Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
File:                     wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json)
Hash identifier:          MHKkEh9gpz95/F6Msb2qwvdAciOPQz43LQo5WRQ9NNE=
Subject key identifier:   64:2C:26:7D:13:D5:87:AA:85:1E:63:3E:4A:70:10:31:E9:91:C5:65
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Certificate issuer:       /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial:       019F91A3DBC75111EAFC482F1D296E719F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:02 +0000
Files and hashes:         1: Cgd5Jfm0z8iU211-uSATka8FEqw.roa (hash: 6iFZepo1g13JI2QksLW8HVf91tLNVUbHxGnbKXKYWMo=)
                          2: Eijib8iYPDeplyoBLGAmPZORFLE.roa (hash: //KC1lCHcJET8STKi3XrrsGCkj88N/0LPLS69WfA2CM=)
                          3: lmh0HdtE8EG1HtIEfqG-CpL5lWE.roa (hash: iQDEvRLmeD/noBsclLg6BEdBH6bYdpCJwODCMRFPWi8=)
                          4: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: +4zz75F1i/PT1PkyiHTskGr6wozmeVToWswBzE+gsKQ=)
                          5: yjfBxV_rdwxlbtWbC0f6CXmYidM.roa (hash: cEHh1mv/vVXkxP03jyzCPQKZKyj1EccWurODavR3WD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:db:c7:51:11:ea:fc:48:2f:1d:29:6e:71:9f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: Jul 24 01:01:02 2026 GMT
            Not After : Jul 25 01:01:02 2026 GMT
        Subject: CN=642c267d13d587aa851e633e4a701031e991c565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:46:5e:80:9e:f4:8f:96:fb:1e:dc:eb:6f:
                    e3:bf:c5:f6:d4:6b:e0:95:46:e8:4b:11:aa:e0:7c:
                    be:46:a6:22:6a:61:18:97:aa:c3:71:c5:c5:31:d4:
                    37:e9:a7:78:83:9f:fe:d2:55:0e:4e:19:55:21:8c:
                    9b:06:07:f6:3b:a5:11:9c:ac:05:4a:34:31:12:81:
                    00:bc:fb:cc:2a:a8:fb:af:52:e0:ca:58:f7:62:ea:
                    7d:49:9f:48:55:ee:88:a2:31:ce:f4:da:4a:c1:8a:
                    c8:d9:f3:b7:8c:ed:e6:2f:89:fe:da:6b:e8:6b:b9:
                    41:68:8a:14:84:48:71:f3:37:7b:35:24:88:a8:e0:
                    e5:a6:7f:cc:92:c6:cc:3b:6c:f5:85:ed:c8:ea:58:
                    47:1a:08:a6:9c:14:58:92:aa:f2:70:ae:c4:5a:4d:
                    08:65:9c:d9:df:84:bf:cf:d9:04:26:3f:e0:5e:d7:
                    56:f6:d8:f0:ec:37:0c:06:27:30:01:4b:00:2e:80:
                    49:88:35:5f:2f:a4:10:62:92:f1:2b:57:5a:71:d7:
                    95:9e:a1:a5:28:86:80:e9:7e:91:b1:5e:3f:e6:00:
                    7a:82:ed:66:70:21:56:23:68:6c:86:b7:14:7f:fe:
                    c3:9f:6b:3f:7a:af:fc:78:c8:50:50:a1:dd:fc:b1:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2C:26:7D:13:D5:87:AA:85:1E:63:3E:4A:70:10:31:E9:91:C5:65
            X509v3 Authority Key Identifier:
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:08:6e:10:ca:6a:da:f4:4c:26:2c:96:67:45:1d:24:8b:90:
         39:eb:60:79:41:e5:4d:1a:23:e5:46:ab:e4:5f:48:22:25:40:
         e2:d2:7f:4a:bc:06:21:3b:bd:b1:22:20:c2:50:a7:f2:b5:bc:
         8c:00:2b:44:bb:78:5d:4b:82:3f:03:15:21:0d:c8:ec:95:83:
         2d:f3:8b:1c:46:58:36:df:17:a9:8b:5b:3f:bc:2f:a2:34:60:
         b3:4a:72:0e:09:0f:ea:1f:55:c2:e9:4b:9c:19:f0:9a:f7:37:
         80:fa:03:6d:be:b0:62:85:f6:46:bc:fa:4f:9e:b7:4f:f9:25:
         2c:fe:2b:10:5d:02:cd:68:ca:d1:77:a0:30:7a:38:6c:d8:a3:
         90:46:f2:e5:cf:d9:20:b6:7d:a6:c2:52:73:35:11:29:b5:67:
         c4:94:d3:da:88:05:21:da:1f:05:e7:12:97:21:b0:f4:ff:c5:
         32:07:e3:aa:20:83:86:81:61:6a:73:b7:9a:27:df:13:23:3b:
         13:4f:9b:0e:a3:78:3a:b1:c5:49:b8:26:0c:b8:36:f6:04:ee:
         d9:ae:2d:52:59:ed:33:e1:75:d9:5b:9b:68:89:f7:5f:a2:97:
         49:65:c6:4f:b2:64:8d:7c:f8:70:ed:ee:e1:f9:f2:93:bc:57:
         10:a1:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:19 2026 by rpki-client