Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File:                     wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier:          KRUXf4zwheOIDxLRM3hdyOVnk7IdD/q2StWeY8zT1WA=
Subject key identifier:   18:54:14:0E:4C:22:22:9C:8C:21:C4:00:1D:AF:6F:E3:C6:9E:6D:CA
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer:       /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial:       019F197A3D2CC222250483417116A1F892D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number:          1410
Signing time:             Tue 30 Jun 2026 17:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:09 +0000
Files and hashes:         1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
                          2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
                          3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: XWNUqQhPeZa5AwUaqeUEw52MWQy6odDXK13P3leGdQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 17:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:3d:2c:c2:22:25:04:83:41:71:16:a1:f8:92:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
        Validity
            Not Before: Jun 30 17:01:09 2026 GMT
            Not After : Jul  1 17:01:09 2026 GMT
        Subject: CN=1854140e4c22229c8c21c4001daf6fe3c69e6dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8d:05:da:fd:5d:b1:35:eb:6d:26:bc:d7:7d:
                    89:84:27:c0:81:e8:b6:28:43:cb:29:aa:5e:3f:bd:
                    8f:ec:03:dc:19:bf:60:6d:2d:ff:e5:01:76:77:7d:
                    20:93:8a:be:2a:7d:69:f8:c6:a7:e1:d9:37:4a:be:
                    eb:fd:ed:7b:3c:a7:2d:7f:e7:3e:e4:0e:b3:1a:d4:
                    92:d5:43:2a:45:62:69:3a:65:0b:07:f4:27:32:85:
                    0a:87:ac:b9:d1:6b:af:bb:d6:1e:8e:85:2b:0e:40:
                    d8:17:25:3a:ca:1b:b4:d4:a5:59:f6:08:47:1e:7f:
                    5d:c7:d8:50:9f:98:49:1f:86:a3:91:c7:0b:78:0d:
                    82:a0:ec:3f:f1:0c:45:92:3a:f8:32:a8:36:2b:ad:
                    40:a9:9f:17:c1:d2:c4:f4:5f:ea:07:0e:2f:f6:5d:
                    20:fb:6c:d7:b1:f1:6f:de:c3:6c:8b:65:90:0a:2b:
                    9b:41:82:84:f3:46:ee:a2:49:99:c3:aa:2b:d3:dc:
                    33:87:c2:ff:fc:15:38:56:6d:9a:29:de:00:12:61:
                    6b:6f:09:d9:29:ef:28:d3:98:ad:b6:5b:d0:e5:ef:
                    40:d4:8d:8d:22:22:93:b8:13:3d:1d:d9:a3:d6:1c:
                    a7:cc:28:32:ea:f7:f7:f2:ca:e2:9d:fd:a1:69:d2:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:54:14:0E:4C:22:22:9C:8C:21:C4:00:1D:AF:6F:E3:C6:9E:6D:CA
            X509v3 Authority Key Identifier:
                keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:51:7e:7f:b1:0c:70:8e:85:ab:02:36:c7:47:84:da:e2:8b:
         33:81:b4:6a:1a:87:ed:85:5f:1e:d8:b6:ef:c9:6c:1c:c2:b6:
         ba:1a:7b:c7:a4:18:74:7a:4d:35:98:51:4a:c0:12:28:bd:bd:
         7c:de:9b:cf:cc:4f:81:c4:b3:9e:e4:5c:bb:da:f5:06:43:ad:
         b6:9c:80:53:b1:85:e7:66:48:59:e6:ee:e1:6c:95:15:49:f9:
         45:6a:51:c2:0e:ac:1b:9d:cf:e0:8a:2c:27:22:9f:7d:87:e7:
         f6:2f:7a:88:da:f0:09:f9:b3:3b:d5:e5:62:37:e9:31:7c:f6:
         26:94:1f:74:1f:ff:d8:97:5d:b3:0f:0d:cf:e9:e4:0a:40:5b:
         1d:91:2a:ef:6b:3b:cf:a6:38:4c:99:55:2e:06:37:5b:b8:89:
         96:fd:44:b5:d7:c5:7a:95:95:55:ba:1e:37:31:ab:fe:27:e1:
         69:fe:5e:1c:ce:d7:2e:95:5f:bb:2a:97:84:a8:33:9e:5c:ee:
         fa:b5:4d:57:22:77:56:33:bf:d4:1d:d2:55:5f:c8:94:ce:f2:
         05:7b:04:c3:3e:47:b8:30:fa:c4:a0:f2:f4:d4:e1:a6:d8:4a:
         28:c8:63:00:43:d2:22:26:e8:d4:e9:3e:64:cc:9e:33:11:ff:
         7e:58:3e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Zej0swiIlBINBcRah+JLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjYwNjMwMTcwMTA5WhcNMjYwNzAxMTcwMTA5WjAzMTEwLwYDVQQD
EygxODU0MTQwZTRjMjIyMjljOGMyMWM0MDAxZGFmNmZlM2M2OWU2ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I0F2v1dsTXrbSa8132JhCfAgei2
KEPLKapeP72P7APcGb9gbS3/5QF2d30gk4q+Kn1p+Man4dk3Sr7r/e17PKctf+c+
5A6zGtSS1UMqRWJpOmULB/QnMoUKh6y50Wuvu9YejoUrDkDYFyU6yhu01KVZ9ghH
Hn9dx9hQn5hJH4ajkccLeA2CoOw/8QxFkjr4Mqg2K61AqZ8XwdLE9F/qBw4v9l0g
+2zXsfFv3sNsi2WQCiubQYKE80buokmZw6or09wzh8L//BU4Vm2aKd4AEmFrbwnZ
Ke8o05ittlvQ5e9A1I2NIiKTuBM9Hdmj1hynzCgy6vf38srinf2hadLyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhUFA5MIiKcjCHEAB2vb+PGnm3KMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1F+f7EM
cI6FqwI2x0eE2uKLM4G0ahqH7YVfHti278lsHMK2uhp7x6QYdHpNNZhRSsASKL29
fN6bz8xPgcSznuRcu9r1BkOttpyAU7GF52ZIWebu4WyVFUn5RWpRwg6sG53P4Ios
JyKffYfn9i96iNrwCfmzO9XlYjfpMXz2JpQfdB//2Jddsw8Nz+nkCkBbHZEq72s7
z6Y4TJlVLgY3W7iJlv1EtdfFepWVVboeNzGr/ifhaf5eHM7XLpVfuyqXhKgznlzu
+rVNVyJ3VjO/1B3SVV/IlM7yBXsEwz5HuDD6xKDy9NThpthKKMhjAEPSIibo1Ok+
ZMyeMxH/flg+3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:34:32 2026 by rpki-client