Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          9cTaKBYY3PWSHdNEhEtFRqPqIwFLJt+SedZuY9dGs+U=
Subject key identifier:   68:B6:9B:63:21:4F:FB:11:9E:22:04:82:82:23:E9:C5:1B:E5:AE:1A
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       019F9248F7443052225994078A5D86BC2DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          12DB
Signing time:             Fri 24 Jul 2026 04:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:22 +0000
Files and hashes:         1: 8XEzSk8CvDfLkSMnM2czmx_ulWg.roa (hash: 40hPE/BqPPQ7BBdeMCvpBaKM0QkTjFWRsFW8s0ufoAc=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: Pwlmrl4mIgUU9KwPlet5fPDKWcWcUXsZMVA3/aHFPMI=)
                          3: _Dc_bdIAZYdrEnNJICuszN__3rw.roa (hash: AzuIghqugc9hzzBm4Id+ZUX9fazI5NRXP0v6O6ZJMDc=)
                          4: kRwhJc9YP7PBT_VxjXqr6kKnSig.roa (hash: sdwxFkjlQepYKbUeVajivy+Ki1wWl6h3Im8+Blt6i98=)
                          5: t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa (hash: UydhtoR4+IQ54e3x5h5+w3ijtAQlUzFvVelsUAahRqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:f7:44:30:52:22:59:94:07:8a:5d:86:bc:2d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Jul 24 04:01:22 2026 GMT
            Not After : Jul 25 04:01:22 2026 GMT
        Subject: CN=68b69b63214ffb119e2204828223e9c51be5ae1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:bb:09:3e:57:96:6c:ab:2d:f4:69:6a:ed:
                    77:c9:c0:f2:79:22:0e:02:5a:5e:93:8c:23:32:54:
                    97:a5:8d:cb:a8:6f:d2:14:4a:32:c7:ad:36:48:44:
                    af:6c:50:8e:0f:05:dd:d3:59:19:e3:c9:7b:15:d0:
                    c5:04:5e:05:05:19:c1:ab:de:e4:42:93:f9:99:be:
                    e3:95:3c:fc:67:39:ee:9c:a0:86:3d:39:1f:db:12:
                    48:05:24:2a:d5:f5:cd:21:49:98:27:99:d4:5e:03:
                    c2:25:cc:00:fe:1a:84:7a:0f:98:59:0e:d2:93:d4:
                    f3:90:41:6f:5d:3d:65:88:36:d7:89:3a:d6:d6:d9:
                    aa:3f:5d:f7:7c:14:98:49:35:ec:28:d1:05:76:33:
                    a5:6e:e5:38:23:dd:88:fc:28:a2:a5:6a:26:1f:c4:
                    5e:b5:aa:36:aa:06:39:ae:3f:e7:46:15:b5:9e:d6:
                    44:1f:24:ee:8a:0f:24:09:78:4c:b6:bb:c1:51:a5:
                    27:aa:49:14:68:f5:dc:f4:ae:69:56:9c:5d:05:3c:
                    b9:42:e3:e6:a1:14:9b:9b:aa:0f:5a:80:9b:4d:4b:
                    21:ee:1a:ac:a0:83:86:f2:1e:c9:c7:eb:81:79:cb:
                    bd:39:d3:89:46:e1:1c:58:4a:e3:22:81:49:be:5e:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B6:9B:63:21:4F:FB:11:9E:22:04:82:82:23:E9:C5:1B:E5:AE:1A
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:df:e9:3b:68:17:88:b8:57:b9:0d:3f:08:08:fb:55:57:
         54:b9:cf:78:94:f4:68:05:4f:0b:7b:3c:63:7e:8d:82:ea:94:
         0c:59:09:89:42:7b:8e:b3:5f:22:81:23:b2:a4:55:09:0b:14:
         dc:4d:fd:49:95:ba:18:0c:a8:d5:7c:39:6b:84:e8:03:5a:cf:
         10:a1:c5:02:47:6f:28:c8:39:0e:ed:4c:d4:d6:e0:78:28:b0:
         89:63:70:34:e6:69:2b:97:67:76:a6:ff:e6:e1:f3:a9:ba:bc:
         74:14:a6:b5:43:90:ac:71:ea:74:0d:ee:63:35:9b:62:10:66:
         c8:6d:ef:51:22:c8:7f:9e:5f:17:24:de:27:47:6c:33:4c:fe:
         83:04:fb:7c:42:6e:6c:84:ce:92:94:b9:89:ac:04:e9:34:a2:
         83:89:18:cd:fc:c7:8a:61:88:8d:b7:04:be:8b:20:b2:fa:86:
         29:97:fc:66:21:67:e2:de:32:60:f9:38:07:ec:5c:bf:55:fc:
         6e:c1:1d:d3:f2:e3:49:3b:94:c0:82:9c:85:58:61:71:67:ca:
         06:05:35:57:4d:23:36:b5:5c:fc:39:9e:ff:8c:fd:63:8a:1f:
         5c:e0:55:37:76:66:5d:69:b8:32:45:72:0a:1b:a2:b2:85:5b:
         e4:77:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:36 2026 by rpki-client