Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          uTSNk3Dnoy51TYGsrTW0h/5nuXT2AUNUpcvWMxXCV9E=
Subject key identifier:   42:B3:FF:9D:ED:63:56:90:EC:B7:22:65:66:B7:78:42:1A:94:03:19
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       019F93C934984FF2CEC739312FA657DDC416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          0E48
Signing time:             Fri 24 Jul 2026 11:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:04 +0000
Files and hashes:         1: GLvPs0b1150wgYEEGQh-rwy7VDM.roa (hash: yvNeNIbqO4LTnxIc0b0IA4sXErDdh1eRPLh4/uTPm/4=)
                          2: bM8ylzi-juLOcTs8he0_ihn2-Lg.roa (hash: WIBob7fZMLUTFgps19iz8qcrHP4DZX+mfV40VJTLBzA=)
                          3: deFJyq-loxsXWYEGsfUyIqVEnaI.roa (hash: pe36ZWMKjKJ3AsbDsw9+j06cZoB7uypgPTBqwG74rnE=)
                          4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: xTvMTBwDI1GD2B8pZpQy0VsvbGULzyM1OvlfhflmoNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:34:98:4f:f2:ce:c7:39:31:2f:a6:57:dd:c4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Jul 24 11:01:04 2026 GMT
            Not After : Jul 25 11:01:04 2026 GMT
        Subject: CN=42b3ff9ded635690ecb7226566b778421a940319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:2c:20:6d:5d:45:73:70:c5:e8:7b:ca:04:
                    4c:31:c9:c8:99:19:6a:19:01:9c:bc:7d:e4:21:bf:
                    fa:c5:48:f1:fd:fb:e7:79:fd:3e:66:e4:26:ad:b1:
                    86:59:65:2e:b8:99:69:f5:8c:69:cb:30:aa:5e:e3:
                    b3:e4:ae:25:bb:d6:bb:fc:bf:47:44:e1:60:f4:f9:
                    55:8f:66:3a:42:b9:e8:93:b0:0b:56:24:40:bc:d1:
                    a1:fa:fe:96:23:d4:e8:1d:da:8c:57:13:39:b8:23:
                    11:7b:61:24:8b:09:69:20:c4:ea:eb:ec:78:6f:23:
                    42:36:e8:88:d9:b0:73:ca:42:1c:33:63:a3:73:98:
                    91:7d:32:84:f7:e1:ae:a4:e3:93:a0:28:f8:eb:4c:
                    cd:81:fc:54:cd:6a:5c:06:1c:30:c8:8a:02:d3:70:
                    d5:98:03:d7:0f:dd:6a:19:44:67:2e:f9:7c:15:16:
                    a6:c4:02:6a:fc:a2:ae:56:a0:71:8c:da:33:c2:81:
                    17:fd:32:d8:46:60:85:ec:9b:e2:27:a1:8f:41:85:
                    df:43:cd:79:ad:d5:cf:98:a5:44:1d:9c:06:99:2f:
                    88:d3:9c:e6:1d:4f:c5:5f:be:14:d8:bc:c3:6f:20:
                    fd:5f:db:6d:42:ec:ec:f3:f1:cf:0b:c3:5b:05:f1:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B3:FF:9D:ED:63:56:90:EC:B7:22:65:66:B7:78:42:1A:94:03:19
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:6c:dd:fa:10:6e:02:76:57:bf:ec:f6:59:12:78:3e:20:
         24:11:b5:b7:24:7b:24:76:10:71:15:e9:c2:4e:6b:37:d4:54:
         97:ec:29:07:bf:79:cf:45:29:72:6f:d2:28:c7:18:71:6d:cd:
         2b:5a:fa:2c:55:c3:e1:d2:d6:f4:83:df:8c:cc:8f:12:53:61:
         75:30:59:e2:51:11:8d:30:08:33:43:15:f5:b4:c3:ca:65:64:
         44:27:47:a4:ab:86:21:ab:28:a3:9a:5f:5c:b5:c8:d4:d7:a1:
         30:d8:aa:df:bd:8c:f6:c8:08:67:5c:7a:fe:85:3d:1e:c9:39:
         45:ac:75:29:8c:8f:b9:b9:4a:4e:eb:fd:1d:a3:4a:8c:b8:12:
         d1:a1:f3:99:bf:4e:a7:de:41:d9:94:fa:08:be:68:93:2b:98:
         e2:6e:5f:3f:c3:ee:48:79:b7:6b:d8:08:15:06:d5:3e:96:a4:
         91:88:b7:71:f3:6b:d3:f2:15:b2:a9:cf:6c:40:48:61:d9:f0:
         fd:09:fd:eb:fa:b7:6d:1b:e6:4e:e8:8e:29:d7:21:f9:d9:17:
         1f:2b:6c:86:ed:9e:3c:6a:db:df:ad:32:4a:54:36:b2:4d:2f:
         9e:43:89:87:db:2d:e4:0b:1f:7d:ba:e8:58:a5:8d:6e:39:24:
         c4:60:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:40 2026 by rpki-client