Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File:                     wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier:          Y9Aa52rxCyPjmmJAzGaAETbKzq7ctVUtsassN884a9M=
Subject key identifier:   87:43:48:A7:E9:EC:E0:09:36:BC:1D:18:34:29:F3:B6:CE:83:40:FE
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer:       /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial:       019EBEB5B98A56F795CA4D7560600176D70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 02:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:40 +0000
Files and hashes:         1: FC3W89E7lPxHMttdKdqwUZ8ayGo.roa (hash: P2wT7iaUIOeyGlWOhw0T1qRlFG0Wm2TszirFqNtZ4G8=)
                          2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: ryh5we1zHjUjYZdRnBd+cJGpLcd7wWZVnvxjaGkQqOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:b9:8a:56:f7:95:ca:4d:75:60:60:01:76:d7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
        Validity
            Not Before: Jun 13 02:00:40 2026 GMT
            Not After : Jun 14 02:00:40 2026 GMT
        Subject: CN=874348a7e9ece00936bc1d183429f3b6ce8340fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:93:ef:48:4f:d7:9a:78:1e:09:14:59:6f:
                    5f:db:41:f3:e8:e3:c0:0d:42:00:bf:66:2f:a7:7e:
                    2f:ea:2d:a0:e1:71:50:75:8e:55:d4:aa:cc:8f:0e:
                    af:d1:50:63:f3:59:3f:fc:28:3d:41:71:37:fb:86:
                    60:96:20:30:4f:51:cf:9b:08:f9:4b:ad:d8:f5:38:
                    74:15:36:23:d6:1f:c6:f9:46:fa:f5:38:f6:8d:27:
                    72:c2:d0:a0:2c:b8:07:de:d9:81:c6:50:55:8b:86:
                    60:f1:d2:2f:06:cf:71:52:a7:3c:43:80:84:8f:74:
                    d1:65:f4:53:06:dc:11:41:8b:5f:45:d6:62:2d:35:
                    50:17:87:98:72:72:d8:c5:a6:62:8d:7f:40:75:72:
                    b9:18:c4:f4:f6:54:6c:29:af:3a:1d:7f:0c:10:ee:
                    9f:a2:9a:f9:db:98:3f:0c:cd:ab:26:c4:dd:80:14:
                    73:a3:e8:a9:85:8f:1b:ae:d1:da:17:68:37:67:dd:
                    e3:8f:95:64:96:c3:85:e4:a7:30:b5:35:01:bf:08:
                    f7:3f:3a:c3:e7:a8:f8:61:ab:2b:c8:43:c7:d9:6f:
                    c7:dc:7f:82:f5:ff:53:8b:d1:25:e2:dc:2d:33:e7:
                    8a:93:a6:35:78:59:7a:3a:39:fa:e7:e0:53:77:43:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:48:A7:E9:EC:E0:09:36:BC:1D:18:34:29:F3:B6:CE:83:40:FE
            X509v3 Authority Key Identifier:
                keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:bd:7d:c8:ab:fa:b3:9d:88:4c:ce:0c:38:dc:2f:95:eb:
         4a:7c:b1:ab:9b:11:14:b2:06:0b:df:6e:e6:83:d1:6c:16:e8:
         d1:cf:1b:0c:7e:71:72:4d:5f:43:4b:fc:8e:b7:ed:66:48:ca:
         59:24:f4:6d:e1:77:58:71:5c:80:0c:71:9d:13:81:24:a5:dc:
         e6:94:69:80:ae:f6:e1:9a:58:c2:5c:40:8f:f8:7a:ac:d4:bc:
         8e:58:72:9b:77:6a:98:63:63:7f:62:7e:27:b7:53:3d:4d:bf:
         98:27:17:88:f7:08:5a:9b:9c:45:a7:5a:e8:c0:51:27:ba:fc:
         7d:93:5b:61:0a:c0:db:b1:a9:db:b0:73:a6:d7:76:65:16:b4:
         7c:54:1b:35:2b:ea:7f:5a:a2:0f:22:1f:03:2d:9c:42:71:2f:
         14:ea:7b:0f:c2:32:5f:19:36:1c:2b:6c:8e:da:7e:a2:2c:e3:
         8f:34:77:e3:37:49:18:87:41:a3:21:1e:cd:aa:d1:7e:fa:ea:
         18:27:b4:b5:59:43:ec:83:d8:a8:7a:87:71:8b:e4:cf:9d:90:
         f8:23:d8:ff:e8:6d:60:2b:88:95:94:3f:bb:c3:1f:80:59:7e:
         20:cb:ce:4f:6c:b2:83:ea:81:7e:63:7d:2f:4a:f3:3b:51:e4:
         7e:48:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:37 2026 by rpki-client