Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File:                     wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier:          LglcwKLCEVWqf+SM8kDOz6ESYM4QUMoKMP/2HsOaTUo=
Subject key identifier:   9B:05:51:32:0E:59:FD:78:DD:DC:46:B9:4E:9E:D9:C0:6B:AC:18:53
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer:       /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial:       019F91A3C8257E99E25C7D8F7193D5B3C478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number:          19D6
Signing time:             Fri 24 Jul 2026 01:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:57 +0000
Files and hashes:         1: VIJwQfnhHs3GHlmC403kclYI19k.roa (hash: pBGpIGY8oZecekT32agQOuUVvcZzYj8n135ZMBKxfjM=)
                          2: v0t-x1ezAOQzRGxbJKUbHeC0HN4.roa (hash: NklbdNXJrdH3kXOcwc9Kb/YETkdY+vXKTqyupumOkFo=)
                          3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: z2VYWVdyO4IHN8YsDsl0O+XafJr0ZtdjrQLm2/650VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:c8:25:7e:99:e2:5c:7d:8f:71:93:d5:b3:c4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
        Validity
            Not Before: Jul 24 01:00:57 2026 GMT
            Not After : Jul 25 01:00:57 2026 GMT
        Subject: CN=9b0551320e59fd78dddc46b94e9ed9c06bac1853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:d3:10:fc:38:95:09:e0:30:23:6d:c2:f5:
                    8d:40:21:ef:b3:55:17:7c:35:68:12:7d:89:1d:0f:
                    de:06:de:b9:17:57:6c:26:6a:fa:f8:ee:eb:cb:d6:
                    63:d3:1a:51:f6:e0:e2:3e:0c:5c:b5:54:01:37:23:
                    e3:05:e5:8b:80:e6:06:85:64:61:7a:55:19:49:e0:
                    ed:08:eb:11:2b:95:f7:a0:01:4b:e0:af:bf:45:e8:
                    67:76:93:27:27:e8:c9:3c:4b:87:f8:c5:68:b3:05:
                    73:5a:30:83:0b:38:ca:09:13:0f:fd:d0:ec:b8:68:
                    e6:dc:6d:6c:1d:b9:84:72:91:e2:3e:e1:2f:4c:ec:
                    17:9b:1b:70:49:0a:1b:34:31:a3:6c:12:29:b8:98:
                    49:c7:49:ed:e0:76:e6:3f:73:47:41:59:69:d7:c3:
                    33:96:4f:36:ce:ac:09:eb:23:9c:cb:85:3e:54:8a:
                    7d:0c:92:a0:78:bd:cb:cf:bf:dd:10:84:3d:fd:47:
                    59:b8:6e:67:9a:34:4a:5a:35:5d:ca:44:46:dd:d9:
                    2b:b3:e6:ec:8d:ba:85:99:d8:31:c7:fe:b9:41:b3:
                    b1:d2:3f:c5:9c:85:e8:62:06:93:02:75:c7:25:d4:
                    fc:93:ab:a1:cb:34:ef:d2:2b:67:e0:ff:1b:88:42:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:05:51:32:0E:59:FD:78:DD:DC:46:B9:4E:9E:D9:C0:6B:AC:18:53
            X509v3 Authority Key Identifier:
                keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:08:a3:7e:ee:4f:80:9b:42:4b:cb:bd:6b:a9:4e:ac:15:01:
         5f:61:20:71:31:83:f6:01:2e:e7:02:3e:0a:38:e2:1f:74:aa:
         f5:23:da:3a:a2:1f:ca:4b:a2:07:01:d4:d6:c2:9c:21:22:45:
         09:8a:9a:fa:e9:97:d9:bc:bd:c5:83:0e:bf:5f:55:3f:b9:e8:
         3d:79:01:d5:62:26:33:a5:f2:1a:81:fb:f4:25:d2:65:cc:c5:
         7f:5d:80:18:bd:8e:54:46:31:3a:50:c0:7c:22:3a:ed:44:e0:
         97:86:97:8c:ab:7b:b6:3c:1d:15:c4:76:ad:60:88:94:82:47:
         51:68:52:20:8b:fe:b1:29:27:ac:7e:5c:91:c4:9e:7d:6d:39:
         c3:1b:9b:75:3d:e4:02:6c:f4:3f:9f:81:14:c1:3f:3c:e7:e6:
         f2:48:cb:af:32:44:8f:f8:02:d5:83:e7:8b:a0:ee:f1:f3:be:
         d8:96:1c:94:0b:73:3d:53:b0:e7:ee:5d:96:02:9d:4c:13:36:
         a9:80:9b:15:2b:59:ff:17:ad:36:b9:43:50:b1:36:b1:94:92:
         7d:94:39:15:a8:d4:45:86:e0:0c:f4:30:32:a5:65:90:ef:f0:
         14:52:3d:39:a4:05:d4:7f:96:e2:6b:87:11:72:37:a5:fd:24:
         3f:89:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:46 2026 by rpki-client