Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
File:                     pWGJNurjnydAQKDTMnz4gQLITG8.mft (raw, json)
Hash identifier:          GnM16zXEtQtOHDRQNlH/snrSu4eW3BIi1epq7mEnorM=
Subject key identifier:   CD:BE:94:C5:B9:06:43:41:56:C4:08:B0:3B:7C:CD:3D:8E:C7:92:D5
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Certificate issuer:       /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial:       019F93922F5CEAC17EFA5EF64CA15DC0399E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
Manifest number:          01DF
Signing time:             Fri 24 Jul 2026 10:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:58 +0000
Files and hashes:         1: pWGJNurjnydAQKDTMnz4gQLITG8.crl (hash: HYyDANMrDLV/6E4tIzbvgRudE6Ff0G7SpYRR1FohnX4=)
                          2: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (hash: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:2f:5c:ea:c1:7e:fa:5e:f6:4c:a1:5d:c0:39:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
        Validity
            Not Before: Jul 24 10:00:58 2026 GMT
            Not After : Jul 25 10:00:58 2026 GMT
        Subject: CN=cdbe94c5b906434156c408b03b7ccd3d8ec792d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:e7:9f:f7:9a:15:68:92:c8:c1:f5:67:45:
                    20:92:08:d6:76:a6:97:a7:be:05:fb:1e:7d:fe:01:
                    a8:b1:7f:0a:f0:cd:46:75:28:c3:3f:83:a6:18:c8:
                    1b:b9:d3:a9:4b:90:d4:86:36:0b:88:59:7b:81:27:
                    ce:68:e2:7f:7a:09:1a:49:78:f6:cc:97:12:0e:31:
                    b1:87:50:a2:47:3d:a2:5d:26:5c:23:1d:2d:ef:cd:
                    c8:10:28:77:fb:2b:d5:ce:b7:65:80:ad:2f:63:b4:
                    5e:42:db:ba:51:7a:fb:0e:c9:64:8d:49:c1:fa:13:
                    6a:8c:68:0e:57:5d:94:b6:7c:92:02:60:84:57:8e:
                    8d:83:43:35:76:50:ba:fe:7a:e9:f9:ec:75:42:70:
                    b3:b9:53:22:59:01:3e:8a:c9:0b:69:75:c1:b8:76:
                    3e:38:a6:54:f4:11:ff:47:3a:95:86:29:3d:2a:65:
                    f6:43:c6:b7:d0:ec:6f:f9:1b:5f:62:af:d5:88:af:
                    52:34:8a:08:5b:71:2c:69:8b:20:0b:7b:5a:d7:9a:
                    d4:32:89:d2:e4:44:9f:6f:2b:40:10:63:7e:c4:c0:
                    34:b0:94:20:24:49:5e:a0:27:c9:07:1a:46:2e:40:
                    ca:eb:93:0e:cb:91:d0:2e:f3:de:e3:d0:a5:05:e2:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BE:94:C5:B9:06:43:41:56:C4:08:B0:3B:7C:CD:3D:8E:C7:92:D5
            X509v3 Authority Key Identifier:
                keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:55:4f:8e:2a:83:eb:1d:e5:9c:e8:ea:39:af:c4:80:1e:52:
         21:58:7e:61:58:21:20:a7:3e:80:c1:7d:81:b5:50:04:cc:c1:
         cc:e1:59:da:96:06:68:e4:46:02:90:99:88:0e:24:32:10:6e:
         c5:8d:ce:67:91:6f:f0:0b:d9:53:35:c5:4c:06:f4:9b:1e:25:
         74:82:db:86:d1:ed:dc:58:f0:f0:d3:13:06:bd:e2:e5:a7:15:
         5e:4d:9a:55:72:36:d4:7e:e1:1f:84:e6:44:04:82:7a:d3:ea:
         26:80:c8:0b:27:95:f0:b4:9e:cf:14:e5:06:e3:63:b4:c4:0b:
         33:0b:0d:0f:00:ce:ce:80:82:f3:71:b9:6d:6a:b2:f3:6b:cf:
         a4:63:64:94:5d:0d:c8:f3:dc:b2:8f:40:1a:c5:7c:bd:89:fa:
         3e:84:c5:c2:e1:9e:ba:cd:7b:05:84:b4:81:ff:b1:e4:c6:6d:
         e3:74:8f:44:34:9f:f5:d6:26:cb:8d:e3:fb:97:1d:95:77:aa:
         58:0a:85:69:fb:6c:23:98:5c:78:c9:a2:72:69:c4:96:1b:f4:
         c7:33:de:94:3e:21:91:7b:98:12:52:99:9a:12:6d:fa:a4:28:
         9e:7c:d0:9a:1d:00:aa:45:c7:d7:2c:d2:fe:cc:29:94:df:36:
         2a:80:2c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tki9c6sF++l72TKFdwDmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjE4OTM2ZWFlMzlmMjc0MDQwYTBkMzMyN2NmODgxMDJj
ODRjNmYwHhcNMjYwNzI0MTAwMDU4WhcNMjYwNzI1MTAwMDU4WjAzMTEwLwYDVQQD
EyhjZGJlOTRjNWI5MDY0MzQxNTZjNDA4YjAzYjdjY2QzZDhlYzc5MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLrnn/eaFWiSyMH1Z0UgkgjWdqaX
p74F+x59/gGosX8K8M1GdSjDP4OmGMgbudOpS5DUhjYLiFl7gSfOaOJ/egkaSXj2
zJcSDjGxh1CiRz2iXSZcIx0t783IECh3+yvVzrdlgK0vY7ReQtu6UXr7DslkjUnB
+hNqjGgOV12UtnySAmCEV46Ng0M1dlC6/nrp+ex1QnCzuVMiWQE+iskLaXXBuHY+
OKZU9BH/RzqVhik9KmX2Q8a30Oxv+RtfYq/ViK9SNIoIW3EsaYsgC3ta15rUMonS
5ESfbytAEGN+xMA0sJQgJEleoCfJBxpGLkDK65MOy5HQLvPe49ClBeIHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2+lMW5BkNBVsQIsDt8zT2Ox5LVMB8GA1UdIwQY
MBaAFKVhiTbq458nQECg0zJ8+IECyExvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdHSk51cmpueWRBUUtEVE1uejRnUUxJVEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85YmVkMjYtMThmYi00ZWNmLWEyYTIt
ZTRhMzFlNzljOWNlLzEvcFdHSk51cmpueWRBUUtEVE1uejRnUUxJVEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85YmVkMjYtMThmYi00ZWNmLWEyYTItZTRhMzFlNzljOWNl
LzEvcFdHSk51cmpueWRBUUtEVE1uejRnUUxJVEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlVPjiqD
6x3lnOjqOa/EgB5SIVh+YVghIKc+gMF9gbVQBMzBzOFZ2pYGaORGApCZiA4kMhBu
xY3OZ5Fv8AvZUzXFTAb0mx4ldILbhtHt3Fjw8NMTBr3i5acVXk2aVXI21H7hH4Tm
RASCetPqJoDICyeV8LSezxTlBuNjtMQLMwsNDwDOzoCC83G5bWqy82vPpGNklF0N
yPPcso9AGsV8vYn6PoTFwuGeus17BYS0gf+x5MZt43SPRDSf9dYmy43j+5cdlXeq
WAqFaftsI5hceMmicmnElhv0xzPelD4hkXuYElKZmhJt+qQonnzQmh0AqkXH1yzS
/swplN82KoAszA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:40 2026 by rpki-client