Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          Rr1uUuvudnYA2O1F83xiDgdpE5XORdObjHlDtdUVkIM=
Subject key identifier:   55:8D:7B:7D:59:9F:38:8D:B2:59:63:D8:BF:E7:A9:D2:B1:4B:1B:D5
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       019F90FEE3F7BE31377CD96E86E71BF205F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 22:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:51 +0000
Files and hashes:         1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: 6KixD6yciLqhCgnCzYOnwIKRhCVJnz4ICwm/yCEue0g=)
                          2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:e3:f7:be:31:37:7c:d9:6e:86:e7:1b:f2:05:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Jul 23 22:00:51 2026 GMT
            Not After : Jul 24 22:00:51 2026 GMT
        Subject: CN=558d7b7d599f388db25963d8bfe7a9d2b14b1bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:54:25:79:c6:56:16:27:25:ea:67:63:77:
                    70:8f:18:53:6c:65:4a:f6:35:6e:9f:6f:94:41:43:
                    2e:7f:d0:6f:a5:7a:84:32:7b:00:a8:f7:4f:df:31:
                    78:25:32:a0:ec:cf:83:dc:4d:fd:28:d7:f3:ed:c3:
                    70:b7:75:ad:51:02:40:19:f1:56:bb:18:9e:b7:44:
                    3a:6a:37:c0:8f:3e:22:9e:1e:b7:1a:41:62:c4:c8:
                    96:66:1c:06:ed:a2:38:18:7d:f7:9b:a1:e7:89:cd:
                    17:0b:d9:8b:a7:ec:e3:c2:0d:fc:e9:81:59:4a:53:
                    e4:7c:9e:0e:fd:73:e3:4b:85:94:bd:de:1e:f1:80:
                    c1:e3:46:49:aa:e3:5d:be:95:a0:4e:c8:a8:fd:f8:
                    4d:94:c5:42:85:5d:65:c8:2c:8f:39:8f:ed:0f:18:
                    38:50:ab:cd:e5:cf:fc:5e:01:e2:00:b4:32:ed:22:
                    8f:d4:b1:10:49:70:92:d4:7a:d0:00:b4:b2:b7:9a:
                    8f:88:83:cc:f6:4b:f0:ba:e5:6d:4c:90:7d:2b:65:
                    bb:dc:e4:10:c7:29:48:0c:98:76:a8:53:60:36:ec:
                    30:84:ec:c7:c3:a3:96:8b:47:46:d3:ad:25:af:28:
                    8c:88:f7:80:80:bb:a1:d1:07:5d:9b:aa:e7:d5:36:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:7B:7D:59:9F:38:8D:B2:59:63:D8:BF:E7:A9:D2:B1:4B:1B:D5
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:19:3f:c5:0a:28:b0:ec:92:46:c6:70:4e:04:e6:0c:f6:
         7b:13:48:df:95:71:b6:26:fd:24:ca:fa:ad:af:a3:76:82:42:
         43:95:c4:0c:e3:6a:37:d4:95:75:1b:16:33:30:bf:ad:ea:33:
         4e:a2:63:c6:ed:ee:53:f2:36:91:fa:fe:29:47:e7:c7:91:d4:
         35:1e:68:2f:24:26:c2:06:a0:f9:61:94:d2:f2:10:3c:b7:82:
         52:18:39:c4:52:c0:71:3f:d4:49:ac:80:80:ba:fb:03:a4:6f:
         4b:5f:84:a2:43:f9:30:3a:ca:e3:5c:98:1d:fd:b2:ac:4e:78:
         9d:11:88:fb:cb:31:c9:c3:31:3f:66:43:57:a7:bc:14:0c:04:
         24:bb:7c:e1:73:7b:31:de:10:bc:2f:25:33:a8:ba:c0:7e:25:
         ad:fa:26:52:86:24:bf:56:79:6d:7d:40:a8:be:d0:a1:f9:d0:
         9e:38:ba:e7:e9:e6:c2:51:c7:9f:45:87:c3:00:52:6c:ff:9f:
         4e:ba:6c:24:42:73:94:ca:ed:d8:a8:5c:07:55:3e:f3:eb:f4:
         99:3a:f5:42:d1:39:a6:4c:89:ae:88:62:33:59:ae:7a:6a:3c:
         8c:71:d2:2f:ca:cc:58:0b:d3:0c:9c:a9:b2:bf:b2:bc:8f:cc:
         dd:5e:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:38 2026 by rpki-client