Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          VPN7VfRSmUOO/8I1sn8qAyoqTuoTmVNiIkJSCUT2J90=
Subject key identifier:   07:B3:15:75:AC:F3:BC:2B:2D:FB:1E:55:22:9B:E1:B9:39:EA:08:BB
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       019EB98FA8AA9B1082635AE5860BF2633950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0E7E
Signing time:             Fri 12 Jun 2026 02:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:00 +0000
Files and hashes:         1: 2vhUyxqvbM87FhG8VayrS_h4Ehg.roa (hash: YkNXmvC/1KhJtBfuJaW8vYi5YDAGfs1/fQlWkJ7TJpU=)
                          2: QcPtbvqsOMuV70yR3jYtDijDmuU.roa (hash: 1d2DpCFv9KtW18ls9Gaq6LAHmxDBVtcw2IbhHZ1MgIM=)
                          3: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: 0WBSACcS5qRPsbZuue/UDtfg4/AQGT97S+QQD6tmI6k=)
                          4: bRKnz6AwD1XfyLGZob58d8icW2I.roa (hash: h8iO3jw7vnUn96rCOaCL+fzZYX1R9IrS//wzYnSu/i8=)
                          5: nbFoGiZrK3Fb5OWjy4HYDx8RqMs.roa (hash: nACQPDtwAyQqYR5SdSIolmQFC3RDWoo+IhA3GV/1VsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:a8:aa:9b:10:82:63:5a:e5:86:0b:f2:63:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Jun 12 02:01:00 2026 GMT
            Not After : Jun 13 02:01:00 2026 GMT
        Subject: CN=07b31575acf3bc2b2dfb1e55229be1b939ea08bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:de:e9:94:46:2e:ef:3b:ef:cd:3f:86:7e:
                    c7:eb:cd:33:e0:7b:c1:9a:2f:ac:8b:7b:60:6c:35:
                    c9:ad:67:ef:71:a0:ee:99:42:df:7d:38:a5:cc:dc:
                    1d:a5:70:4d:20:52:96:9d:87:f7:f6:ca:d5:0d:eb:
                    f3:1c:f1:4f:21:c6:be:b2:ef:63:76:53:41:4c:ca:
                    a4:e7:88:f6:e2:75:8f:39:9a:34:58:14:b4:ee:e6:
                    a1:49:e4:c2:ff:40:56:02:70:88:e9:56:c3:3f:0f:
                    e3:b0:7a:82:63:e5:2f:73:b7:13:83:bd:8f:39:4a:
                    bc:26:91:c3:13:ef:c2:f4:ea:c7:04:09:5f:62:bd:
                    41:5c:e4:ae:a7:e1:ad:77:3f:0f:9d:5a:cb:bb:9c:
                    c2:27:56:e0:27:e9:f2:a6:8c:be:12:2a:60:ce:3d:
                    cc:7b:8b:18:5e:f1:aa:24:c8:27:08:7d:8a:6b:00:
                    22:83:82:09:78:87:f8:63:56:a8:f0:43:d2:53:53:
                    c2:7b:f8:26:e0:86:9e:d7:22:3e:98:02:87:93:d4:
                    b4:82:cc:7a:7b:e6:45:23:13:6b:23:0b:a4:af:cc:
                    c7:76:b0:bb:60:33:8a:40:19:81:90:cb:e5:fd:8d:
                    cc:c8:76:d5:e6:9e:7d:aa:d5:41:ec:f3:13:47:50:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:15:75:AC:F3:BC:2B:2D:FB:1E:55:22:9B:E1:B9:39:EA:08:BB
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d9:5a:e1:10:85:48:73:f7:fe:b7:7c:b3:fb:25:2d:56:cc:
         78:a6:68:e4:0c:1b:f3:97:b4:7a:5f:21:0f:8e:04:dd:1c:16:
         dd:9b:e8:11:33:58:02:df:2d:ba:eb:da:24:65:8c:c1:03:b5:
         26:89:54:b2:db:e7:69:f7:45:13:37:6c:b6:9d:cc:df:7f:f1:
         d4:b9:45:41:80:f7:02:ba:89:f5:01:da:01:38:cd:3a:72:ea:
         31:85:fd:ae:af:bb:c3:f8:fe:e5:bc:19:0f:d9:4a:6d:5d:74:
         c6:81:dd:c3:57:9a:8c:f3:f6:01:f6:9a:f1:8c:e0:df:01:dc:
         24:ca:a3:57:18:4a:0b:36:6a:20:d0:20:ff:50:7a:53:5c:8d:
         4a:d5:22:b9:ce:a6:b3:71:34:60:cb:a5:da:3d:01:b8:5f:44:
         be:fa:21:21:49:7c:d5:b6:8b:67:89:07:2a:1c:3c:99:db:5f:
         5e:86:b7:de:93:16:2b:1b:c2:af:c4:68:c2:cd:92:f5:52:93:
         39:bc:95:85:8b:b4:12:1f:27:a5:2c:68:46:a7:ce:87:32:d7:
         b7:02:b6:1b:09:11:39:e1:98:7d:40:1d:50:f2:d0:d6:ce:d1:
         c7:3b:29:4d:15:39:97:11:18:50:77:5e:ee:9e:10:f9:d2:62:
         22:c7:a9:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j6iqmxCCY1rlhgvyYzlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh
YWE0NjUwHhcNMjYwNjEyMDIwMTAwWhcNMjYwNjEzMDIwMTAwWjAzMTEwLwYDVQQD
EygwN2IzMTU3NWFjZjNiYzJiMmRmYjFlNTUyMjliZTFiOTM5ZWEwOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A7e6ZRGLu87780/hn7H680z4HvB
mi+si3tgbDXJrWfvcaDumULffTilzNwdpXBNIFKWnYf39srVDevzHPFPIca+su9j
dlNBTMqk54j24nWPOZo0WBS07uahSeTC/0BWAnCI6VbDPw/jsHqCY+Uvc7cTg72P
OUq8JpHDE+/C9OrHBAlfYr1BXOSup+Gtdz8PnVrLu5zCJ1bgJ+nypoy+Eipgzj3M
e4sYXvGqJMgnCH2KawAig4IJeIf4Y1ao8EPSU1PCe/gm4Iae1yI+mAKHk9S0gsx6
e+ZFIxNrIwukr8zHdrC7YDOKQBmBkMvl/Y3MyHbV5p59qtVB7PMTR1AfhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAezFXWs87wrLfseVSKb4bk56gi7MB8GA1UdIwQY
MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt
NmFkMzI1MmExNDI3LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3
LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNla4RCF
SHP3/rd8s/slLVbMeKZo5Awb85e0el8hD44E3RwW3ZvoETNYAt8tuuvaJGWMwQO1
JolUstvnafdFEzdstp3M33/x1LlFQYD3ArqJ9QHaATjNOnLqMYX9rq+7w/j+5bwZ
D9lKbV10xoHdw1eajPP2Afaa8Yzg3wHcJMqjVxhKCzZqINAg/1B6U1yNStUiuc6m
s3E0YMul2j0BuF9EvvohIUl81baLZ4kHKhw8mdtfXoa33pMWKxvCr8Rows2S9VKT
ObyVhYu0Eh8npSxoRqfOhzLXtwK2GwkROeGYfUAdUPLQ1s7RxzspTRU5lxEYUHde
7p4Q+dJiIsepEw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:44 2026 by rpki-client