Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File:                     wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier:          Mdu0d1JF72g4KoBYG31l5V0lA6IEkf4cMEXLBK4ZMyY=
Subject key identifier:   7B:0B:56:1C:83:3D:FA:72:A1:E2:8F:34:E1:61:59:97:15:B0:E4:54
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer:       /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial:       019F1B683F19B0A13585D371E38B3D0E8EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number:          1411
Signing time:             Wed 01 Jul 2026 02:00:44 +0000
Manifest this update:     Wed 01 Jul 2026 02:00:44 +0000
Manifest next update:     Thu 02 Jul 2026 02:00:44 +0000
Files and hashes:         1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
                          2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
                          3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: TXlJ0CNYezqQOMPVZiLtbkvmGKsbZ84D8U4sVIq7yc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:68:3f:19:b0:a1:35:85:d3:71:e3:8b:3d:0e:8e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
        Validity
            Not Before: Jul  1 02:00:44 2026 GMT
            Not After : Jul  2 02:00:44 2026 GMT
        Subject: CN=7b0b561c833dfa72a1e28f34e161599715b0e454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:1e:66:9b:69:fc:46:e7:b9:4f:96:0d:85:
                    18:c1:d9:c1:28:04:eb:ed:3e:e7:df:21:df:91:80:
                    77:9a:53:fc:8c:49:de:7f:82:80:6e:7d:35:d1:2d:
                    4b:f9:fc:a7:b9:19:4e:d2:04:bf:e9:1d:35:83:29:
                    38:1b:1e:b6:52:fa:ff:dc:08:1d:56:d1:4a:ef:46:
                    d4:d2:cb:ef:12:ae:56:77:39:80:f2:6c:03:a9:b4:
                    06:52:df:ee:98:27:90:e1:62:39:8a:93:12:51:cd:
                    81:16:b7:8a:ba:81:ce:37:60:61:88:71:44:24:b0:
                    1a:2f:8c:59:14:b0:7e:4e:4d:3c:f5:b2:32:a9:71:
                    1c:b4:a1:35:f5:36:74:8e:3e:f8:f5:40:41:38:aa:
                    f4:14:3e:1d:a0:81:ec:f3:df:13:59:ac:61:e3:9f:
                    01:fb:64:ce:95:62:e4:74:fd:aa:17:6a:d9:a6:04:
                    a3:6b:e1:e0:1b:46:34:ca:04:90:24:b8:20:e4:ad:
                    f9:81:78:e0:4f:b0:91:0a:39:d6:ff:9a:1d:12:1e:
                    0d:4c:85:4b:54:61:73:ab:7e:2d:63:d2:0f:a0:e7:
                    1d:a0:5c:cf:64:f4:64:4d:e8:63:88:02:23:a9:ea:
                    6a:1f:4a:f3:cd:2b:36:5e:65:b5:ea:f8:10:c6:9a:
                    d0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0B:56:1C:83:3D:FA:72:A1:E2:8F:34:E1:61:59:97:15:B0:E4:54
            X509v3 Authority Key Identifier:
                keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:87:78:1c:79:54:c2:69:ed:cf:31:c9:23:a2:4f:f1:9a:be:
         7d:37:08:67:25:6e:2d:5a:0e:61:f8:81:f2:00:3e:a7:29:41:
         ee:cd:dd:de:6a:a8:50:d3:fe:04:47:bc:43:78:6c:9f:67:ee:
         8c:58:77:f4:04:06:94:6c:80:bc:20:8e:f9:85:cd:fc:d5:7a:
         5c:b6:14:4d:de:d8:37:f1:33:87:3a:17:2b:b1:78:41:bf:07:
         96:d6:34:83:58:bb:c2:9e:1f:4a:12:ad:5f:a5:e8:6e:64:b4:
         75:08:26:85:c5:84:1a:2b:4c:43:39:a6:6d:be:99:e1:06:9c:
         85:ba:e9:3c:d4:22:f7:2d:5d:29:3f:04:33:4e:4c:de:10:8a:
         0a:56:a9:5a:9b:fa:e6:e1:76:9d:0a:81:9a:b2:7e:6d:30:5c:
         c5:eb:94:91:94:ef:f1:47:1b:de:00:a6:61:7d:24:4b:30:81:
         fa:8d:0e:71:45:f8:70:b8:a1:09:0f:56:0d:ec:a3:1f:37:2f:
         3a:0c:14:c3:ce:51:97:e8:cb:c4:84:87:0c:3f:d9:fc:3a:28:
         9e:c2:86:f2:36:f6:f2:6b:a1:1c:4b:55:3e:5b:3b:a6:03:e4:
         14:58:5b:f0:a8:7a:7c:6c:6a:a7:6e:5a:ce:eb:dd:f3:65:82:
         79:55:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:37:59 2026 by rpki-client