Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File:                     w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier:          bhFoNYl4pthPXIW0r7hHEmM9L/ARijCdBGmaiJ9pmUA=
Subject key identifier:   DA:DA:76:B9:0C:C6:76:E7:ED:AB:8A:C4:28:0E:D4:A4:1D:9C:17:FD
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       019E9BBC8FB191AF5CC3BED851AF64800518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number:          15DA
Signing time:             Sat 06 Jun 2026 07:01:26 +0000
Manifest this update:     Sat 06 Jun 2026 07:01:26 +0000
Manifest next update:     Sun 07 Jun 2026 07:01:26 +0000
Files and hashes:         1: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (hash: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI=)
                          2: adEMxHyupcifqh018PDSo4aZYRU.roa (hash: 2ejGSNPMnDgazqPRclsg72M/nQyRhAE01Ub1Oiox0Y0=)
                          3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: AMb/PXWYUZk9dBGxIvxQVB7bzLJ4hu4Pc3BrlZgBlZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:bc:8f:b1:91:af:5c:c3:be:d8:51:af:64:80:05:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Jun  6 07:01:26 2026 GMT
            Not After : Jun  7 07:01:26 2026 GMT
        Subject: CN=dada76b90cc676e7edab8ac4280ed4a41d9c17fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:2f:75:eb:89:07:83:84:19:ba:55:01:1b:
                    ad:55:f3:21:d4:cb:c3:74:82:0e:36:44:66:e4:b1:
                    bd:03:34:7f:9a:aa:8b:0d:71:ab:91:26:ec:96:b5:
                    2c:e5:b9:b6:8e:cd:bd:ed:5f:13:45:81:e2:fa:ed:
                    1c:c1:7f:ac:f8:6d:b9:31:23:53:7f:1f:5d:c7:b8:
                    93:33:8f:bc:ce:4d:47:95:99:e8:cf:b5:36:a0:f4:
                    69:23:d5:8a:14:ed:ba:6a:51:7d:b0:5d:7b:be:4d:
                    56:a6:68:1a:99:5c:8c:7c:6e:1e:5a:25:1a:c4:88:
                    c8:e7:73:8c:a0:4b:35:97:91:0a:91:b2:90:2c:c3:
                    4e:08:5c:05:60:89:85:77:f3:7d:04:b4:56:02:e2:
                    e0:a8:ad:b6:b0:1a:be:80:bd:2c:aa:aa:f4:12:61:
                    83:ed:e9:7a:15:95:d1:3d:04:eb:6f:2b:73:4a:c7:
                    cb:2e:94:3a:3c:32:66:74:d0:c4:de:57:af:08:13:
                    b9:6e:74:d3:c9:58:0e:3c:d2:a1:bd:09:df:6a:5d:
                    8b:5b:5f:8b:cc:26:27:6e:4d:12:c6:f4:ed:76:8b:
                    f1:bd:58:47:f2:1b:f9:40:73:9d:57:36:83:77:69:
                    d9:df:7b:c8:7e:ab:49:26:e2:7e:8c:5f:ec:7d:16:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:76:B9:0C:C6:76:E7:ED:AB:8A:C4:28:0E:D4:A4:1D:9C:17:FD
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:9f:00:dc:41:1d:6b:bf:c3:20:b3:82:3b:68:5f:43:95:
         19:eb:80:c8:a6:f8:74:4b:06:0c:55:31:0f:c4:68:68:f5:95:
         09:20:7d:3f:fe:9a:06:78:d2:8a:49:f9:f7:40:a3:f0:56:25:
         88:95:19:38:0b:b1:b4:38:c6:e2:1e:c2:fb:67:44:9a:4f:81:
         9a:f5:a6:7d:42:a2:b0:9a:fb:bf:de:33:9f:37:99:c0:c1:ab:
         e7:c1:d4:2f:60:f7:fa:11:a0:d9:ec:ec:c1:02:fe:6d:4b:a3:
         71:c3:cc:5f:20:fa:f4:8a:ce:48:96:e1:c2:ca:94:15:66:f4:
         5f:e7:70:f9:a6:75:55:0c:82:f9:37:49:e5:e9:ca:59:17:4a:
         ae:4b:f9:08:a0:b8:c1:6e:0b:19:a1:df:4a:8a:45:48:fe:35:
         86:de:ba:55:1f:e8:f9:76:d2:16:07:fd:e8:3d:32:da:8c:ea:
         45:c2:e4:b6:1f:ef:7a:22:be:80:a0:1e:6b:0b:34:d4:4d:78:
         57:e5:05:1c:88:16:de:32:a5:76:14:cc:d6:0d:87:7a:60:92:
         b9:fe:e6:10:c2:b4:a5:2b:09:80:3b:97:85:18:3d:8a:65:a8:
         19:14:a0:b7:b1:66:ee:e5:62:5b:03:d3:e3:5b:9a:1d:f6:75:
         0b:09:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:46:50 2026 by rpki-client