Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
File:                     WanLToBmxLffBLT9DXEgFrVYYFE.mft (raw, json)
Hash identifier:          MfbxQ/jinhtK0tJmgqIH5F567a1/2gYojJUytwb2urc=
Subject key identifier:   A3:22:22:B5:AC:71:76:7F:43:B8:F5:37:D3:37:13:4B:D2:92:29:9E
Authority key identifier: 59:A9:CB:4E:80:66:C4:B7:DF:04:B4:FD:0D:71:20:16:B5:58:60:51
Certificate issuer:       /CN=59a9cb4e8066c4b7df04b4fd0d712016b5586051
Certificate serial:       019EB62096DB9FF4B8B95C2758087A2F0A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
Manifest number:          63
Signing time:             Thu 11 Jun 2026 10:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 10:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 10:00:49 +0000
Files and hashes:         1: ODfm3Yxukkk8Zy5VhsFGvCnVz3Q.roa (hash: rPqaG7a4NES3BlfPeVXwXTW0FGFWtg1TVkdyJef/wvg=)
                          2: WanLToBmxLffBLT9DXEgFrVYYFE.crl (hash: K9NErL68470djnKxR7qlLV4ABne8ZW8g41RVJmgwW5M=)
                          3: uBNL_ss2Qb-o57v6RB1FMQTXLJ8.roa (hash: gTgD0ioaHypn29NRYsE+FbQ+jS6wHnoN/Ie2L/7E1rc=)
                          4: yBuaNUDtkZX5BM5UVm4FRpLBl4A.roa (hash: IGGEjHe9Mqw+ubMvARqgA6TVzk7zSt3+AzhRVYNBFSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:20:96:db:9f:f4:b8:b9:5c:27:58:08:7a:2f:0a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a9cb4e8066c4b7df04b4fd0d712016b5586051
        Validity
            Not Before: Jun 11 10:00:49 2026 GMT
            Not After : Jun 12 10:00:49 2026 GMT
        Subject: CN=a32222b5ac71767f43b8f537d337134bd292299e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:0e:85:39:6d:b1:08:51:6a:df:9e:b0:26:
                    9a:e5:71:29:b6:cc:63:52:23:0b:0c:a0:37:b3:9b:
                    06:ad:36:b6:9b:f3:1f:a4:0d:e6:a9:2a:b6:7d:38:
                    9c:2b:cc:19:7d:0e:4f:8e:e3:52:93:29:4f:52:00:
                    ff:b9:d5:91:20:3d:32:ec:67:20:dc:b3:01:da:bd:
                    4c:d8:f8:62:11:c6:32:fe:5f:f9:ab:50:2b:e1:b5:
                    c1:5e:c2:2e:3b:9f:af:d3:1f:3e:08:80:51:40:61:
                    ca:d8:51:ad:7c:a4:86:5a:2c:b7:ef:68:ac:29:a4:
                    db:62:7d:91:e9:2c:ee:2f:7f:07:90:dd:c5:76:e0:
                    4a:1d:9a:e7:f9:33:6a:e9:e2:78:5c:71:ec:37:37:
                    50:4b:27:86:64:47:7e:43:76:32:ff:9a:ca:07:8a:
                    09:b8:fd:74:bd:b5:51:3d:6c:fb:5e:87:31:6a:62:
                    5f:74:27:c9:ae:2e:4f:7b:5c:73:dd:b3:b6:2f:b9:
                    a9:ab:6c:ee:e3:37:5f:d2:a5:6d:96:2a:1d:63:a1:
                    f7:46:14:d8:5b:ef:fd:11:30:cd:7f:04:22:90:2e:
                    ef:64:8e:65:66:e1:93:1c:82:2e:1a:10:66:62:03:
                    17:02:07:9a:8c:38:78:1e:37:47:cd:eb:87:b5:c0:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:22:B5:AC:71:76:7F:43:B8:F5:37:D3:37:13:4B:D2:92:29:9E
            X509v3 Authority Key Identifier:
                keyid:59:A9:CB:4E:80:66:C4:B7:DF:04:B4:FD:0D:71:20:16:B5:58:60:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e6:a1:e3:bd:bd:ec:23:9b:f1:b6:6c:18:2f:f7:e0:82:32:
         0b:75:6d:9f:d2:2b:79:18:6e:af:fb:05:9e:53:48:e5:95:7a:
         78:14:e2:16:ce:58:e3:c2:5e:af:db:c6:60:b6:c6:4a:7b:00:
         02:5b:75:6b:c0:9f:9a:3d:16:70:02:6c:3c:0a:b6:58:28:90:
         0c:16:a8:a1:cb:9b:37:58:92:7d:37:37:c1:a6:bc:20:fd:df:
         f3:a5:41:b5:0f:03:93:dc:37:9c:5b:41:81:22:9a:59:81:0e:
         91:93:f2:55:7d:a6:19:21:79:59:b5:b2:83:74:51:df:62:fe:
         18:73:70:98:98:8f:4c:26:46:15:46:fa:4c:9e:30:94:93:73:
         77:5f:6c:68:b9:47:1c:ad:ab:94:3f:c3:fc:96:bf:e1:8f:2a:
         48:57:91:81:dd:21:62:cd:23:c1:fc:68:5a:f3:e6:0b:44:21:
         39:ee:5f:78:d3:fe:a5:64:d3:d2:5b:29:a8:ce:04:91:98:a9:
         5a:a9:ce:1e:32:ab:da:0d:22:bb:ce:e5:64:5d:21:e4:ad:bd:
         cb:6e:3c:49:0e:ef:e1:de:ff:27:5e:b6:de:ac:b1:46:ca:8b:
         3d:78:5e:1f:ea:47:ae:52:79:52:28:c3:ab:b0:0f:ea:ae:83:
         b5:7a:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:26:03 2026 by rpki-client