Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          GFRPnKRPWUaafqxuJ9UZRpycyEf/Hj2/GupPtjwBwA4=
Subject key identifier:   73:89:BB:59:37:80:17:85:66:3B:BB:1B:E1:F9:77:5F:02:59:1A:64
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       019F9211334181DC591218BC63EB9F338D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 03:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:28 +0000
Files and hashes:         1: F8BqFfZoIsv5x2t_rO_S_NuJemg.roa (hash: PB4J+IoKo4T7Q6QAGzoR44UFBrvbvOiTrydpAGnj8mc=)
                          2: GLHvXz2R1lOAHX7TzyDNoCB2iBY.roa (hash: OBjA+NNWsAq34/o+6Q0m7vwkANLJOuwcO5B1z9txcvU=)
                          3: Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa (hash: QSZtykOf++sIkuecLt/sSggguVhjdeR5YjW9l7cEQV8=)
                          4: OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa (hash: HQ35g8yBDULlIp8ua3XKzN1vR0rEMHW47KubxInNm2g=)
                          5: QYAIVSd2tgwed65DPiU0ds85aB0.roa (hash: g9cZELqfkNNkZkS/ZARd962rG7NHC+bpHrVh18iN6TI=)
                          6: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: TEusItHg+8A6CONBOMqHTLzLW1dLFTReR+YTriqz5o0=)
                          7: jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (hash: fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:33:41:81:dc:59:12:18:bc:63:eb:9f:33:8d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Jul 24 03:00:28 2026 GMT
            Not After : Jul 25 03:00:28 2026 GMT
        Subject: CN=7389bb5937801785663bbb1be1f9775f02591a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:cc:d4:55:ab:99:66:65:8c:7f:c5:ea:f2:
                    f2:73:d7:c1:1e:84:c3:d3:5b:33:6b:a5:4f:e3:22:
                    8f:87:79:3e:66:31:5c:69:06:c4:ae:8b:41:6f:ef:
                    07:dc:2a:cf:0b:23:63:b4:9b:ee:56:ba:df:4e:4d:
                    48:4d:11:ec:78:b6:c8:2e:df:cf:46:0b:d1:38:e4:
                    e3:9d:c7:da:9f:00:b7:6f:f2:33:8a:f2:fe:e0:b1:
                    93:06:7c:22:b8:0b:65:16:7b:08:13:fd:f6:09:c4:
                    3a:28:5d:62:f6:c4:fa:c2:40:67:6a:f2:e6:09:a9:
                    95:f9:e9:15:5a:db:56:94:af:b9:b5:a8:70:0d:0b:
                    3f:4d:3e:8a:48:c4:20:e0:03:ed:eb:81:1a:cd:31:
                    16:20:42:d8:3c:ac:25:c8:4a:34:74:14:c4:94:e0:
                    ed:fc:ef:6b:2b:c9:72:1f:bb:dd:71:a4:60:5e:79:
                    b5:dc:e8:0c:ee:a8:77:f6:df:4a:57:62:dd:0d:4a:
                    61:80:0d:b7:d1:5a:f8:99:83:49:d2:73:5a:6d:1b:
                    06:28:a5:b6:07:64:a8:b9:db:2f:24:63:75:63:75:
                    57:02:5b:ef:1b:cf:15:66:0f:38:1d:13:61:d3:4a:
                    bd:ff:73:96:c0:21:4a:15:8c:df:18:81:79:22:cc:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:89:BB:59:37:80:17:85:66:3B:BB:1B:E1:F9:77:5F:02:59:1A:64
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:d3:e3:ff:c8:5c:be:54:97:e0:71:36:0d:1b:ff:77:5e:
         38:f9:ba:0d:fb:c9:5c:0a:13:b2:fb:30:53:28:6e:1a:ed:c5:
         17:9a:d6:2b:3e:7d:ec:00:c5:72:af:f3:34:ce:9b:91:c3:92:
         68:77:93:68:7b:97:75:58:e6:06:e9:81:17:55:f1:94:d1:55:
         68:e2:e4:92:9d:75:3d:48:d5:47:d3:a5:ff:2c:53:5c:fa:d6:
         de:b6:b2:fd:b4:4e:ba:5f:0c:22:60:cf:4e:eb:b7:36:61:6f:
         0d:c3:5c:ee:22:2c:6d:c4:18:96:ea:bb:ef:16:c5:d8:fc:6f:
         15:a4:3b:05:22:33:6a:e6:d1:bb:44:f2:07:24:44:11:89:6b:
         6c:b2:69:70:50:17:cb:a1:5f:d8:d4:d5:90:7b:f9:78:97:96:
         e4:f9:d7:6e:d0:be:d2:de:45:7e:87:94:e3:8e:87:dd:e3:f0:
         63:30:53:b4:14:93:f9:75:53:46:31:15:87:e7:da:b0:a9:c7:
         a3:6b:2d:0a:81:4c:50:47:a0:bc:c3:99:8d:c8:47:25:4d:88:
         02:42:a4:91:05:35:0b:34:e9:6e:43:6e:27:a6:ba:c4:45:1b:
         91:21:25:d2:27:27:8f:e7:a7:01:9e:18:94:25:10:33:e4:0e:
         f2:92:08:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SETNBgdxZEhi8Y+ufM41MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjYwNzI0MDMwMDI4WhcNMjYwNzI1MDMwMDI4WjAzMTEwLwYDVQQD
Eyg3Mzg5YmI1OTM3ODAxNzg1NjYzYmJiMWJlMWY5Nzc1ZjAyNTkxYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstHM1FWrmWZljH/F6vLyc9fBHoTD
01sza6VP4yKPh3k+ZjFcaQbErotBb+8H3CrPCyNjtJvuVrrfTk1ITRHseLbILt/P
RgvROOTjncfanwC3b/IzivL+4LGTBnwiuAtlFnsIE/32CcQ6KF1i9sT6wkBnavLm
CamV+ekVWttWlK+5tahwDQs/TT6KSMQg4APt64EazTEWIELYPKwlyEo0dBTElODt
/O9rK8lyH7vdcaRgXnm13OgM7qh39t9KV2LdDUphgA230Vr4mYNJ0nNabRsGKKW2
B2SoudsvJGN1Y3VXAlvvG88VZg84HRNh00q9/3OWwCFKFYzfGIF5IszhnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOJu1k3gBeFZju7G+H5d18CWRpkMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsvT4//I
XL5Ul+BxNg0b/3deOPm6DfvJXAoTsvswUyhuGu3FF5rWKz597ADFcq/zNM6bkcOS
aHeTaHuXdVjmBumBF1XxlNFVaOLkkp11PUjVR9Ol/yxTXPrW3ray/bROul8MImDP
Tuu3NmFvDcNc7iIsbcQYluq77xbF2PxvFaQ7BSIzaubRu0TyByREEYlrbLJpcFAX
y6Ff2NTVkHv5eJeW5PnXbtC+0t5FfoeU446H3ePwYzBTtBST+XVTRjEVh+fasKnH
o2stCoFMUEegvMOZjchHJU2IAkKkkQU1CzTpbkNuJ6a6xEUbkSEl0icnj+enAZ4Y
lCUQM+QO8pIIeg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:17 2026 by rpki-client