Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          pcrVJblOAYJs/P7DWCwnMnsdDjV264T3tKXOujkYsRs=
Subject key identifier:   90:67:28:55:FB:90:55:22:F0:31:3F:61:C3:A1:60:11:97:58:35:0C
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019F92B5F68BB7ECC3E8FEF86C95CB98A65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          0A33
Signing time:             Fri 24 Jul 2026 06:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:26 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: GUtXb9Dnepco186Mr14nu6hzBJsE/555k32o2e3PMRk=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f6:8b:b7:ec:c3:e8:fe:f8:6c:95:cb:98:a6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Jul 24 06:00:26 2026 GMT
            Not After : Jul 25 06:00:26 2026 GMT
        Subject: CN=90672855fb905522f0313f61c3a160119758350c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:8f:b7:2b:5c:0b:44:7d:79:fa:96:17:60:
                    95:44:81:f4:7e:33:a6:2b:28:0f:d6:19:8c:ec:01:
                    01:d8:a3:55:a3:13:bd:a6:a9:fc:1b:9d:70:a0:8c:
                    2c:c5:ad:c5:50:42:85:9e:54:6e:91:7e:29:0d:a8:
                    0d:a0:c0:e6:af:92:d0:dc:9d:4e:6b:34:fc:a0:63:
                    7f:f4:c9:31:6e:e2:67:91:d7:20:92:9f:0e:a2:c8:
                    92:61:a3:c1:6f:b2:86:3d:13:f2:42:32:71:9a:fb:
                    b5:e7:25:e7:36:18:38:d6:ad:89:bf:92:ef:0e:7e:
                    04:08:b0:df:df:5e:54:12:2d:25:b0:bb:e9:e2:62:
                    5c:e2:d6:18:30:1c:e3:80:53:ef:22:d7:fc:05:90:
                    c2:61:d9:97:fb:23:51:f3:c6:b1:34:7e:14:1e:dd:
                    f0:f8:a2:72:74:ed:60:b0:b1:ab:4d:ee:c3:aa:12:
                    ae:73:1a:1e:f5:ee:bd:41:a5:13:b7:c7:82:bb:77:
                    91:55:7c:54:67:77:4d:4e:c9:55:9f:93:1d:a8:4f:
                    c4:e5:c1:ce:91:5a:cd:e4:7d:eb:41:b0:8c:a5:53:
                    8b:41:79:3d:4c:8c:d6:d5:90:13:3f:50:87:74:aa:
                    3b:80:cc:35:18:24:18:c8:6a:99:8e:f4:0f:79:2a:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:67:28:55:FB:90:55:22:F0:31:3F:61:C3:A1:60:11:97:58:35:0C
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:7f:7e:b1:1f:ba:b1:b2:4a:7d:44:32:33:0b:dc:44:92:
         38:cf:b1:b1:e7:a8:d7:ca:46:39:a1:d5:e1:4f:93:07:e5:1a:
         70:fd:b9:32:ed:77:f4:2e:53:0d:bd:ea:85:be:f9:19:2e:fa:
         4c:9d:8e:e3:28:17:b3:fd:bf:59:e7:f9:44:0c:c1:3a:2c:2f:
         9f:d5:c9:6a:6e:7b:9b:69:5c:8c:b4:c1:6a:0b:a7:62:81:63:
         9e:7e:63:fd:46:9f:06:05:bf:f6:08:11:4c:98:10:6e:f6:ac:
         01:30:7d:86:27:5e:46:c8:c8:0b:9f:a3:f3:e7:59:ab:bd:56:
         2b:86:d5:f0:d7:23:6c:83:06:c4:d6:23:f8:24:0d:1b:52:a3:
         8a:3e:15:68:c0:b6:65:5b:56:db:c3:9e:fb:b3:fb:fc:53:e2:
         20:04:2c:95:20:be:61:d5:7c:9a:44:32:f7:63:00:cb:2e:46:
         09:f2:7f:f3:97:b5:7f:5c:88:f1:f3:5a:45:cc:b1:bf:6d:0b:
         6a:20:03:e4:72:11:24:7b:8f:c3:d4:c6:ee:51:93:39:c3:c4:
         db:29:87:86:34:8b:12:56:ea:15:95:8a:ab:89:f8:11:4f:d1:
         e9:fa:56:76:ea:74:6a:72:c6:43:35:01:54:19:d9:a4:d4:a9:
         85:3c:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:00 2026 by rpki-client