Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          SFfkUjPzQqCQEaeuRE/EnZd7rv97upDHw/nVMaY2GE0=
Subject key identifier:   4E:2A:D9:ED:EA:07:25:DA:2B:84:B9:4E:9A:B0:E5:9A:8F:72:6B:1B
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       019F92ED102858B808BBA5F136E2005F7E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 07:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:37 +0000
Files and hashes:         1: 5cl4Z6asyPqRl4z3J4ySouDyEeE.roa (hash: PzM5l6ACiLTk3VlfamE9R6T8MML28IE4R3kgNFrFOdE=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: FA8Vf9vPFQ51SPtWKOdcR28wVbwY4p1t1xdnkGbJ40s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:10:28:58:b8:08:bb:a5:f1:36:e2:00:5f:7e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Jul 24 07:00:37 2026 GMT
            Not After : Jul 25 07:00:37 2026 GMT
        Subject: CN=4e2ad9edea0725da2b84b94e9ab0e59a8f726b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:ed:b3:50:7d:b6:43:c4:dd:1d:a2:b4:aa:
                    6a:6e:18:f4:16:62:84:59:32:d5:0d:3b:06:e4:87:
                    98:42:6c:7b:52:94:03:1b:59:b9:e6:c9:50:25:f7:
                    3f:f0:f5:5d:83:2f:e9:96:5a:da:0b:38:43:f9:c3:
                    26:e4:3e:54:b9:35:0c:77:64:57:f0:8b:3e:8d:6d:
                    46:99:14:b5:9e:72:ea:66:b1:b4:dc:b8:a2:f7:da:
                    d0:5e:5c:18:63:9c:e8:b1:30:cc:5e:dd:71:0a:96:
                    6a:c3:f1:93:cf:e3:33:ae:c6:cd:71:3e:83:ff:9c:
                    ac:95:3b:3b:e6:68:1f:f9:60:f0:39:1c:6b:73:25:
                    60:ce:d2:63:da:85:d8:ce:8e:c0:0e:bc:c2:f2:fb:
                    03:96:b5:e9:d7:6d:a2:b5:e9:a7:d8:25:91:54:b8:
                    6c:ca:5d:52:f3:71:90:92:ed:5d:3d:2e:fd:a7:70:
                    59:fb:c2:f5:bc:ba:2d:40:26:ba:08:e6:5b:fc:40:
                    9b:5f:3c:9d:b2:b9:7b:3e:c6:be:a3:6c:2a:08:5c:
                    34:3e:34:9b:21:86:aa:fa:61:7f:cf:0a:d7:a7:23:
                    3d:b0:9a:2c:cb:9c:79:2c:16:33:7a:b2:ac:53:7d:
                    eb:60:66:c4:61:2f:bf:7b:87:08:86:d1:d8:99:18:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:D9:ED:EA:07:25:DA:2B:84:B9:4E:9A:B0:E5:9A:8F:72:6B:1B
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:63:e9:8a:8f:01:11:38:3e:36:2f:c0:f0:95:86:60:10:a6:
         03:a4:01:8d:ad:3b:5a:db:6c:7a:47:f2:0a:3c:af:9a:c9:5e:
         eb:4c:1a:58:3d:69:05:aa:9a:0a:58:fb:97:d8:75:e5:94:07:
         bb:e8:79:a6:7c:78:95:d9:5c:b7:c7:5f:74:26:14:09:c7:0e:
         9c:64:74:99:08:82:ba:de:dd:ef:5d:18:5e:0d:48:dd:1b:27:
         70:a3:57:e9:63:dd:b9:a3:1a:96:e0:05:09:f7:b9:5d:42:5b:
         0a:74:5b:27:c7:b2:d3:76:56:69:ab:f8:4c:4d:f8:93:8e:d9:
         ff:a8:8a:bc:ab:6e:af:b5:bd:64:d1:9e:55:e4:39:10:c9:2d:
         11:3b:21:55:e6:bf:40:47:5a:24:8f:fc:d4:95:e2:0d:6f:0a:
         6b:1d:36:2d:9c:2a:ad:d5:cf:eb:00:de:52:cc:7d:25:cd:66:
         cf:de:49:98:6e:33:4d:22:fe:f9:2b:6f:c4:1b:61:73:b1:13:
         9c:07:f6:f9:22:ee:f8:7c:ec:f8:97:d2:76:6a:f5:86:20:46:
         0f:8f:3f:86:1f:96:28:4b:ad:77:41:be:27:bd:ab:a2:45:35:
         6f:f0:d9:5c:be:c0:f7:84:8a:17:05:11:ae:a2:d5:f9:6f:ed:
         44:cf:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:58 2026 by rpki-client