Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          VAKCDhFYKO4xVmXvXzZ4Bxz9mhisvhI59aRtmIfv4ZI=
Subject key identifier:   D2:67:C1:F0:C3:E2:44:F5:73:C1:37:A1:6D:3F:31:17:2E:AB:87:F3
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       019F93926A8F6E12811CAF6A0BE82A985226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 10:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:13 +0000
Files and hashes:         1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: Cxx4Y8tPtTjPKIQVyWdCu5/ZWjYSM+7wzjtbGVYAuCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:6a:8f:6e:12:81:1c:af:6a:0b:e8:2a:98:52:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Jul 24 10:01:13 2026 GMT
            Not After : Jul 25 10:01:13 2026 GMT
        Subject: CN=d267c1f0c3e244f573c137a16d3f31172eab87f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:b7:c9:30:72:54:f1:7e:97:58:71:f4:08:
                    e6:83:35:f8:63:7a:ac:ed:76:48:c0:d9:64:15:fb:
                    d6:b4:62:93:0c:63:1c:19:42:eb:c1:04:0f:b2:64:
                    a5:54:6f:27:6c:68:38:e5:23:1a:42:ef:6d:a6:b4:
                    f5:8f:41:4c:4f:ef:97:d3:02:a5:2e:bf:c3:00:05:
                    e4:eb:2f:ec:c5:da:af:5d:50:1a:ef:a7:66:eb:7c:
                    16:ce:69:b5:2d:9e:81:92:9f:b1:94:6c:ae:2d:67:
                    53:0e:f8:e2:15:a5:79:2e:db:97:99:52:c5:80:6c:
                    5c:9e:65:6b:31:84:fa:39:88:b3:f5:46:6a:70:d1:
                    0e:fd:4d:eb:f0:bc:e9:2a:a6:b2:9f:12:d7:66:09:
                    dc:0c:0b:cb:dc:d9:9e:ca:1b:8a:09:0c:23:2f:64:
                    31:1d:ff:17:61:ec:ee:b6:e5:ad:9c:19:5a:3a:2b:
                    20:07:5a:a2:9f:83:0b:b2:f9:36:60:d6:1e:2b:57:
                    75:7f:85:2c:c9:8d:74:4a:53:ea:e6:e1:1e:14:c5:
                    52:bb:d0:6b:7c:d1:83:68:5b:89:aa:ee:72:c6:59:
                    ef:78:74:ec:f3:51:fe:cc:df:af:fc:23:49:b4:01:
                    cc:30:3c:60:fa:f3:7a:06:b9:ec:c6:d2:78:c6:e9:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:C1:F0:C3:E2:44:F5:73:C1:37:A1:6D:3F:31:17:2E:AB:87:F3
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:37:df:d0:d3:ba:07:01:8e:19:87:33:d5:6e:98:ef:a0:
         5c:06:e2:56:ce:43:c2:3f:80:42:f4:6b:41:f8:e0:7c:72:d4:
         c5:93:c1:24:9b:7e:0b:20:77:21:03:9f:b3:dd:4b:07:23:23:
         1f:98:c2:0c:5c:9d:48:ce:84:10:39:8c:53:aa:d2:09:cf:f7:
         3e:65:75:02:06:04:51:91:d3:ec:f7:e8:a7:fb:ac:b8:c5:f4:
         d5:32:8f:dc:bc:0a:93:d7:72:09:c1:e0:16:c6:2d:d1:23:40:
         48:c9:f6:7b:59:43:35:ec:d2:53:9b:bd:6e:7f:e7:18:b8:0a:
         57:d1:f8:0f:0f:a0:20:03:27:fb:87:61:4d:07:ad:a8:2a:9d:
         63:91:74:5d:b1:12:08:2b:a6:c3:52:3e:84:6e:b0:83:7c:45:
         18:90:f1:af:72:68:6a:92:29:e5:af:d8:56:f2:b9:34:78:ba:
         73:20:47:82:bb:96:c0:07:9d:83:d1:9f:7a:71:23:00:f9:d9:
         a3:ca:4d:d3:8a:97:6f:69:3a:9b:4b:dd:95:59:30:44:78:cb:
         cb:65:cf:90:31:39:b7:e2:6c:76:eb:70:ec:52:a3:62:e2:ca:
         f0:1a:f5:8f:6e:99:66:7c:54:f0:7a:10:b9:c6:ec:c4:e7:39:
         cf:32:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:33 2026 by rpki-client