Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier:          6W4EQhe8aheBlSg9RGSUdAG+meGpLvXbBCbNolqer0M=
Subject key identifier:   AA:82:06:1D:59:0E:E5:79:FF:4A:53:59:8F:ED:41:73:18:65:62:B4
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer:       /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial:       019F93244D333121741EF4FD3DA61EC578AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number:          19E2
Signing time:             Fri 24 Jul 2026 08:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:57 +0000
Files and hashes:         1: 3W9R-YT71N2KOE9koy1r5cINKX0.roa (hash: clKClGDaGmI0tmvfHI+K0tkdnMBa+OFDvpOE7hWE5Ts=)
                          2: 5UeKqt91iujWrLpmveszaAeKq38.roa (hash: uGfE9PLC67qvNbDJ8GUA0pov+PYaKuZOHQHTjJZLOVs=)
                          3: AUg0z5yXbzh2DRCyGjN0QT6euNA.roa (hash: RSYJ1asjZqxOdOG/NJBg7u2rmfVrBP+knp47N/2/EDM=)
                          4: NG61yH3HN97TjS1iRIUPVdYaQ7A.roa (hash: x678lkfNMzciNejX1Mk4JHb1ftZLDB8lKMVQe+Qriio=)
                          5: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: 99kylubh/Ki99AQKdopLlW47iLsXURap+yZCID7j2lk=)
                          6: p0oEcMg8sG6gT08Fcxw4r9QhamI.roa (hash: z6uLeIBaxCEHOYTKTX4AQu+ufdq2lBhvDUsLTsxGNkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:4d:33:31:21:74:1e:f4:fd:3d:a6:1e:c5:78:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Validity
            Not Before: Jul 24 08:00:57 2026 GMT
            Not After : Jul 25 08:00:57 2026 GMT
        Subject: CN=aa82061d590ee579ff4a53598fed4173186562b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:ed:21:df:4f:19:93:e1:b7:63:c4:85:f5:
                    2f:6a:63:c1:6a:4e:73:ff:82:98:cd:1f:34:08:2f:
                    43:d6:28:18:a3:79:39:c9:cd:d4:e4:07:3c:df:4b:
                    7c:8b:0e:f9:92:05:b0:38:c7:41:f6:5d:aa:24:44:
                    01:2e:9e:3a:c6:e6:1d:d8:59:8b:56:f1:07:1d:e1:
                    2c:6a:0a:81:85:8e:50:fd:32:22:9c:e2:2b:b5:76:
                    a5:63:1a:84:5c:b4:ef:85:ef:d0:8e:5a:8e:97:01:
                    8c:59:3f:0b:17:d2:17:02:e0:eb:af:91:8f:5c:3b:
                    0f:2b:48:f6:01:cf:fb:c8:7d:eb:3e:b2:29:bd:f0:
                    46:91:97:df:3d:7c:2c:9b:df:94:c9:7e:51:06:c5:
                    44:ef:65:98:ac:86:72:ca:51:12:31:37:7e:06:45:
                    eb:dd:12:b4:54:b2:e4:c9:3d:41:eb:41:1e:01:bf:
                    fb:02:49:83:4f:0d:28:f8:8b:85:bd:18:ce:33:5e:
                    e3:db:37:cd:ed:de:5a:75:86:2d:cf:73:8b:d8:2a:
                    b2:ff:61:9c:5b:4e:5a:29:2e:dc:e1:bf:17:96:23:
                    8a:e0:bc:d3:52:ff:e1:03:c5:9a:0b:3e:a6:7d:06:
                    6a:56:3d:ec:1c:c8:96:b5:cd:78:85:e1:71:ae:24:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:06:1D:59:0E:E5:79:FF:4A:53:59:8F:ED:41:73:18:65:62:B4
            X509v3 Authority Key Identifier:
                keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:33:a2:4e:c8:b8:79:9f:50:60:39:51:25:e4:2a:6a:94:
         0b:b6:8a:d9:d1:5b:8a:bf:f7:67:11:6b:c8:0f:2e:7a:29:9e:
         4a:30:42:f3:dd:d3:d9:99:25:cb:64:aa:9b:3d:34:1f:c8:01:
         04:79:98:19:67:a5:f8:49:f4:74:25:d7:22:b8:84:8c:81:52:
         39:61:62:8a:51:c8:fd:b6:03:3a:25:b6:69:8c:3a:83:3f:3e:
         b3:ea:bf:63:f4:06:ec:e5:4e:47:56:32:45:90:0d:b4:35:a6:
         f7:16:b3:b3:b3:ef:d4:c8:06:48:50:c2:b9:78:79:49:a0:b1:
         35:ca:cb:87:a0:ec:62:c2:98:26:5a:e9:5b:f6:26:cb:da:fd:
         99:3a:bf:3e:f0:12:a0:33:b6:a3:6c:91:9f:2f:8b:9d:e3:b6:
         d3:88:84:d5:a1:b3:78:15:08:9a:24:6c:69:9b:80:45:a9:79:
         59:37:75:18:50:38:83:89:e1:67:3f:9e:49:a8:94:78:57:54:
         bf:93:e0:c8:c7:2e:8e:63:54:67:17:f3:64:8a:cd:50:56:73:
         14:cc:fa:27:2b:47:32:cf:87:66:53:db:f0:32:67:97:5a:c5:
         83:eb:99:4d:b0:d8:c6:b8:a4:0f:1a:b8:01:b0:95:c5:37:5a:
         56:2d:e4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJE0zMSF0HvT9PaYexXisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm
MGViN2IwHhcNMjYwNzI0MDgwMDU3WhcNMjYwNzI1MDgwMDU3WjAzMTEwLwYDVQQD
EyhhYTgyMDYxZDU5MGVlNTc5ZmY0YTUzNTk4ZmVkNDE3MzE4NjU2MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxrtId9PGZPht2PEhfUvamPBak5z
/4KYzR80CC9D1igYo3k5yc3U5Ac830t8iw75kgWwOMdB9l2qJEQBLp46xuYd2FmL
VvEHHeEsagqBhY5Q/TIinOIrtXalYxqEXLTvhe/QjlqOlwGMWT8LF9IXAuDrr5GP
XDsPK0j2Ac/7yH3rPrIpvfBGkZffPXwsm9+UyX5RBsVE72WYrIZyylESMTd+BkXr
3RK0VLLkyT1B60EeAb/7AkmDTw0o+IuFvRjOM17j2zfN7d5adYYtz3OL2Cqy/2Gc
W05aKS7c4b8XliOK4LzTUv/hA8WaCz6mfQZqVj3sHMiWtc14heFxriS+4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqCBh1ZDuV5/0pTWY/tQXMYZWK0MB8GA1UdIwQY
MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt
MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz
LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1wzok7I
uHmfUGA5USXkKmqUC7aK2dFbir/3ZxFryA8ueimeSjBC893T2Zkly2Sqmz00H8gB
BHmYGWel+En0dCXXIriEjIFSOWFiilHI/bYDOiW2aYw6gz8+s+q/Y/QG7OVOR1Yy
RZANtDWm9xazs7Pv1MgGSFDCuXh5SaCxNcrLh6DsYsKYJlrpW/Ymy9r9mTq/PvAS
oDO2o2yRny+LneO204iE1aGzeBUImiRsaZuARal5WTd1GFA4g4nhZz+eSaiUeFdU
v5PgyMcujmNUZxfzZIrNUFZzFMz6JytHMs+HZlPb8DJnl1rFg+uZTbDYxrikDxq4
AbCVxTdaVi3k8g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:24 2026 by rpki-client