Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          BhP2NramrdyQoevMVvKFLxzipaar2c6gZOGx9sYNfK0=
Subject key identifier:   64:F2:7C:16:FE:E5:32:C8:B2:06:F1:5D:B0:6B:9F:ED:73:01:03:57
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       019F905A2A2360835421FC4729C22A2D5924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          12B4
Signing time:             Thu 23 Jul 2026 19:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:55 +0000
Files and hashes:         1: IyiDYUwXTd8nMW2tsgvpdFAf3I4.roa (hash: wX/PrCSepREzfY5hM9Z51sIMyLpNkHvV3nfyWUKOE2Q=)
                          2: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: 02Hl+0HKMC7srxGr8LzmIKxK+fxAfk2Ex79oQH8cXBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:2a:23:60:83:54:21:fc:47:29:c2:2a:2d:59:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Jul 23 19:00:55 2026 GMT
            Not After : Jul 24 19:00:55 2026 GMT
        Subject: CN=64f27c16fee532c8b206f15db06b9fed73010357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:b9:8e:ae:4f:c1:74:51:6d:49:a8:91:ab:
                    b3:87:b3:fa:20:d2:8e:e8:5f:f1:22:af:83:ac:7d:
                    0f:cb:ac:b7:7d:8b:ac:73:9c:d3:65:7b:5e:9b:b8:
                    88:a2:c7:27:21:98:fc:81:09:57:00:52:37:52:f3:
                    b6:20:00:1f:67:9f:2c:86:5a:7a:46:12:f5:ed:20:
                    d2:9d:08:76:35:cb:c2:89:02:bf:2c:33:d8:5b:bc:
                    0a:c4:c9:35:8f:5f:ad:7b:9f:92:7e:4d:53:74:08:
                    06:02:3b:56:3f:d4:61:96:d2:fa:67:c5:b7:71:1c:
                    d4:cf:d4:dc:c4:42:39:96:7b:34:dc:ed:9c:e1:e7:
                    2e:86:1c:e5:31:e6:f7:27:ac:93:23:9f:db:b2:d3:
                    2a:41:94:f9:84:d2:43:b5:13:8b:ca:6f:b6:21:bf:
                    6d:54:69:ef:1c:54:b6:48:e1:05:19:3d:79:1b:c6:
                    6e:2f:86:33:e0:0c:c5:6a:f6:b1:06:e5:74:0a:8a:
                    a7:b8:2c:01:61:fc:10:5c:1b:0a:65:8f:d6:44:47:
                    af:3d:3d:e5:c1:96:29:56:5c:ef:e1:4e:34:91:fe:
                    7b:46:78:f8:a2:7f:39:72:61:b1:53:34:43:64:6f:
                    e3:ee:ff:e6:b8:61:76:64:b4:b9:63:52:f2:3d:45:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:7C:16:FE:E5:32:C8:B2:06:F1:5D:B0:6B:9F:ED:73:01:03:57
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2f:49:4b:4d:9f:5c:94:6b:28:53:fe:2a:de:90:58:fc:f6:
         15:87:78:05:f1:47:f7:27:e7:8b:42:65:b2:b1:8b:3c:b2:ca:
         48:80:1e:ca:91:ca:d3:c8:92:08:1e:c7:ae:88:0e:78:3b:70:
         53:f5:f3:73:28:18:50:4a:af:07:15:56:c7:50:8b:aa:7f:00:
         1a:95:9c:c4:8e:7a:1b:d2:aa:1e:44:80:74:73:8f:fe:0a:0b:
         42:1e:66:1f:f4:85:df:7a:00:94:c2:a6:a5:3a:2f:2e:a4:1c:
         3b:fd:5c:91:85:d0:9d:2d:d0:9d:8d:37:b6:4b:f2:6d:60:cc:
         ea:d0:cc:8f:d0:ee:06:bd:fd:e3:48:fe:02:c0:1b:ab:99:47:
         9d:1c:05:2a:b5:8a:f6:fa:4d:c4:ba:59:28:e8:bd:b1:b5:80:
         8d:db:e2:2d:4f:ea:8f:df:ce:fa:45:da:cc:71:f1:ed:5e:05:
         f9:f1:9f:ad:3b:dd:80:30:9f:a8:c9:89:f3:ed:27:ce:1e:60:
         3b:41:b4:f2:c6:99:6e:00:f7:d8:57:15:13:69:da:e0:f9:7b:
         61:50:f5:ae:94:01:d1:d7:02:43:b3:b6:89:24:00:72:e8:5a:
         cd:ca:b5:a9:3d:bd:d7:1d:12:e2:ca:bb:b3:2d:63:00:91:68:
         1e:ef:6c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWiojYINUIfxHKcIqLVkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzRjZmJkODcxYzQyZGQ1NWE1N2JkMGZmNTY3MTM0ZjMy
MmIyM2UwHhcNMjYwNzIzMTkwMDU1WhcNMjYwNzI0MTkwMDU1WjAzMTEwLwYDVQQD
Eyg2NGYyN2MxNmZlZTUzMmM4YjIwNmYxNWRiMDZiOWZlZDczMDEwMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzy5jq5PwXRRbUmokauzh7P6INKO
6F/xIq+DrH0Py6y3fYusc5zTZXtem7iIoscnIZj8gQlXAFI3UvO2IAAfZ58shlp6
RhL17SDSnQh2NcvCiQK/LDPYW7wKxMk1j1+te5+Sfk1TdAgGAjtWP9RhltL6Z8W3
cRzUz9TcxEI5lns03O2c4ecuhhzlMeb3J6yTI5/bstMqQZT5hNJDtROLym+2Ib9t
VGnvHFS2SOEFGT15G8ZuL4Yz4AzFavaxBuV0CoqnuCwBYfwQXBsKZY/WREevPT3l
wZYpVlzv4U40kf57Rnj4on85cmGxUzRDZG/j7v/muGF2ZLS5Y1LyPUW2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTyfBb+5TLIsgbxXbBrn+1zAQNXMB8GA1UdIwQY
MBaAFFnEz72HHELdVaV70P9WcTTzIrI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGY2MmItN2FlMi00OWQ2LWE0MmMt
ODk5ZjFlMWI3MzYwLzEvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MGY2MmItN2FlMi00OWQ2LWE0MmMtODk5ZjFlMWI3MzYw
LzEvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIi9JS02f
XJRrKFP+Kt6QWPz2FYd4BfFH9yfni0JlsrGLPLLKSIAeypHK08iSCB7HrogOeDtw
U/XzcygYUEqvBxVWx1CLqn8AGpWcxI56G9KqHkSAdHOP/goLQh5mH/SF33oAlMKm
pTovLqQcO/1ckYXQnS3QnY03tkvybWDM6tDMj9DuBr3940j+AsAbq5lHnRwFKrWK
9vpNxLpZKOi9sbWAjdviLU/qj9/O+kXazHHx7V4F+fGfrTvdgDCfqMmJ8+0nzh5g
O0G08saZbgD32FcVE2na4Pl7YVD1rpQB0dcCQ7O2iSQAcuhazcq1qT291x0S4sq7
sy1jAJFoHu9s5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:20 2026 by rpki-client