Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File:                     WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier:          PVCFa2X3bHRGDu0UzpmYMjzWDDF0mPqRTE5zoH9jZns=
Subject key identifier:   D6:2F:51:5D:6D:83:5B:B1:E3:57:92:DB:E7:78:FB:88:47:AE:EE:5A
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer:       /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial:       019F9580A3B5193712C593962187FA1AB4AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 19:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:03 +0000
Files and hashes:         1: 1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa (hash: n5Ym14rFpr095FaL9IAhfRYei5cEd9AMJCR8kIq3vSc=)
                          2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: wMzGYkQpPSzs4CM5f+up+I0wtIy+6cHxMuDOnRq70tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:a3:b5:19:37:12:c5:93:96:21:87:fa:1a:b4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
        Validity
            Not Before: Jul 24 19:01:03 2026 GMT
            Not After : Jul 25 19:01:03 2026 GMT
        Subject: CN=d62f515d6d835bb1e35792dbe778fb8847aeee5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:75:a5:be:e6:d8:0c:73:8e:15:8a:e2:0e:
                    07:c4:d0:3c:90:e4:52:19:ff:d5:b4:73:ba:f4:8e:
                    18:7f:f9:08:62:17:97:bc:6f:48:ae:e9:b6:52:19:
                    e9:1d:15:ac:70:b5:bc:f3:c9:1d:8a:17:bc:4b:47:
                    cc:97:5d:6d:a5:c1:6c:23:03:1e:25:b9:02:2c:56:
                    7a:38:3b:28:42:5d:91:b6:90:b3:82:c5:d2:ec:a7:
                    0e:9a:6e:09:d0:bf:2d:ca:d4:24:37:8e:80:77:3d:
                    b2:01:c2:57:4d:5c:27:87:5d:2b:f7:16:fe:ad:d0:
                    3a:95:f5:bd:ff:26:91:75:46:ea:ab:06:50:8c:fd:
                    b4:b9:f3:98:c3:8a:36:d0:0a:04:e2:40:a4:d7:0c:
                    f8:65:99:2c:f4:92:d7:3d:21:8c:93:15:92:e5:d0:
                    2d:a3:29:df:a7:d5:a5:30:20:05:b4:95:82:04:d4:
                    09:2b:6a:b2:bd:4e:4d:7f:d5:24:7a:45:d1:22:28:
                    d7:d4:1d:83:b7:b3:49:87:03:dc:b1:f8:2f:91:7e:
                    38:8f:fa:94:e7:de:5c:8f:39:9a:ff:fb:55:af:93:
                    47:9d:eb:52:d7:d6:6c:67:8c:2f:27:4a:7d:a2:df:
                    48:62:ae:a0:80:ed:32:6d:f2:5e:bf:80:4f:7d:63:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2F:51:5D:6D:83:5B:B1:E3:57:92:DB:E7:78:FB:88:47:AE:EE:5A
            X509v3 Authority Key Identifier:
                keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bf:0d:76:96:9c:bb:d9:4e:5d:2a:c6:a5:2c:2d:5e:86:24:
         05:1d:51:74:dc:b0:06:ef:f4:40:38:88:f3:10:a1:a9:c7:c0:
         0d:f5:e4:32:22:ec:42:30:de:1f:98:ad:5f:78:c3:8a:1a:dc:
         1d:a8:3c:bd:6b:a4:62:ec:73:69:13:c7:52:44:25:49:f2:82:
         19:df:63:49:51:86:7e:86:1f:a9:78:5f:b8:a6:db:b1:5f:e9:
         50:50:78:75:e8:b0:72:87:5e:d4:54:2d:5f:c6:45:a0:3e:c2:
         1c:f9:3b:29:66:e8:37:ff:ca:a4:45:2e:d6:16:a2:af:4c:d1:
         63:e6:59:53:6e:fc:a1:c1:93:9d:33:5a:f9:98:b5:db:0b:e9:
         dd:c7:52:71:5c:0a:b6:dd:98:41:3f:54:0c:00:09:22:90:60:
         99:44:b2:56:8a:d2:56:f9:28:10:c2:04:9c:62:a8:cf:6c:1a:
         64:f1:8a:0a:92:61:19:c5:78:03:0f:7f:f9:ae:5c:81:fd:14:
         a4:da:3d:b4:53:c4:97:b1:8a:9e:82:b3:1e:ce:6f:40:41:20:
         42:64:fe:fc:e0:26:13:d6:39:5c:50:a2:19:e0:c4:9d:62:ed:
         22:46:db:8c:45:a6:f9:29:b7:3d:bf:14:9a:2c:cd:2d:14:c0:
         6a:20:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:33:23 2026 by rpki-client