Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File:                     wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier:          IyZhzuA2lHn7RAcVw3Y3QSKTsO5uUfi+5mSt1B8gkG8=
Subject key identifier:   AD:91:28:CD:FE:5D:D2:07:BE:D9:4D:41:40:D0:00:02:03:31:2B:86
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       019F92B69B51A1E83CA932E1F0126099436D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 06:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:08 +0000
Files and hashes:         1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
                          2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: EVujdehy6Leq/p0Slt4fC9DRm3g3aTxJJ5M4GFFuXUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:9b:51:a1:e8:3c:a9:32:e1:f0:12:60:99:43:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: Jul 24 06:01:08 2026 GMT
            Not After : Jul 25 06:01:08 2026 GMT
        Subject: CN=ad9128cdfe5dd207bed94d4140d0000203312b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:80:49:70:23:a9:e0:41:b3:f4:bd:07:e8:
                    ad:ed:9c:0b:76:a5:52:6f:34:8e:b8:87:9b:62:2d:
                    de:6a:db:18:98:1e:36:db:91:16:27:72:c2:d4:ef:
                    a2:c4:d1:3a:9c:42:52:d8:54:da:f1:e2:22:02:ea:
                    6a:0e:5d:4f:24:f9:fa:8a:ef:7d:ed:1c:bd:77:1a:
                    31:92:76:ff:8d:d7:2c:fa:c2:68:d1:68:16:2e:8d:
                    02:af:78:3f:a0:fe:6e:a5:42:4d:c6:80:4e:ed:01:
                    8e:07:71:23:cf:1b:75:7d:09:2b:d9:05:7b:4b:2d:
                    7e:50:f9:52:cb:84:bd:30:fd:be:dc:8b:30:f1:39:
                    bf:c8:dd:71:63:ed:6e:5d:1e:bc:9b:c4:35:f6:c4:
                    8e:ec:15:a8:e9:c4:c5:05:17:55:85:06:fa:1a:48:
                    e0:67:0e:0f:77:c2:6e:7e:01:6b:0d:a1:ab:be:ed:
                    0e:57:0a:4c:88:a7:bb:da:d3:a9:39:a5:02:15:06:
                    58:62:08:cd:c5:9d:bf:bb:de:8f:01:e5:fe:dd:63:
                    88:63:b2:77:ca:08:c2:86:eb:92:cb:9e:62:56:95:
                    33:69:1d:1e:79:a9:6a:ad:38:c0:72:b9:b2:7f:16:
                    f0:1f:0c:7d:5b:cd:23:f8:61:5d:a6:28:73:b6:96:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:91:28:CD:FE:5D:D2:07:BE:D9:4D:41:40:D0:00:02:03:31:2B:86
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:30:53:29:2c:b7:23:07:3c:91:81:c9:d0:a6:bf:24:a5:f7:
         08:c0:59:99:13:34:37:d2:7a:ac:ac:f7:98:76:62:39:c7:e5:
         a5:b4:c9:63:31:36:e2:25:94:43:97:17:19:0d:58:b9:a0:1e:
         fd:56:28:5f:d6:49:fc:5e:91:c4:4e:9f:c9:fb:bc:d1:9c:86:
         00:cd:71:ef:68:b6:38:3e:01:25:e5:f1:d0:4e:6e:6f:3f:23:
         bd:61:6d:01:af:14:9b:97:a8:93:12:88:78:4f:5f:e1:31:0a:
         85:ae:06:78:37:bf:63:57:34:12:83:e7:d1:df:e8:46:d1:ee:
         3f:8a:88:2b:6a:84:10:87:b9:89:20:1f:6b:02:79:dd:2e:36:
         56:11:d8:bf:dc:af:4d:05:ae:06:f9:b8:35:70:03:2b:22:68:
         e8:02:14:fd:44:c7:2b:a2:f0:60:b3:46:f4:8c:1b:f1:b3:e4:
         6f:fb:1d:18:f9:e5:d7:71:5b:7d:a8:0f:49:80:3a:63:3c:f8:
         53:6f:9e:a9:e4:ba:a6:ff:08:6c:0a:d9:89:17:cb:19:16:eb:
         95:58:58:15:8b:7e:28:bd:c9:b1:69:39:87:41:ca:24:b7:cb:
         29:ad:bf:49:19:e5:96:00:6b:0b:e2:52:55:b2:d7:f1:bb:aa:
         04:0c:32:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StptRoeg8qTLh8BJgmUNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTY2ZTIxNmMzNjBjMzZlMGY3NWIwZDM5MTIzZGJhZDQy
MjY0ZTkwHhcNMjYwNzI0MDYwMTA4WhcNMjYwNzI1MDYwMTA4WjAzMTEwLwYDVQQD
EyhhZDkxMjhjZGZlNWRkMjA3YmVkOTRkNDE0MGQwMDAwMjAzMzEyYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5OASXAjqeBBs/S9B+it7ZwLdqVS
bzSOuIebYi3eatsYmB4225EWJ3LC1O+ixNE6nEJS2FTa8eIiAupqDl1PJPn6iu99
7Ry9dxoxknb/jdcs+sJo0WgWLo0Cr3g/oP5upUJNxoBO7QGOB3Ejzxt1fQkr2QV7
Sy1+UPlSy4S9MP2+3Isw8Tm/yN1xY+1uXR68m8Q19sSO7BWo6cTFBRdVhQb6Gkjg
Zw4Pd8JufgFrDaGrvu0OVwpMiKe72tOpOaUCFQZYYgjNxZ2/u96PAeX+3WOIY7J3
ygjChuuSy55iVpUzaR0eealqrTjAcrmyfxbwHwx9W80j+GFdpihztpY4OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2RKM3+XdIHvtlNQUDQAAIDMSuGMB8GA1UdIwQY
MBaAFMAWbiFsNgw24PdbDTkSPbrUImTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYt
ZmNjZTE0N2MzMjdhLzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYtZmNjZTE0N2MzMjdh
LzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzBTKSy3
Iwc8kYHJ0Ka/JKX3CMBZmRM0N9J6rKz3mHZiOcflpbTJYzE24iWUQ5cXGQ1YuaAe
/VYoX9ZJ/F6RxE6fyfu80ZyGAM1x72i2OD4BJeXx0E5ubz8jvWFtAa8Um5eokxKI
eE9f4TEKha4GeDe/Y1c0EoPn0d/oRtHuP4qIK2qEEIe5iSAfawJ53S42VhHYv9yv
TQWuBvm4NXADKyJo6AIU/UTHK6LwYLNG9Iwb8bPkb/sdGPnl13FbfagPSYA6Yzz4
U2+eqeS6pv8IbArZiRfLGRbrlVhYFYt+KL3JsWk5h0HKJLfLKa2/SRnllgBrC+JS
VbLX8buqBAwyxg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:36:40 2026 by rpki-client