Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File:                     1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier:          IIfZV3oE9+oAN/+wRzujtfgCJdkidI5gS5PbWyQ4xZo=
Subject key identifier:   49:5E:28:3B:A9:FE:82:59:CB:15:BF:9A:F3:F4:25:BB:CC:C1:CD:25
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer:       /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial:       019F90FE55314FEDB86AAA2926C056BC92BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number:          0904
Signing time:             Thu 23 Jul 2026 22:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:14 +0000
Files and hashes:         1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: +fOjGIe/oCO49GXM37uqqCVBofF8UiZvwOVoKIjyEQ8=)
                          2: U9tmgs6mFCWkoWieHrxDrEXnwL0.roa (hash: x4lfPhn0duWowl/P6x8Mok6jDaTFHCYfcJEYP4lecMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:55:31:4f:ed:b8:6a:aa:29:26:c0:56:bc:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
        Validity
            Not Before: Jul 23 22:00:14 2026 GMT
            Not After : Jul 24 22:00:14 2026 GMT
        Subject: CN=495e283ba9fe8259cb15bf9af3f425bbccc1cd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:f4:ae:2c:63:38:99:1c:73:73:dc:97:eb:
                    f1:73:15:19:7f:57:e7:53:b3:73:c0:34:4b:bc:df:
                    72:d4:84:60:4a:96:1c:9d:ce:ed:0c:8f:81:1a:ae:
                    ba:dc:f0:e4:97:88:f1:87:a0:cf:62:e7:ce:f1:5e:
                    3b:ee:b6:1c:2d:21:43:a7:0f:1d:1f:72:26:62:ca:
                    9d:a5:82:f8:c1:fd:bb:4c:42:3a:ce:6a:8d:b3:d4:
                    73:66:ad:11:5d:eb:a6:ef:06:b5:21:04:ed:d7:1d:
                    2a:40:19:ae:b2:3d:a4:a1:ec:d8:8e:38:f0:0f:f8:
                    fc:11:a8:c9:a4:c8:dc:20:18:1e:5f:7e:4d:10:d8:
                    8f:85:89:37:ba:4c:a8:ef:58:93:70:24:81:b0:51:
                    f4:a2:2c:0d:30:c5:91:a7:39:15:2a:47:98:b9:33:
                    9d:1a:ef:07:c4:0e:0a:8e:f1:06:c8:7a:97:d4:90:
                    56:72:5b:53:68:f5:f9:02:cc:0b:c4:43:7e:79:07:
                    9e:fb:89:68:22:22:8e:31:65:61:cf:74:98:2e:16:
                    39:8b:d1:c1:5f:d2:21:c5:2c:9a:03:77:d5:15:f2:
                    9d:a5:77:7c:1b:7e:ea:e0:dc:ef:5a:b4:3f:82:83:
                    28:74:7e:15:0f:e9:14:c0:10:78:35:b4:dd:4f:c9:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:28:3B:A9:FE:82:59:CB:15:BF:9A:F3:F4:25:BB:CC:C1:CD:25
            X509v3 Authority Key Identifier:
                keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e6:1e:5f:89:e0:f0:28:87:e3:ab:a5:16:7f:51:2f:63:e6:
         04:7c:ff:ed:21:d3:7f:c1:c5:1d:92:e6:98:38:74:0e:80:10:
         44:3d:a9:30:21:bc:a1:6d:83:4f:01:b6:c4:1b:5c:06:ac:a5:
         0b:a6:0b:bd:59:1a:0b:87:f7:02:f6:ea:45:f2:c5:5f:a9:72:
         08:f8:f2:c1:e0:79:21:9c:7f:ea:d8:ef:f2:b0:9b:85:b2:b1:
         26:8c:89:e2:67:10:15:f5:f5:cd:b9:40:0c:e4:9f:19:21:d9:
         29:58:ef:f8:06:44:b0:bd:7e:1a:0e:0f:90:5d:41:75:43:80:
         3b:80:32:62:b1:0c:26:b3:36:90:d7:41:1b:73:4f:0e:5c:b8:
         dc:c0:29:b8:85:c8:32:2b:a1:07:e0:7e:0b:c5:f5:af:56:db:
         ed:15:c6:0e:5e:35:f2:ab:85:42:c4:2d:f6:96:da:2b:15:bf:
         19:07:04:40:e3:7f:45:d8:af:b1:17:64:a6:e6:96:d7:4b:5c:
         da:3f:40:f3:df:72:8d:2b:98:22:bf:c5:48:6d:72:74:68:05:
         38:44:10:31:79:84:a9:84:61:f7:4b:5e:41:41:dd:df:cd:0c:
         58:40:f2:1b:f2:2e:16:60:c4:16:71:77:76:6c:e7:81:80:93:
         a8:18:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:30 2026 by rpki-client