Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          /1dEay2PMT+B+WSowQ0mV3RnU7z5jLrogJgc/ShD/VU=
Subject key identifier:   5F:7B:61:85:F3:C2:E7:93:D0:3B:1F:EF:8A:A6:6C:29:00:1F:B4:2B
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       019F93C8D5662B339222F01452EBBFE16552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          0570
Signing time:             Fri 24 Jul 2026 11:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:40 +0000
Files and hashes:         1: vXs00wABeOvYVd4PEbCkjMYfErk.roa (hash: S0XBmvPUfYyzedsDU+r8dBCYywLbP6svOqwi8N2av8g=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: VgIrXitAQVfxZD4BENzujK8ZygAHEnNwHJANHt/8XKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:d5:66:2b:33:92:22:f0:14:52:eb:bf:e1:65:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Jul 24 11:00:40 2026 GMT
            Not After : Jul 25 11:00:40 2026 GMT
        Subject: CN=5f7b6185f3c2e793d03b1fef8aa66c29001fb42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:07:97:4f:22:80:f7:53:99:a2:67:ed:17:
                    11:b5:6a:82:14:ee:66:76:80:a4:b1:04:9b:59:fc:
                    1c:f2:a0:28:eb:26:e2:ba:3f:d1:44:91:68:23:5b:
                    cd:be:4b:ee:38:eb:5b:91:fc:1d:06:8d:ca:00:22:
                    6b:a1:ca:e3:9a:42:07:96:07:78:6d:63:4f:b2:ef:
                    2f:93:54:a1:06:c4:59:a5:65:d4:a4:29:6d:26:1d:
                    78:59:9a:45:0d:c7:86:e3:5a:1f:8c:06:f4:c4:bb:
                    dc:52:01:a5:cb:5c:33:dc:96:93:88:4d:ca:4f:37:
                    4b:c8:f8:ec:e0:77:9f:79:a8:d1:b2:18:76:b1:20:
                    e8:ea:b7:d7:4d:70:79:2d:a5:ec:52:06:06:46:2a:
                    02:fc:84:0c:b9:f8:b3:59:29:57:f2:da:85:d6:78:
                    cb:3f:75:e6:18:a2:b9:e8:a8:d0:d6:04:da:85:11:
                    54:ed:cb:08:9e:6d:d2:19:45:de:20:40:9a:a7:0a:
                    d4:09:d8:c9:d3:d2:18:3d:8c:00:44:85:0e:65:6c:
                    4f:1a:4c:fd:08:dc:cb:a3:34:92:45:8a:bd:e8:a5:
                    35:54:92:0e:40:cf:33:d5:e0:a9:48:20:ab:65:6a:
                    14:7d:b7:ce:ac:db:e6:3b:45:42:d9:ea:3c:52:b2:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:61:85:F3:C2:E7:93:D0:3B:1F:EF:8A:A6:6C:29:00:1F:B4:2B
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:30:b6:45:9e:e6:26:68:c6:a9:47:04:19:78:01:22:a8:85:
         56:a9:37:4a:bb:8e:e3:11:59:0d:9d:5a:44:da:84:fd:33:cf:
         03:71:0d:50:53:5f:48:0e:a4:ac:49:71:7f:0c:40:24:84:2c:
         96:ae:a6:40:49:44:91:c8:b2:a3:b5:47:6e:d7:56:16:84:39:
         21:da:5e:67:26:fb:b9:c8:cf:6e:80:5e:de:e4:13:3a:e1:2a:
         6f:0c:8b:be:37:43:1e:6e:47:35:b8:a9:db:e0:9c:14:69:ce:
         63:48:3a:73:fd:f1:6a:c0:e1:52:91:11:97:cd:53:57:bf:e9:
         f5:6d:90:bf:a3:ad:5e:1d:80:b2:7b:5c:36:e0:b7:36:8b:8a:
         c4:28:aa:d8:07:1c:19:19:ce:e4:40:84:ec:bb:b9:ee:5e:b2:
         8e:59:98:78:da:fd:63:7e:59:2a:49:43:fa:1c:af:b3:ad:fc:
         0a:97:60:f0:88:fc:c9:4f:58:dc:c0:50:70:26:f7:93:9f:26:
         59:0c:4c:16:82:22:15:1b:17:5d:fb:c3:4d:fd:03:d2:6b:bb:
         0c:fe:b0:ad:a8:d2:fe:08:52:4a:30:0d:31:81:38:81:77:c4:
         9a:6d:f2:b6:88:2e:e1:2b:59:20:bf:50:e0:42:5a:32:e2:80:
         3a:10:25:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:26 2026 by rpki-client