Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File:                     WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier:          wHc1S0CtHvdls5tDhq6VGf4uWl9uq2ekkXKVcrisbCI=
Subject key identifier:   40:7F:D8:93:FA:93:37:35:7E:9A:FB:1C:88:14:46:BA:B3:D9:31:D8
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer:       /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial:       019F92B6422340654BC01E5F4AA5C22FA742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number:          0C8B
Signing time:             Fri 24 Jul 2026 06:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:45 +0000
Files and hashes:         1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=)
                          2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: HQlgIYwrkQjDHUtl2n9OwI5CmXVkTkKNimu5KEuBHeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:42:23:40:65:4b:c0:1e:5f:4a:a5:c2:2f:a7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
        Validity
            Not Before: Jul 24 06:00:45 2026 GMT
            Not After : Jul 25 06:00:45 2026 GMT
        Subject: CN=407fd893fa9337357e9afb1c881446bab3d931d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:e8:a7:17:0a:1e:92:59:5b:12:a8:ec:4c:
                    ac:52:96:33:ba:dc:35:dd:26:e6:2e:d5:50:d4:ab:
                    42:41:f7:ec:92:47:fa:a4:bf:19:53:9a:a6:f7:09:
                    04:96:d5:31:80:32:79:7c:d6:98:46:f5:f4:98:d7:
                    2c:7d:bd:3c:ad:3c:63:9c:64:a1:26:b1:f1:20:10:
                    36:c5:ab:33:5d:21:4c:20:c8:bc:24:cc:69:38:1f:
                    c2:ee:d6:26:c2:b8:19:50:fe:58:5e:53:82:61:4f:
                    b5:b4:bc:6c:8c:5f:d5:cf:94:3b:22:15:9d:61:e8:
                    e8:79:11:96:78:07:cb:66:fb:1d:20:77:2e:07:b6:
                    34:f8:32:8c:93:f7:59:92:46:7d:90:13:ce:98:9c:
                    8a:0f:5c:04:a0:43:16:40:dc:7a:35:e1:e9:a2:9c:
                    38:fb:bc:4a:5e:31:4b:3c:49:73:21:73:70:19:78:
                    e5:7d:9a:5b:45:1c:b6:78:2c:ec:97:92:2b:33:e3:
                    32:e9:b5:80:ea:a7:ab:97:43:ea:40:fc:92:2f:f8:
                    64:71:00:ce:ab:45:15:bd:40:b2:86:76:ac:e4:31:
                    95:f4:27:b4:57:c9:7d:41:04:4d:23:00:7a:45:46:
                    96:79:60:ce:cb:ad:b0:6b:74:31:77:cb:7f:10:17:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:D8:93:FA:93:37:35:7E:9A:FB:1C:88:14:46:BA:B3:D9:31:D8
            X509v3 Authority Key Identifier:
                keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:eb:75:c1:b2:5e:f0:4c:c7:c2:82:f0:6d:76:1c:42:e2:
         b1:60:8b:69:69:40:57:72:15:0a:83:98:14:2e:ab:13:68:dd:
         fb:52:49:a5:54:7b:18:b8:70:71:e4:60:d4:8b:71:8f:e0:ff:
         f0:8a:75:e5:3e:fb:39:40:08:30:04:94:e6:48:37:96:0d:b6:
         c1:7c:84:f2:55:0a:0a:95:ba:10:e8:99:ae:79:1e:6e:9c:25:
         70:88:7f:37:39:91:b6:ba:ce:14:0f:b5:f4:25:9e:8f:7a:01:
         91:bc:fa:c4:e2:ca:39:83:69:93:45:7a:e4:c8:a4:3a:d6:ea:
         66:70:58:e2:87:3f:01:81:05:4a:55:08:40:e4:db:41:8c:10:
         57:ea:9c:df:7e:a2:de:25:28:90:f4:35:3e:78:cb:8d:37:8b:
         3f:11:aa:a9:ae:ef:da:b5:68:b8:f1:51:70:33:d8:21:cb:60:
         be:17:62:78:06:cf:00:12:a1:ae:66:a3:3a:3e:d2:1e:c3:14:
         1c:7c:11:9d:ca:61:40:f9:11:82:56:8a:b7:de:cd:d4:e3:58:
         52:0a:19:1f:39:38:e9:b9:97:ba:52:3e:b3:65:5a:84:c7:f4:
         33:7f:a3:6e:49:55:a8:f9:d6:76:7a:76:1d:6b:bf:e1:54:ff:
         32:6d:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:54 2026 by rpki-client