Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
File:                     WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft (raw, json)
Hash identifier:          tQKV8xIA8JiQeBNazA+pRT5qd9zKu/uewpzWZabg95w=
Subject key identifier:   75:EB:64:72:AF:3C:70:50:78:49:5C:EF:5D:69:FC:DE:26:A9:09:43
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Certificate issuer:       /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial:       019F916DA8F5174B14D04F9B00FA04EDBDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:50 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:50 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:50 +0000
Files and hashes:         1: HZsbbCQV184FMKGhunsSvE-BnQg.roa (hash: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=)
                          2: WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl (hash: H+aOzL8pYe4ou40AtvJD1tZgT8zoodIUNLv/azAxa6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:a8:f5:17:4b:14:d0:4f:9b:00:fa:04:ed:bd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
        Validity
            Not Before: Jul 24 00:01:50 2026 GMT
            Not After : Jul 25 00:01:50 2026 GMT
        Subject: CN=75eb6472af3c705078495cef5d69fcde26a90943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:bd:6f:21:4e:c3:b6:96:96:5e:24:f0:6e:
                    78:44:96:cb:ff:ac:e8:bc:c5:2b:ab:46:3e:b0:61:
                    20:a5:d6:04:05:24:66:ba:c6:a3:3f:61:90:c1:ea:
                    a1:31:10:3a:63:eb:f4:8c:0a:25:4e:dd:37:67:d1:
                    97:60:68:38:3e:94:3a:75:b0:e1:a7:ea:65:39:15:
                    a6:ac:23:7f:13:ef:03:02:7f:f9:fb:d6:24:ae:66:
                    6b:6f:25:48:f2:8d:6d:95:26:ed:57:a6:a2:5f:65:
                    88:f0:32:c1:8d:3c:45:0d:c8:aa:ce:af:ee:81:63:
                    f8:e7:3d:9a:5d:4c:b4:35:88:d1:00:5e:69:e7:a8:
                    8c:91:38:cd:55:87:08:8a:75:5d:5e:91:94:b6:b6:
                    70:4b:9d:ea:ef:9a:8c:8f:84:28:ad:f8:33:b9:6c:
                    13:b0:be:9f:bf:e6:77:7c:27:35:7b:92:65:ad:bf:
                    66:09:67:d2:b3:32:bc:0f:f1:75:b9:84:44:58:bf:
                    fc:c3:8a:fa:6c:c6:ee:25:2a:a2:b5:3b:fc:52:7c:
                    ac:9f:81:54:dc:76:e4:2e:19:3f:c8:14:7c:ed:0e:
                    07:60:1a:29:6c:26:db:14:de:d2:a5:3c:f4:5f:7d:
                    2e:1c:f4:c1:24:5e:f7:40:38:4a:5b:4b:59:00:0d:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EB:64:72:AF:3C:70:50:78:49:5C:EF:5D:69:FC:DE:26:A9:09:43
            X509v3 Authority Key Identifier:
                keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:ab:bb:63:fc:4e:3e:0c:1b:2a:12:d9:51:22:26:ef:06:
         aa:1a:49:4d:38:35:ab:69:be:5e:82:88:e2:a4:97:b7:b9:7c:
         a4:26:a8:a2:e1:66:6f:22:fb:7a:3c:62:f9:41:ff:fa:ae:3b:
         66:7e:83:8b:e2:43:15:51:d0:2a:1e:7c:3b:c9:e1:b0:1c:7c:
         f3:2c:89:4f:66:74:9d:53:e5:92:1d:e7:bc:24:3f:9b:40:73:
         ae:d5:57:73:0e:17:2a:25:48:80:9b:eb:62:29:79:5a:d2:96:
         3a:92:e8:7a:f8:8e:78:c7:e0:df:c9:99:b3:30:70:de:9a:c2:
         56:93:e0:23:18:de:22:2c:23:34:1c:18:84:c8:a6:eb:06:36:
         df:df:00:3c:c2:ba:0f:81:72:8e:59:6c:eb:ab:8d:1d:2a:18:
         41:8b:06:b0:76:ca:f1:80:da:fa:03:56:57:18:ac:1d:c9:7b:
         a2:8b:40:59:b2:f9:14:4d:ee:f9:54:8e:50:a7:d9:f7:b6:7c:
         29:30:10:8e:1b:9a:5f:ea:a5:6b:1b:0d:e8:ff:98:1a:3e:9b:
         82:aa:e2:d6:98:c2:21:01:ee:6e:e9:98:92:32:ab:7f:9c:d0:
         c9:a3:e0:0d:d2:8e:4a:ef:75:fa:81:9a:94:5b:19:c2:ed:17:
         22:22:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:10 2026 by rpki-client