Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File:                     wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier:          FlnsV7E7UtuOeBLWGlIidxldg8bZUhrSz+D+3YaYgqM=
Subject key identifier:   C5:32:BE:FA:D8:5D:F3:30:60:C7:B6:2F:EF:CD:16:57:73:6A:F9:39
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer:       /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial:       019F9580065FEF0A619B5F0342AF89B9121B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 19:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:23 +0000
Files and hashes:         1: iT1-zXlrjYa55ZvQVt6NmIOQm5I.roa (hash: TsRJtIg/mzMDY+LVA2YyZfX1z4fLu7FY3DeWJy1KmLg=)
                          2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: Uhw+5l/9cwK5yZOfC03INqNAlVqWztB1wfYd393cbuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:06:5f:ef:0a:61:9b:5f:03:42:af:89:b9:12:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
        Validity
            Not Before: Jul 24 19:00:23 2026 GMT
            Not After : Jul 25 19:00:23 2026 GMT
        Subject: CN=c532befad85df33060c7b62fefcd1657736af939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:8b:a4:10:c3:d5:7e:7c:87:24:dc:8b:91:
                    2b:0e:a4:ae:99:63:7e:52:88:c6:52:fc:ed:59:88:
                    f4:80:2b:0e:35:60:1c:46:74:79:fb:46:47:9d:63:
                    b4:38:d0:15:bf:ea:ea:08:c6:fb:27:f9:8c:3d:bf:
                    c9:b6:24:b3:fd:71:16:87:73:ea:22:35:a4:cb:40:
                    5e:c7:42:6b:7b:5b:f9:e2:be:63:f5:50:2a:e8:81:
                    c3:07:f9:d0:3f:79:73:42:f1:67:37:14:9c:f3:ba:
                    ed:6b:ce:4d:20:1e:68:53:d2:c5:62:97:07:a1:95:
                    95:c6:37:db:b5:af:69:0d:04:8c:c4:61:b4:ce:7f:
                    e0:65:c0:00:31:a0:5b:4d:ef:98:6f:d8:f3:b9:42:
                    5f:10:ce:75:cb:bd:0e:f3:be:56:dd:48:46:89:49:
                    2e:a8:35:b4:f8:d4:9c:be:1c:8d:78:82:f2:70:5c:
                    99:56:9c:fd:1b:36:75:b4:7b:f7:00:d4:4b:83:c9:
                    c7:9a:2f:ac:bd:c5:b1:a6:bd:6f:41:2c:13:e2:0d:
                    da:a3:0e:d8:43:e8:70:3d:8b:e1:d3:d1:44:59:92:
                    07:44:e7:5e:11:ab:2f:91:02:53:c3:55:41:5a:1e:
                    7e:a6:66:d7:1b:1e:71:77:75:74:01:72:4a:01:aa:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:32:BE:FA:D8:5D:F3:30:60:C7:B6:2F:EF:CD:16:57:73:6A:F9:39
            X509v3 Authority Key Identifier:
                keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1b:0a:ce:1f:ce:c9:fe:a1:f5:4a:09:dd:4a:52:b4:08:64:
         95:50:66:38:c8:b0:5f:86:74:fa:5a:0f:0b:37:e5:28:1c:b2:
         d8:15:de:e9:c9:c9:43:96:03:65:f0:5c:48:21:25:16:01:ec:
         bd:e8:1b:6d:84:44:d1:27:27:e1:9e:bb:16:6e:a7:0c:43:dd:
         6f:e8:00:31:cd:09:dc:e4:9a:f2:e8:05:a9:e3:60:cc:39:fe:
         ba:62:0a:5d:78:19:9f:e1:fc:0f:13:d7:a5:18:ae:eb:61:3e:
         6a:a4:b7:31:14:a5:c9:1b:d4:95:7a:d5:b8:2a:ba:33:52:0c:
         94:a0:a2:96:d0:2e:3e:f4:59:e9:f3:c2:9d:e0:ce:23:34:22:
         71:84:2b:2b:af:1d:84:09:4d:a4:45:c4:3a:0f:8f:c7:ac:ba:
         e1:f0:6d:88:8c:42:f8:43:3e:61:ca:bc:7d:25:d3:7e:3c:be:
         8e:64:6e:ca:f4:8f:67:be:78:ab:22:80:ce:6a:1c:e6:64:7c:
         1c:83:f3:fe:f6:c8:37:f5:08:da:67:64:4f:83:39:31:fb:4f:
         40:6f:69:66:c6:1c:20:bd:b0:c8:5f:98:36:64:5e:7a:53:45:
         67:0e:36:af:4c:57:ae:af:a4:bc:05:f5:b0:a0:95:f6:43:8c:
         42:ef:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:39 2026 by rpki-client