Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
File:                     wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json)
Hash identifier:          5yzxHXC/yjaXfQiUSM2za5vn/ZQK04Bt54l0tz1Ma2c=
Subject key identifier:   AA:57:C8:84:A9:76:2D:73:EA:0A:43:E1:07:9F:36:A1:19:A1:8B:2B
Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
Certificate issuer:       /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Certificate serial:       019EBA6B666E3D74121B7EE99BBDE30789D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
Manifest number:          18E9
Signing time:             Fri 12 Jun 2026 06:01:01 +0000
Manifest this update:     Fri 12 Jun 2026 06:01:01 +0000
Manifest next update:     Sat 13 Jun 2026 06:01:01 +0000
Files and hashes:         1: 9pt5Bi5CAiW7TpMLmtUGaccMt8I.roa (hash: 77PFwHWJqDe9UTrzBkk6ZTKXRRD9iv6QhbadNXN0T+g=)
                          2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: wuqb/JTvD5R5jDQCZPsHqiJpfT6070dwosnK6GlpUqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:66:6e:3d:74:12:1b:7e:e9:9b:bd:e3:07:89:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
        Validity
            Not Before: Jun 12 06:01:01 2026 GMT
            Not After : Jun 13 06:01:01 2026 GMT
        Subject: CN=aa57c884a9762d73ea0a43e1079f36a119a18b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:b4:43:58:90:f5:ba:e1:d4:7a:e3:62:bd:
                    68:4e:e2:aa:c1:6a:25:75:d8:3b:ae:9b:28:25:e1:
                    73:24:6d:1c:f3:08:31:dc:2d:be:00:d6:d9:a4:5f:
                    ce:11:84:dc:fa:41:a1:ad:91:77:9c:97:6e:0b:3d:
                    8c:ac:23:83:c1:45:ed:ab:e6:22:1f:d6:0a:4d:ad:
                    3b:01:5f:a2:b7:9e:5f:04:b0:10:1c:49:d5:d8:f7:
                    ae:e4:b7:9c:e9:06:cd:4b:d1:a7:6c:b1:c0:5f:4f:
                    e9:a1:94:16:63:d4:44:26:75:5e:50:cf:06:b1:6f:
                    cf:7b:e7:85:24:d6:60:70:8e:c6:75:51:00:7a:82:
                    f4:42:65:26:69:ae:2f:25:ff:13:0f:2d:28:44:b6:
                    c2:07:56:8f:03:01:3e:36:2d:5f:3b:36:e7:06:b6:
                    dc:1b:11:f0:96:4e:40:0d:7d:ca:98:2e:28:1b:3f:
                    cf:92:cb:9b:76:5c:19:b5:59:7e:91:0e:9b:8f:dd:
                    aa:72:1b:73:6e:c0:ef:06:62:09:18:16:f5:50:b9:
                    3a:96:15:9b:54:0b:cc:8b:e8:c7:a2:e7:c2:90:9b:
                    66:25:7e:46:0a:14:00:d4:18:d2:75:d6:e5:01:c3:
                    56:08:c2:a9:1c:ef:2c:81:30:0d:c7:1a:db:fd:4b:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:57:C8:84:A9:76:2D:73:EA:0A:43:E1:07:9F:36:A1:19:A1:8B:2B
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:59:7b:ee:2c:95:45:64:8d:26:e6:a5:d0:68:b7:05:92:89:
         62:a9:98:60:7e:d4:80:4b:87:1c:09:b6:10:70:5d:23:4e:e9:
         ed:18:8b:3b:68:60:c6:84:4f:9d:2d:64:c9:15:c9:7c:41:c0:
         fe:1c:6f:98:32:c2:84:91:bd:87:94:3c:61:e0:b6:dc:67:20:
         ae:42:d1:7d:9d:f8:44:ef:91:df:ec:bc:b0:9f:90:55:d5:fe:
         8b:43:67:22:58:0b:97:c8:2c:68:f7:70:b2:e3:dc:ea:14:9d:
         b3:b8:43:0f:00:3d:f9:ca:e4:c1:0b:44:4d:02:8d:3d:15:03:
         e0:e8:47:3d:dd:8a:fe:7e:e7:ba:1a:1e:dd:40:e4:1c:84:e9:
         54:49:0b:9d:77:cf:fd:9a:90:f6:8a:d6:9d:9d:e9:32:a3:d2:
         83:65:3e:e2:6b:54:ef:3d:9f:6a:69:e8:ab:4b:b6:bd:ae:04:
         5c:8f:56:ae:57:11:4a:39:de:8e:20:ba:f5:8c:3d:55:80:26:
         41:d3:4c:14:02:fe:78:66:b3:cf:58:e7:82:5f:2d:da:a7:57:
         ff:fb:99:cf:ab:26:1f:95:aa:6d:22:3a:57:71:e2:14:c1:a2:
         da:ff:ef:19:81:a5:5f:54:a8:a0:de:2a:35:fa:49:e1:fc:8e:
         cd:03:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:59:26 2026 by rpki-client