Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File:                     1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier:          cTZQSyODjC5OZ+m3zFJ1nnPTyIElhnsMJKh5pAuXl2s=
Subject key identifier:   6E:A3:AA:AC:5C:A6:4A:1E:6C:3F:0C:28:6F:F7:28:B7:C7:B1:F9:57
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer:       /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial:       019F9022FD9C6B399F2083B1E7A4F5845299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 18:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:39 +0000
Files and hashes:         1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: vrhO2Nf/IvwQFIk3HdLpSMO9kMQn5cPPzy6QveWF/pg=)
                          2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:fd:9c:6b:39:9f:20:83:b1:e7:a4:f5:84:52:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
        Validity
            Not Before: Jul 23 18:00:39 2026 GMT
            Not After : Jul 24 18:00:39 2026 GMT
        Subject: CN=6ea3aaac5ca64a1e6c3f0c286ff728b7c7b1f957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:fe:20:28:c0:83:8e:25:c5:5f:ae:b7:b0:
                    00:c7:0b:98:0f:28:d6:be:db:6a:c7:1f:4c:88:f9:
                    85:16:58:b3:09:9f:5f:3c:34:e9:09:43:1f:fd:ae:
                    e5:e0:ac:96:34:82:3c:73:d7:f4:3b:77:b2:ef:ce:
                    71:65:2b:a4:7b:a1:1a:f9:a0:c7:b0:18:fc:61:1c:
                    09:17:59:37:8a:b3:2c:aa:5b:41:92:00:53:ee:b7:
                    76:d5:cd:55:48:a1:16:4c:74:6b:52:76:71:3d:6a:
                    c0:a5:86:17:e1:ef:26:d8:28:dd:a3:42:8b:95:34:
                    cb:1e:87:ee:b5:23:63:c0:5b:26:db:ce:c6:31:bc:
                    2d:cd:e1:56:c4:ec:c0:6d:20:cc:dd:8f:59:88:f7:
                    0e:c7:3c:ac:65:1b:78:7e:03:91:c7:11:ff:ab:d8:
                    5b:e6:93:f4:f3:86:01:1e:b5:8b:80:b4:11:5b:8b:
                    8c:cd:44:7c:5b:e5:5d:64:83:0b:ea:08:c4:94:4e:
                    6d:d9:15:cc:c6:b2:09:0a:4d:52:cc:31:ff:73:53:
                    92:89:5d:3f:5f:59:56:d2:ee:3c:02:66:1b:61:fa:
                    66:31:04:7d:d2:b1:52:19:ca:69:3f:88:ff:4c:ff:
                    49:36:34:a9:a2:23:42:5a:11:8b:39:32:df:6e:2b:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A3:AA:AC:5C:A6:4A:1E:6C:3F:0C:28:6F:F7:28:B7:C7:B1:F9:57
            X509v3 Authority Key Identifier:
                keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:23:0b:65:83:44:57:1a:0c:92:e9:5e:1c:b4:b5:0b:c6:
         ae:95:b2:f1:b3:67:e1:2c:ce:4c:b4:ae:43:70:e1:02:6f:ff:
         29:fa:80:ef:4f:70:22:fe:a1:31:6d:85:55:b3:4c:60:74:eb:
         cd:b5:22:8c:19:d7:d3:78:8e:14:cf:c0:c7:c8:40:ed:0a:97:
         08:45:b1:82:36:11:22:46:44:15:50:11:82:75:84:32:7c:41:
         7f:52:c9:6a:bc:ee:1a:4f:37:d1:de:0f:5d:8c:82:7f:15:cd:
         d8:08:ba:ea:3d:59:47:1d:2b:ef:35:52:92:5f:29:8f:be:ce:
         6e:fa:e3:ad:20:32:65:94:84:7a:75:e8:e8:6c:55:db:de:6b:
         fc:69:d6:ad:3c:60:de:4f:92:d7:8d:89:26:21:6e:87:96:63:
         d5:e5:ab:d4:b9:d9:22:48:b0:97:d2:aa:eb:38:46:ed:36:9f:
         a3:07:38:89:2e:79:bf:9a:1b:bd:fc:2a:df:22:11:8a:e3:be:
         8a:0c:a4:8f:a6:ce:5f:c6:95:2b:f5:40:9d:e4:63:15:b4:83:
         45:65:9f:aa:c0:eb:97:cd:0a:e4:cc:24:d0:d9:60:aa:7c:ec:
         0c:a2:a0:63:05:88:96:4a:af:90:fb:ea:b2:2e:51:a0:f4:b9:
         f9:65:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:05 2026 by rpki-client