Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
File:                     WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft (raw, json)
Hash identifier:          yT1j04HNIuS13KA5bzUJN3z2ORuO/KlqjxN9QPSzfGQ=
Subject key identifier:   BF:15:3E:5C:07:41:43:00:08:B8:1C:FA:B3:64:33:EE:C8:9E:4C:D9
Authority key identifier: 5A:F5:47:B7:70:6F:CD:B1:8A:F5:A2:EF:C7:87:41:6D:B0:8A:1E:BD
Certificate issuer:       /CN=5af547b7706fcdb18af5a2efc787416db08a1ebd
Certificate serial:       019F939207C4336C7C55B2F6781E89E07209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 10:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:48 +0000
Files and hashes:         1: WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl (hash: 89yil90UzQPJlo98CQHCKxO72o7m5n4PPYn4d1fuL3w=)
                          2: jq5WfSeP2pDPT2hiFBZeXrNo_gA.roa (hash: 8UIQ/f3+ilI0mGQboCjy2Gm2Iv4nHmZ9Nb2yvR4gYaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:07:c4:33:6c:7c:55:b2:f6:78:1e:89:e0:72:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af547b7706fcdb18af5a2efc787416db08a1ebd
        Validity
            Not Before: Jul 24 10:00:48 2026 GMT
            Not After : Jul 25 10:00:48 2026 GMT
        Subject: CN=bf153e5c0741430008b81cfab36433eec89e4cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:2f:d4:64:79:c9:fd:e0:76:91:7d:bd:08:
                    5e:bf:46:a6:39:a5:ac:78:7c:24:02:f4:fd:85:c8:
                    55:ef:50:ba:f8:ff:e1:df:07:7c:86:1b:76:31:e0:
                    d8:bd:7e:b3:8e:22:fc:1f:04:de:2b:72:ac:90:a1:
                    30:5b:16:f4:25:3a:4c:5b:53:37:2e:04:a9:b9:82:
                    94:98:68:29:5b:fd:27:e3:8e:89:02:8d:57:4e:46:
                    ba:9d:4d:0e:10:1a:9d:53:b9:6f:8e:f7:45:8c:87:
                    6f:ee:5b:ab:17:09:d5:ea:c6:79:2d:23:b1:d1:9d:
                    64:b3:5d:3c:73:ab:c7:22:eb:40:46:52:e9:da:81:
                    71:32:6d:05:4f:16:0e:6a:af:4d:b0:c1:7b:62:c9:
                    d9:55:e6:9b:ef:fa:7a:5d:8c:20:45:1f:b7:2d:59:
                    5b:9b:ee:8f:40:8e:ae:c0:e7:05:5e:6b:b2:c1:5a:
                    e0:64:7f:21:c8:b6:6e:7b:87:67:56:30:0e:69:15:
                    f1:a1:99:53:a0:9b:d4:02:d5:2d:95:f3:c0:71:4d:
                    aa:f2:41:b4:17:54:ba:56:c4:9a:e9:f2:5c:34:f7:
                    d4:0b:f9:ee:fb:cf:c7:80:eb:c8:0e:0a:7e:29:5e:
                    60:5c:7a:f1:53:08:88:b0:bb:56:8f:9a:26:a0:86:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:15:3E:5C:07:41:43:00:08:B8:1C:FA:B3:64:33:EE:C8:9E:4C:D9
            X509v3 Authority Key Identifier:
                keyid:5A:F5:47:B7:70:6F:CD:B1:8A:F5:A2:EF:C7:87:41:6D:B0:8A:1E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c1:bb:d0:5d:e8:f4:2e:7b:07:b0:cf:ad:73:f3:f2:a6:d3:
         9c:f4:a1:fe:64:88:e5:19:1d:d2:ac:4b:79:93:22:3a:d6:ad:
         27:6e:d8:4b:0f:39:f7:37:47:85:fb:24:2a:ea:e2:a2:7c:1c:
         60:a7:67:3e:d1:f5:62:30:28:b4:a0:4d:30:12:e5:41:35:c6:
         9f:25:35:e7:60:00:3d:5e:75:7a:f7:66:99:15:0e:e2:2c:35:
         d1:4e:b6:f1:61:95:b6:06:e0:09:ed:ee:c7:d5:34:74:d2:d9:
         42:b1:a3:62:ae:05:9c:b7:e6:d5:0c:30:da:73:6a:e5:5b:9a:
         08:81:23:85:39:47:9e:f2:40:32:25:5e:9d:c2:08:1a:aa:66:
         34:3b:9e:86:a3:a4:42:9d:b1:af:f5:07:5a:7b:9b:24:37:80:
         bf:4f:cb:02:38:c5:f7:8a:4b:0d:11:8f:5a:f5:2b:fc:19:54:
         15:21:8a:94:38:c0:ab:1b:5f:6b:b7:32:19:18:64:74:6e:1a:
         8a:d3:92:2c:3b:0a:94:62:c8:7b:f9:f1:87:90:c7:36:93:63:
         4b:0a:9e:31:7e:08:25:4c:a7:e3:da:c0:a3:66:23:d4:a4:ec:
         f4:80:a1:c5:00:df:e9:30:dc:8c:60:64:c7:50:ba:d7:89:a5:
         0b:24:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:33 2026 by rpki-client