Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          +C7l1O9ZpY/2aTkaNnklhTnLl+nFKsynkTL36ANueL8=
Subject key identifier:   EE:28:FD:BC:79:90:A0:8A:0E:58:64:63:92:2D:14:93:6A:08:3C:D0
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       019E9B1734DB0C0C4864232ACFD04D5EF50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          04A7
Signing time:             Sat 06 Jun 2026 04:00:49 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:49 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:49 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: sfL7Su8Vf13/mn4oLL7pmvB6cxU+SQKIExCyjvLcOpk=)
                          2: aeNtIymZwUKQWOeTccyVT7TBHRo.roa (hash: NRVVzMkO6SHCR3USmlXWQHKPaFtABXw2LsRv66QEVsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:34:db:0c:0c:48:64:23:2a:cf:d0:4d:5e:f5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Jun  6 04:00:49 2026 GMT
            Not After : Jun  7 04:00:49 2026 GMT
        Subject: CN=ee28fdbc7990a08a0e586463922d14936a083cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e9:58:db:8f:32:ab:7f:62:4f:4b:96:8c:dd:
                    d8:c9:a3:36:38:45:e9:0d:4a:59:80:b0:47:09:0c:
                    df:44:25:79:ab:7c:29:06:cc:f6:9d:1a:cd:8f:ac:
                    25:72:11:eb:67:e6:1d:40:0a:ac:bd:f2:a4:2c:62:
                    05:ac:93:5e:a8:27:d5:c1:ec:6f:1d:27:19:22:12:
                    08:40:62:22:b6:0b:d5:fb:a2:a3:3f:b2:41:ab:d2:
                    ce:9c:9d:3a:93:7b:dc:bf:04:03:61:67:25:df:45:
                    07:52:62:7c:7f:9f:1a:06:03:e6:c2:43:db:53:89:
                    d3:47:45:a0:68:a9:34:2e:24:0e:79:5c:59:c0:18:
                    be:2f:5a:9b:00:55:23:07:56:31:65:6d:0e:26:b0:
                    b2:2e:09:f4:38:0e:12:3e:cb:9e:fb:44:19:c0:05:
                    68:a5:ab:df:05:e4:0f:5b:9a:5c:6d:5e:a7:19:1c:
                    5b:f0:a2:1f:bc:cf:c6:a4:ca:95:45:68:b4:b8:0a:
                    cb:f7:0f:75:77:6a:aa:77:3b:fa:96:68:a3:dc:b6:
                    7a:0c:96:17:11:49:c9:d5:b0:c7:1c:3e:a7:28:f8:
                    4d:44:6a:f5:8f:c4:0c:1a:9a:11:35:12:8b:bf:a2:
                    31:bf:c9:f5:e8:a7:22:9b:fc:c7:24:a0:dd:2b:eb:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:28:FD:BC:79:90:A0:8A:0E:58:64:63:92:2D:14:93:6A:08:3C:D0
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:1e:09:bd:05:cd:51:95:08:dd:b8:e8:5b:99:05:b6:5a:
         b4:68:ed:b6:7d:8f:d1:60:52:d6:1f:da:f5:ef:e0:fa:07:84:
         47:c5:ce:99:b6:c2:ed:a4:48:c6:ea:78:9e:b4:0a:8e:fa:f8:
         aa:6b:c3:23:c9:47:9f:db:19:14:6f:ae:2f:71:05:61:99:1f:
         56:1b:3f:73:03:55:d0:8b:ad:c2:c6:48:27:ac:0f:22:dc:3f:
         9f:9f:61:c3:27:6c:ab:58:11:02:f9:88:6c:58:1c:b6:f2:c3:
         78:ac:dc:fd:f5:be:7e:a8:17:52:80:e7:af:c9:6f:6e:3c:ef:
         77:48:68:95:60:44:6a:a7:5c:c4:a8:f4:74:05:d3:18:69:c6:
         fd:78:d2:c0:90:26:f1:ae:70:48:63:cc:c9:14:09:61:f0:05:
         97:65:fd:1f:e6:17:e7:8b:90:68:d5:53:98:75:ed:e0:6a:75:
         fe:27:dd:c9:46:ae:85:1b:7f:6a:9a:7e:bc:fd:a2:54:1b:03:
         eb:2b:23:20:4d:37:cf:78:c0:03:8d:86:f6:25:98:24:b9:80:
         51:14:40:d8:98:3e:bc:cd:41:da:93:f2:3b:1e:09:7e:97:19:
         36:7e:98:08:c2:4b:84:8d:67:61:50:1d:90:28:84:06:72:fe:
         b1:ea:e1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bFzTbDAxIZCMqz9BNXvUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTRkNDFjZmE5NDNkYTE5ZjI3NzhhMGQzNzNkZDJhNzc0
MWQwNmQwHhcNMjYwNjA2MDQwMDQ5WhcNMjYwNjA3MDQwMDQ5WjAzMTEwLwYDVQQD
EyhlZTI4ZmRiYzc5OTBhMDhhMGU1ODY0NjM5MjJkMTQ5MzZhMDgzY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ulY248yq39iT0uWjN3YyaM2OEXp
DUpZgLBHCQzfRCV5q3wpBsz2nRrNj6wlchHrZ+YdQAqsvfKkLGIFrJNeqCfVwexv
HScZIhIIQGIitgvV+6KjP7JBq9LOnJ06k3vcvwQDYWcl30UHUmJ8f58aBgPmwkPb
U4nTR0WgaKk0LiQOeVxZwBi+L1qbAFUjB1YxZW0OJrCyLgn0OA4SPsue+0QZwAVo
pavfBeQPW5pcbV6nGRxb8KIfvM/GpMqVRWi0uArL9w91d2qqdzv6lmij3LZ6DJYX
EUnJ1bDHHD6nKPhNRGr1j8QMGpoRNRKLv6Ixv8n16Kcim/zHJKDdK+tCqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4o/bx5kKCKDlhkY5ItFJNqCDzQMB8GA1UdIwQY
MBaAFFgU1Bz6lD2hnyd4oNNz3Sp3QdBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMt
MGUwZGY2OGNkZTAzLzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMtMGUwZGY2OGNkZTAz
LzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZj0eCb0F
zVGVCN246FuZBbZatGjttn2P0WBS1h/a9e/g+geER8XOmbbC7aRIxup4nrQKjvr4
qmvDI8lHn9sZFG+uL3EFYZkfVhs/cwNV0IutwsZIJ6wPItw/n59hwydsq1gRAvmI
bFgctvLDeKzc/fW+fqgXUoDnr8lvbjzvd0holWBEaqdcxKj0dAXTGGnG/XjSwJAm
8a5wSGPMyRQJYfAFl2X9H+YX54uQaNVTmHXt4Gp1/ifdyUauhRt/app+vP2iVBsD
6ysjIE03z3jAA42G9iWYJLmAURRA2Jg+vM1B2pPyOx4JfpcZNn6YCMJLhI1nYVAd
kCiEBnL+serhAw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:19:17 2026 by rpki-client