Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
File:                     W8JyS6H1jw-yOew59uGgnVgJRFg.mft (raw, json)
Hash identifier:          yp3ooVAhDmtHvRQUJLrMIs/G9UEVtL16Lda23y0pOOs=
Subject key identifier:   0F:7B:6C:BF:8F:A1:03:10:78:FC:A6:76:AF:10:81:C6:10:DC:DF:C0
Authority key identifier: 5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58
Certificate issuer:       /CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
Certificate serial:       019F916DC83772CC6BEF3D3BBCA7BDED7E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:58 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:58 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:58 +0000
Files and hashes:         1: 1_cbd91siaKvf9bZfnMNGMXekDs.roa (hash: oApWa2Po6QpwY0bFHzrByL4PHHcG7yvJrrV17eY2uxs=)
                          2: JpauRmDmCbHFVnVEUgKKhJVZS6o.roa (hash: xuDXXboJS3Rx8iTCxFhoV4xpzws2mEM5Qz8xariIxSc=)
                          3: W8JyS6H1jw-yOew59uGgnVgJRFg.crl (hash: vYXU/BeAFhjIxT7oO9oMLq4b4cuco+ABBx4TgDoCWro=)
                          4: nedAvjSTHRfCA6BQnYMOfjHM510.roa (hash: 0jHmyuD0j5L3+e/aCv3nj2pmKJJFa3QQUJhop86jMVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:c8:37:72:cc:6b:ef:3d:3b:bc:a7:bd:ed:7e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
        Validity
            Not Before: Jul 24 00:01:58 2026 GMT
            Not After : Jul 25 00:01:58 2026 GMT
        Subject: CN=0f7b6cbf8fa1031078fca676af1081c610dcdfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:34:0e:f6:a6:d5:a4:ab:6b:eb:51:b5:10:
                    f7:11:c7:ae:50:fe:09:89:1e:96:e2:fe:84:41:e7:
                    0d:1e:e9:81:8c:8c:10:fc:0e:92:ef:a3:44:c8:e9:
                    84:13:e2:e7:8c:16:ae:12:e8:cc:3d:fe:06:b6:d0:
                    2d:b9:cd:a2:1e:54:f5:d9:56:84:12:48:1d:ea:91:
                    22:3c:f9:4f:fa:7c:bb:5b:e2:2e:37:d1:1d:84:72:
                    e9:5d:eb:f5:75:3a:12:53:bd:51:9f:62:15:fe:2c:
                    b8:c4:10:70:8c:27:2f:c7:b9:84:ca:6f:a3:11:6c:
                    8f:ad:7f:84:a8:2d:25:55:49:dd:9e:7e:dd:a8:0e:
                    d2:84:c2:0d:85:50:02:43:af:f7:bc:d9:c5:5e:21:
                    c0:2d:52:bd:be:ee:e3:6b:a8:1d:60:aa:2c:a3:5b:
                    5f:f3:88:97:51:99:02:f8:a9:06:7d:45:73:34:1c:
                    fe:54:cb:86:97:ba:ad:e7:1b:52:1e:98:72:1f:a5:
                    36:e8:ce:ba:c6:86:e8:22:52:f3:43:8a:db:9f:c9:
                    a3:07:91:e4:aa:dc:08:3f:92:30:b3:f1:fd:9e:b6:
                    3e:14:c9:8f:2d:8e:1f:27:d8:bc:a2:aa:6f:bc:3f:
                    5b:1d:92:b5:0d:76:5c:5b:88:59:66:e5:9d:5b:d2:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7B:6C:BF:8F:A1:03:10:78:FC:A6:76:AF:10:81:C6:10:DC:DF:C0
            X509v3 Authority Key Identifier:
                keyid:5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:e1:f3:ed:e8:88:ee:0c:92:da:27:5e:19:5d:74:02:08:
         e0:16:a8:91:95:bf:cd:51:e5:af:f7:17:de:2e:eb:4d:9a:89:
         68:cb:8e:59:2d:a6:9b:b1:9d:76:ef:34:1c:ad:89:6f:79:4e:
         e5:14:13:2c:f1:50:82:ef:55:fb:76:a4:bd:ef:42:85:18:3b:
         ae:0e:4c:fe:7f:0d:16:2b:1d:18:cf:95:ac:3e:aa:fa:a6:9a:
         87:e5:9a:d5:4f:f6:48:93:9b:67:62:e3:80:51:8f:16:0e:88:
         f5:4f:50:de:e8:eb:5b:df:55:27:4f:d4:da:1e:77:7b:fc:18:
         c7:9d:8f:74:01:4c:0b:39:3e:fa:9c:00:77:4d:12:bd:4b:de:
         13:7f:f7:69:23:a7:b1:4f:27:c3:e9:f2:38:5f:7e:1a:84:c1:
         f4:87:e6:4d:c8:93:b7:9b:12:cc:1d:f6:75:cb:a0:e9:23:aa:
         2b:31:9a:c2:55:fd:d4:20:fc:c1:ec:d9:bd:01:33:ef:b5:df:
         7c:60:55:1c:de:b0:3b:f7:6c:57:aa:4d:da:54:e7:eb:12:c1:
         1a:f7:d2:2d:e4:68:b2:20:de:4f:ef:5a:24:af:ba:22:e6:72:
         d0:b5:88:37:e4:5c:35:fb:88:14:a3:51:28:f7:1e:d4:72:d4:
         dd:ab:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:08 2026 by rpki-client