Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File:                     wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier:          ZSxq5VOBWMZ5n7R/2zfiwiuUj48bgPf1FFDm6eScrEQ=
Subject key identifier:   F0:C5:19:1B:2C:53:51:DA:FF:BF:02:9A:8C:39:50:06:EC:8A:89:6A
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer:       /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial:       019F111C6C9C27487A1E38BDC7D13331FACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number:          1984
Signing time:             Mon 29 Jun 2026 02:01:43 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:43 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:43 +0000
Files and hashes:         1: CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa (hash: ZsAGggLHZ5c9tfsaL3W8Tzgr18wNOwRPUVw/KIp0Zec=)
                          2: UTrB-eqS9W6US57i4mIaxwF_LT4.roa (hash: /qJvylYZag2Wv3AD9lsMVc7eYv0lH1eOQvu0T60dUUc=)
                          3: neQNKLpCfakNl9D-xr1vgggjRHw.roa (hash: fXE9P5Vbl/ZNMcrpupVcZ1b+IXnjJzLD2Jyf3B1lxGU=)
                          4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: 0fJdp7MUiDEyJHwPo8XsZHifwXordDkcOT9lclUmrVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:6c:9c:27:48:7a:1e:38:bd:c7:d1:33:31:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
        Validity
            Not Before: Jun 29 02:01:43 2026 GMT
            Not After : Jun 30 02:01:43 2026 GMT
        Subject: CN=f0c5191b2c5351daffbf029a8c395006ec8a896a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:65:59:4b:d3:c9:5a:85:64:0a:8c:aa:b0:
                    eb:6d:91:42:c9:2f:f0:a6:58:2d:00:cd:9f:65:3f:
                    03:05:41:76:0a:13:44:ae:e5:b7:1e:23:9b:c3:7f:
                    0e:8b:d1:76:57:5a:22:00:75:d4:51:ff:fa:d0:05:
                    d0:fa:eb:3d:9e:e5:bf:db:3e:12:23:e3:b5:bf:10:
                    7c:b5:26:d2:f5:ee:ba:69:48:eb:59:a3:78:01:9a:
                    c8:d7:9c:72:d4:3a:d6:0e:a6:a9:f7:4e:da:6e:27:
                    97:1f:36:95:c4:00:62:0d:fe:91:3a:14:f6:d2:8b:
                    0b:f7:a3:8e:86:5a:c0:8e:cb:0b:82:fe:e2:44:a8:
                    9e:94:8a:7c:d6:f8:e8:4d:db:9e:2f:c1:a7:7d:79:
                    04:a8:92:44:a3:04:02:82:2e:90:2b:5c:46:d8:c3:
                    d0:4b:6c:7b:e9:84:30:ad:f3:de:aa:f7:0c:81:8d:
                    e4:fa:08:d6:d3:5e:d7:1d:80:01:20:68:0c:91:0e:
                    da:09:89:e2:0d:4c:ac:c5:30:50:9a:26:06:b7:e4:
                    37:9f:43:aa:ca:68:a9:6b:f9:1b:3d:5b:ca:27:a3:
                    99:f9:3e:6e:cf:2e:e3:31:32:5d:72:01:ee:c4:56:
                    94:36:78:22:80:6a:cd:47:05:32:e7:52:f7:d4:4d:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C5:19:1B:2C:53:51:DA:FF:BF:02:9A:8C:39:50:06:EC:8A:89:6A
            X509v3 Authority Key Identifier:
                keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bf:df:7d:12:35:24:ea:c9:f2:93:fa:af:c2:81:cb:f9:5f:
         7d:c2:40:3b:70:d0:64:91:2e:30:e4:64:cc:ab:bb:dc:25:44:
         51:74:e5:f5:1a:ef:6e:fd:c5:06:d8:60:4e:2e:ba:96:9f:27:
         d0:fd:10:9e:c0:f6:7c:ec:41:66:1d:ae:0f:96:80:71:87:84:
         72:e0:4a:56:08:6c:cf:6b:9c:4a:69:ca:d1:bb:a1:d9:a2:4e:
         10:1e:b1:a0:c3:f2:0d:4a:de:21:9f:8a:36:6d:60:19:70:27:
         d6:8a:74:b3:59:41:dd:c0:7c:9a:95:cf:ae:42:15:18:1b:81:
         f1:78:72:b3:0e:e9:6b:a1:aa:d1:79:7c:79:ff:9e:f7:96:dc:
         f2:59:6f:4c:c6:bf:31:c4:ca:ae:b4:50:80:63:d4:2d:ce:7c:
         ae:30:eb:63:51:34:61:77:c4:05:25:61:c2:8b:76:25:12:4d:
         07:bc:c1:c4:2c:30:ca:85:d5:bc:28:4e:f2:94:18:82:23:bb:
         35:bd:8c:db:e3:a5:05:b8:f0:90:8a:04:af:b4:db:62:60:24:
         cc:ac:1a:6e:0d:16:e4:1d:68:12:da:43:06:c2:c6:f1:6b:28:
         76:2a:d1:b1:39:1e:64:46:5c:c4:9d:b4:c3:36:70:9d:ba:1d:
         b6:fb:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:57 2026 by rpki-client