         2a:16:d2:92:14:00:66:1b:c4:b0:8a:81:52:94:9a:09:fa:b1:
         29:90:30:91:b9:c5:ac:b5:6d:6d:c8:0c:2c:51:aa:bb:4c:8a:
         f9:1d:db:b3:fb:5d:f9:b1:56:21:89:59:48:f5:ed:e1:9a:c8:
         84:8b:dc:d2:13:ae:75:79:ea:c4:5b:a5:1b:43:b3:b6:18:03:
         4a:67:f0:98:c4:4b:d8:39:de:d6:e1:c6:45:80:7c:27:14:33:
         e4:3a:00:95:98:cc:b3:bd:2a:ca:e6:99:65:25:99:d7:fc:a7:
         a3:93:ef:0e:eb:ce:d1:c0:dc:84:2c:53:f3:c2:8d:02:da:0e:
         f6:09:22:56:86:17:52:66:77:f5:7c:cf:55:38:e3:96:00:7c:
         79:d0:c7:e5:a7:66:bf:b3:30:d5:88:cd:5e:34:59:7a:6e:36:
         ac:6e:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:07 2026 by rpki-client