Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          pRpCCekpoOrUV0gyCTQT085EBDJMz5P+CtT5gMu5/zQ=
Subject key identifier:   98:AA:42:C9:5C:8B:F7:96:6F:42:DE:45:FE:F3:0F:0E:EC:A1:5B:34
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019E3185819A45287C02D9C7B6180E0AF2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0A57
Signing time:             Sat 16 May 2026 16:01:33 +0000
Manifest this update:     Sat 16 May 2026 16:01:33 +0000
Manifest next update:     Sun 17 May 2026 16:01:33 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: kici+6QCPv/51NYxvKUqCUQTJ+fuyqeKkVVOr38g06M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:81:9a:45:28:7c:02:d9:c7:b6:18:0e:0a:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: May 16 16:01:33 2026 GMT
            Not After : May 17 16:01:33 2026 GMT
        Subject: CN=98aa42c95c8bf7966f42de45fef30f0eeca15b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:06:8e:83:92:7d:2b:fc:56:6d:af:5f:49:
                    90:84:de:97:85:a4:83:ee:f9:36:ec:9c:c5:87:91:
                    4c:a0:fa:e8:b7:d0:64:bb:ca:4f:2b:d4:18:a0:24:
                    17:7d:6c:89:3d:59:87:d1:45:ec:07:39:80:f8:1a:
                    6b:32:9a:e6:e9:2c:59:c4:e9:aa:66:80:e0:83:38:
                    b0:93:e5:9a:e3:cc:fa:47:ac:d2:19:4a:4a:67:3b:
                    0e:03:8a:3c:0d:50:ad:66:6f:64:17:02:72:02:3a:
                    51:82:d3:1f:40:2c:a6:31:03:44:9d:c3:0a:28:e4:
                    47:59:4c:65:d8:0c:c4:10:55:38:35:67:db:2d:dc:
                    b2:14:1a:96:10:11:01:96:4a:42:bf:2c:21:a0:c5:
                    2f:3a:fa:c1:2c:08:3b:c7:86:40:e1:af:79:94:fe:
                    0e:60:98:b7:18:4d:4a:2e:4d:85:66:f1:6e:02:2f:
                    c7:2a:61:25:00:25:31:f6:bc:15:a4:e2:54:c3:11:
                    8a:8d:79:39:46:03:c6:8b:22:11:cd:a4:4f:7c:63:
                    09:59:3e:6a:3e:4c:ac:02:6b:c6:cb:b8:3c:a9:73:
                    29:a3:7e:ef:d5:fb:8c:d7:1d:3e:cb:a6:31:6e:8b:
                    bb:e7:a2:d6:5c:ac:5f:0a:33:dd:ba:b8:78:83:40:
                    af:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AA:42:C9:5C:8B:F7:96:6F:42:DE:45:FE:F3:0F:0E:EC:A1:5B:34
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:e3:6b:b2:0c:4e:ea:ab:d6:bb:99:10:4d:75:c5:57:8e:
         32:ee:83:6a:81:b6:7b:c9:d0:1f:15:30:73:54:04:8f:9e:71:
         f5:ad:21:d5:22:65:31:82:55:13:88:d1:67:40:9f:23:38:0a:
         14:63:fe:57:c2:4a:68:63:e0:9d:21:1d:87:4a:21:c2:9b:ab:
         43:4d:5b:47:69:51:1f:f5:18:f9:35:d5:66:a5:ca:f5:22:00:
         81:ee:4a:97:d9:96:a1:3d:02:94:5c:3b:0b:47:8b:86:65:04:
         c0:02:e9:72:20:36:9e:ab:0b:04:d4:f0:99:af:4f:42:8d:68:
         d9:e8:84:6e:0c:c4:03:7a:84:47:60:d2:f1:59:ba:cb:04:25:
         94:c5:e2:e9:14:c1:01:39:63:fc:d8:f8:e4:ea:1a:92:50:0a:
         34:78:53:64:81:fc:65:5c:c0:3a:58:c5:08:aa:6b:96:95:81:
         75:2a:91:84:ef:db:2b:7e:4b:f6:b1:00:fb:36:b6:14:f7:4e:
         00:3a:09:48:ad:1f:f6:5c:91:f5:d8:12:89:a5:e4:a5:d9:bf:
         9a:01:94:3f:1b:30:1a:6a:cd:b8:7a:31:cb:16:80:67:6f:2f:
         3e:52:16:b8:63:a8:00:8b:ac:f9:34:4c:43:63:58:f3:fc:04:
         7c:70:27:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhYGaRSh8AtnHthgOCvLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1
YTViMWUwHhcNMjYwNTE2MTYwMTMzWhcNMjYwNTE3MTYwMTMzWjAzMTEwLwYDVQQD
Eyg5OGFhNDJjOTVjOGJmNzk2NmY0MmRlNDVmZWYzMGYwZWVjYTE1YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/IGjoOSfSv8Vm2vX0mQhN6XhaSD
7vk27JzFh5FMoProt9Bku8pPK9QYoCQXfWyJPVmH0UXsBzmA+BprMprm6SxZxOmq
ZoDggziwk+Wa48z6R6zSGUpKZzsOA4o8DVCtZm9kFwJyAjpRgtMfQCymMQNEncMK
KORHWUxl2AzEEFU4NWfbLdyyFBqWEBEBlkpCvywhoMUvOvrBLAg7x4ZA4a95lP4O
YJi3GE1KLk2FZvFuAi/HKmElACUx9rwVpOJUwxGKjXk5RgPGiyIRzaRPfGMJWT5q
PkysAmvGy7g8qXMpo37v1fuM1x0+y6Yxbou756LWXKxfCjPdurh4g0CvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiqQslci/eWb0LeRf7zDw7soVs0MB8GA1UdIwQY
MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt
ZjllYzU2NjY4NmI5LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5
LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOHja7IM
Tuqr1ruZEE11xVeOMu6DaoG2e8nQHxUwc1QEj55x9a0h1SJlMYJVE4jRZ0CfIzgK
FGP+V8JKaGPgnSEdh0ohwpurQ01bR2lRH/UY+TXVZqXK9SIAge5Kl9mWoT0ClFw7
C0eLhmUEwALpciA2nqsLBNTwma9PQo1o2eiEbgzEA3qER2DS8Vm6ywQllMXi6RTB
ATlj/Nj45OoaklAKNHhTZIH8ZVzAOljFCKprlpWBdSqRhO/bK35L9rEA+za2FPdO
ADoJSK0f9lyR9dgSiaXkpdm/mgGUPxswGmrNuHoxyxaAZ28vPlIWuGOoAIus+TRM
Q2NY8/wEfHAnPw==
-----END CERTIFICATE-----
Generated at Sat May 16 20:21:37 2026 by rpki-client