Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          crN+riaiQIk1has4Wm0DxCcDp9SoVCBfFSCBOp5BaC8=
Subject key identifier:   50:40:9B:2D:A8:13:AF:E4:37:22:3D:F9:9B:BD:AC:AB:A6:20:2E:4E
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019EB9216B45DE9EF5C8C066EE44A4A596EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          10B2
Signing time:             Fri 12 Jun 2026 00:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:35 +0000
Files and hashes:         1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: J5Ue9wlwnjdkS66y4FhbKTe3/QwtM4FdSPKZa1MWdqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:6b:45:de:9e:f5:c8:c0:66:ee:44:a4:a5:96:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Jun 12 00:00:35 2026 GMT
            Not After : Jun 13 00:00:35 2026 GMT
        Subject: CN=50409b2da813afe437223df99bbdacaba6202e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:ab:c7:64:d2:7d:39:85:43:7b:3d:ca:2e:
                    e9:dc:95:5e:d0:73:4c:5c:84:4f:b6:60:6a:c9:c4:
                    ac:ea:80:21:0f:91:e4:19:e8:c6:7b:9c:06:99:fe:
                    c5:b4:01:ef:e8:14:4a:ad:e2:c8:8b:7c:3f:06:b3:
                    e7:5f:86:66:c6:ef:c4:5d:fa:e5:ca:43:2b:c5:17:
                    36:f4:ce:14:99:fa:66:72:4c:4a:6e:b7:7e:dc:55:
                    f4:9f:59:c2:bf:f8:70:9a:e8:10:eb:aa:12:54:d4:
                    f9:df:e7:c3:fb:cd:bb:df:0a:89:e3:02:8c:bd:70:
                    3f:d2:54:ea:e9:60:9d:1e:e7:c1:2c:a2:67:1c:fb:
                    17:50:a5:ba:56:2e:69:02:88:b0:51:3b:81:df:e3:
                    4b:fb:aa:3c:f8:5a:40:a2:ab:5b:5f:07:48:6d:81:
                    59:3b:99:23:9a:9f:06:86:a6:52:c5:7f:2a:07:94:
                    d0:43:aa:81:bd:1d:0f:bb:87:df:bb:10:8b:4b:11:
                    c1:41:e0:b8:0c:2b:bf:5f:a9:65:48:40:7d:a0:46:
                    b1:12:e3:40:dd:ac:e9:d5:ff:a2:32:4d:84:06:e4:
                    bc:f3:8d:88:79:27:48:db:06:c6:3a:af:58:f0:06:
                    8a:76:39:e4:e7:7b:e1:69:a1:1f:b9:eb:d2:e1:38:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:9B:2D:A8:13:AF:E4:37:22:3D:F9:9B:BD:AC:AB:A6:20:2E:4E
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:48:f4:43:41:3d:21:9e:84:b9:77:46:63:9e:33:3b:57:
         5f:8f:ca:62:0c:0c:d5:1e:e3:2e:01:8b:ea:a4:2d:bb:0c:03:
         db:32:34:e7:2a:cd:9f:75:51:c1:9e:30:dd:3c:ca:7c:43:77:
         22:6a:96:61:66:e9:97:08:54:34:52:51:5c:18:a0:4a:b5:69:
         6d:00:66:59:0e:e3:49:44:a5:88:de:79:2a:62:1f:0a:0b:4d:
         34:36:fb:a1:2c:2e:2c:e8:b5:85:aa:0e:d2:b7:71:1c:3b:17:
         37:87:7c:38:43:02:23:7d:23:58:0c:c6:37:0c:49:5b:d4:07:
         ba:74:df:cc:a5:57:73:91:b1:01:f9:0a:c1:c6:18:15:3f:c0:
         26:a5:25:61:50:2d:1f:a9:36:9b:03:55:05:9b:67:cc:a4:e2:
         5e:d9:7d:5c:39:41:6c:79:d4:46:8f:0f:6a:1f:a7:62:9a:9c:
         2e:7a:96:7a:bd:0c:f9:e3:b2:5c:8d:76:71:72:f6:7e:01:4d:
         25:52:ef:4a:ed:38:70:4a:39:99:25:4e:81:25:de:d4:4c:aa:
         7e:04:ac:70:4d:65:82:34:2b:af:cf:f2:02:73:2b:a0:e1:18:
         68:2a:f0:19:ea:4d:d6:e0:a4:47:d1:9b:71:c8:e7:00:1f:13:
         f9:ff:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:28 2026 by rpki-client