Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          YoKi5gJIzMPGOmZgHZOpRdnH8kY4xcM+qP/6WOVq3B0=
Subject key identifier:   98:B2:21:A3:51:CC:22:A0:BA:1D:DA:D6:06:68:FF:32:1B:8F:86:EB
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019F9324709E8AAA2AD6115EA7DACA75E095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          19DF
Signing time:             Fri 24 Jul 2026 08:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:06 +0000
Files and hashes:         1: OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa (hash: UNu3aGNU9iKX9W+pdSbXjn6MIdvAzU/dQ2Ruk579C2c=)
                          2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: xbnn9er1hKl0Gl6Ew7eMJFuPppgE425rpcadJ3UZsUI=)
                          3: _LKma__zHFDMDJXCFflTJpsJLLo.roa (hash: d16O3qOwG02xNq1nLgFHuKeCvYDVgJiMUkRZsNPQaBE=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:70:9e:8a:aa:2a:d6:11:5e:a7:da:ca:75:e0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Jul 24 08:01:06 2026 GMT
            Not After : Jul 25 08:01:06 2026 GMT
        Subject: CN=98b221a351cc22a0ba1ddad60668ff321b8f86eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:04:bd:3e:44:56:23:df:b2:96:95:2c:13:
                    5d:90:38:0f:f8:b1:d2:74:41:e3:f0:7e:9f:e6:31:
                    9b:93:96:28:ea:f8:e0:cb:e9:fb:20:b4:d9:64:58:
                    e9:e1:22:5c:3b:0d:78:61:43:00:05:ed:51:c9:df:
                    81:e1:1f:57:79:8f:ca:ba:eb:f6:60:89:ec:6a:f3:
                    72:15:0f:70:34:92:3a:89:0a:46:4a:0a:76:45:69:
                    4f:ed:0a:85:9a:00:47:58:3d:d1:88:e6:69:26:98:
                    66:d2:19:93:63:3b:5d:b8:08:77:5d:91:55:ed:91:
                    ec:0c:eb:5b:93:79:e6:aa:f0:d7:b7:3a:f3:ee:a0:
                    9e:7e:be:2d:b0:da:ad:75:f9:51:ab:a3:42:19:50:
                    5b:d2:0d:fa:11:c5:fe:5c:f5:0d:83:42:8a:1d:90:
                    b1:b6:4c:67:b4:39:b5:d5:45:5f:79:b5:9c:f4:86:
                    85:78:89:cf:a1:b5:74:d5:9b:d4:7e:0f:06:0d:8d:
                    fa:2f:da:05:50:8e:68:2b:1e:67:49:54:d2:54:02:
                    11:03:9a:3b:c7:15:37:8f:80:14:7c:c0:ef:7d:83:
                    bc:b5:46:b6:90:a2:a9:f3:b8:de:e4:e7:da:80:fa:
                    9c:f2:f5:cb:6f:ea:3c:96:f7:5a:74:a8:d1:f8:3f:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B2:21:A3:51:CC:22:A0:BA:1D:DA:D6:06:68:FF:32:1B:8F:86:EB
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:11:1b:17:19:a0:d0:70:50:93:a3:b4:e8:88:83:4f:b5:
         2a:ce:16:09:b5:00:2c:0f:ae:f3:8a:fa:7b:08:79:89:08:ae:
         01:07:13:15:4b:8b:30:13:c1:f7:d7:53:89:62:b3:79:c6:f8:
         51:64:78:0d:fa:fd:90:1c:e9:b6:87:ac:5a:17:2c:16:98:7c:
         01:fb:19:e2:50:77:3e:31:f1:a6:bd:14:be:94:3c:37:e9:05:
         d5:8e:ab:6a:9c:cd:fe:6e:d5:14:33:a7:6d:54:c5:7f:69:49:
         a0:f6:fe:77:aa:35:15:5b:4c:90:9e:67:fe:e1:23:d2:42:66:
         21:96:cc:de:a1:bb:bd:2e:10:17:22:74:bb:5b:e1:dc:cf:9b:
         bd:b6:69:ba:12:74:57:57:2e:2a:f1:9d:b7:73:1a:01:7f:b9:
         cd:0c:ee:9a:0e:5f:1a:4c:31:a0:5c:ad:e0:df:16:99:65:90:
         6a:07:7b:5c:22:00:e8:82:f7:8b:f4:ff:c6:a3:35:d6:57:ec:
         58:81:63:16:7b:93:10:71:c0:7f:53:d5:5b:ac:1e:62:54:61:
         f8:b4:0e:4c:6d:f1:4b:a5:79:94:b8:8e:43:50:c3:b7:36:c3:
         2f:2c:9a:1d:6f:d0:8c:ea:86:59:c9:63:69:80:36:91:ee:d4:
         52:be:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:31 2026 by rpki-client