Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
File:                     WBTburY-kRfQsCy6tWY55v0NQNk.mft (raw, json)
Hash identifier:          KHrftY9SPpeo2oIF8T/QRhOH5rjwEU27kqz1botjWTs=
Subject key identifier:   AC:4A:32:3B:50:22:B9:36:B2:68:4C:A0:BC:AF:1F:49:14:86:53:00
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Certificate issuer:       /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial:       019F91DAEA5E16CCB1702A54FF568B90921E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 02:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:10 +0000
Files and hashes:         1: 042xhE8LSLyQ27uGyk1_G--PcdE.roa (hash: mYCIynBAj9T1Ad1P08+QL+CKh1MQS0MEgpptbSPZq+o=)
                          2: WBTburY-kRfQsCy6tWY55v0NQNk.crl (hash: U48TNaFW9xGSGs6y71t8uyUw6JM0x4H1Umn791yz7ro=)
                          3: cd571qC5Gh-s6-ij9uvMCJgUNAw.roa (hash: WiOcaJIwRlhY8Y8YY2qhOSR4obgPpcg3+kkGw7FgGjM=)
                          4: kfPqHKxGz6wYPw64blmcJam1kr4.roa (hash: cy7z9oIdDHZSV98B3pHrJ6kEzhCC/yM5qdI8yfk1XNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:ea:5e:16:cc:b1:70:2a:54:ff:56:8b:90:92:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
        Validity
            Not Before: Jul 24 02:01:10 2026 GMT
            Not After : Jul 25 02:01:10 2026 GMT
        Subject: CN=ac4a323b5022b936b2684ca0bcaf1f4914865300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:c6:94:91:9d:1c:67:64:fc:c0:11:0c:6e:
                    7c:fc:ec:d9:48:8b:fd:15:66:f2:25:95:a3:66:f0:
                    0c:52:15:b2:ca:ee:af:bc:7a:24:74:fb:38:20:ef:
                    5a:a5:fd:f0:69:77:72:7e:51:9b:38:5a:27:7d:02:
                    61:b3:ca:08:96:4e:3b:c0:9b:ae:40:a4:7d:81:c6:
                    6e:c5:20:29:c9:75:fc:b1:a2:2f:97:1d:c3:38:6d:
                    54:55:4d:25:3c:1d:6d:6e:8c:2f:ad:68:78:9f:cd:
                    56:75:c5:42:19:45:95:74:ad:d7:29:21:87:a8:59:
                    fc:f1:5b:eb:be:69:a0:18:ca:da:57:5a:6e:50:0f:
                    b8:b3:11:0d:11:d6:68:e5:27:67:47:b5:a8:b7:5d:
                    e9:aa:9e:bd:3f:41:f6:df:71:56:4e:3f:69:3d:29:
                    ed:68:0f:16:17:53:07:4a:bd:bb:3e:99:0e:62:d6:
                    09:91:7a:06:22:ec:0c:ee:a8:a7:f6:10:85:c4:43:
                    4a:ee:79:89:28:d5:5f:55:f0:1a:f0:70:0c:29:ec:
                    f3:1b:e2:b1:e4:50:21:21:b8:3c:a9:bd:ba:92:a3:
                    5b:9a:54:aa:72:c1:7b:18:e3:de:74:a1:43:3c:70:
                    28:53:32:1b:8f:98:4a:45:09:92:4e:d6:98:89:70:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:32:3B:50:22:B9:36:B2:68:4C:A0:BC:AF:1F:49:14:86:53:00
            X509v3 Authority Key Identifier:
                keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f7:e4:7c:29:b0:6b:de:22:81:cd:10:ac:12:e4:29:b8:b3:
         98:8c:59:7b:e8:11:8d:fa:2d:ab:93:3d:8e:43:9d:73:e3:83:
         a8:0d:32:70:cc:4d:f2:44:6a:39:25:a7:22:8b:0e:a6:15:24:
         28:8a:1f:1e:00:53:04:f8:06:d8:48:d1:b4:bc:b6:42:ce:5b:
         1c:d4:53:00:08:d4:9f:b1:9a:7e:28:3f:97:49:15:d3:f2:6f:
         17:c7:3b:21:54:27:ca:4b:78:09:69:4a:d6:36:0b:c5:eb:f0:
         bc:ac:29:c8:a5:5c:fb:af:56:ad:11:99:93:06:a4:fa:17:9f:
         bc:2a:36:9c:f3:f6:a1:bf:c9:d6:49:fb:b2:61:7f:95:43:91:
         69:57:70:59:77:b6:ce:c5:b0:3d:b3:da:2c:bf:14:1a:2a:5f:
         eb:f3:af:15:07:88:f7:73:32:d3:e0:c5:3a:86:b9:94:ab:85:
         aa:50:fe:4e:c7:4c:3b:04:68:a7:bb:ca:fc:a4:1c:39:40:f8:
         71:77:57:d0:42:1e:c6:50:7a:9e:2d:8a:23:cd:3a:3a:58:90:
         0b:64:36:b4:27:c1:57:5b:78:d5:ee:17:db:91:ad:bb:a0:c3:
         8b:c0:e8:96:81:75:eb:ee:a8:0c:d1:c3:82:6c:e5:61:d2:d3:
         4e:bd:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:46 2026 by rpki-client