Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File:                     W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier:          saoJgkq4af/WmBvP5h3OWnC6itncWUxk/6xPGcK3wd8=
Subject key identifier:   84:61:FC:7D:DC:AF:43:D5:75:7E:F1:FE:41:15:58:34:A3:01:29:B7
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer:       /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial:       019F19B1D63FD24385ADDD394719A17AC9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 18:01:52 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:52 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:52 +0000
Files and hashes:         1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: Wjk+RpVdSlOJ2nctKr7S6I23GuBH29vu8rFPMqsSqD0=)
                          2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:d6:3f:d2:43:85:ad:dd:39:47:19:a1:7a:c9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
        Validity
            Not Before: Jun 30 18:01:52 2026 GMT
            Not After : Jul  1 18:01:52 2026 GMT
        Subject: CN=8461fc7ddcaf43d5757ef1fe41155834a30129b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:f1:46:ee:58:1c:2f:dc:d4:74:0d:6b:38:
                    81:f5:e8:87:15:66:83:3d:ca:39:c8:44:d8:ef:fa:
                    a9:37:99:d2:17:e5:fe:8f:ca:23:af:be:2c:3a:8c:
                    4d:ec:b2:79:bb:fe:7f:4a:b3:19:a5:e0:21:5f:b6:
                    11:c9:1a:10:fc:27:71:da:69:9f:ac:10:c3:ed:d2:
                    8d:bc:74:d9:cc:6e:16:4a:46:85:c7:bf:e0:51:15:
                    38:d0:fe:35:40:ff:0c:66:bf:e8:e5:aa:a9:41:b5:
                    b6:4f:11:1d:cc:af:2c:47:10:b4:b1:a2:a8:7d:d9:
                    88:2e:e7:66:f3:09:b2:f6:02:f5:99:e9:7d:b9:dd:
                    b9:90:34:40:86:1c:f4:3e:e3:03:f2:7f:22:6d:3a:
                    32:87:f7:40:4e:d9:84:1a:70:6b:10:10:61:45:4c:
                    a1:b4:d0:c9:6a:1e:e4:e3:fc:d2:48:34:0b:91:74:
                    ae:7b:b4:29:b1:ab:b3:6d:32:b6:ec:de:0a:28:29:
                    c3:5e:6f:50:25:da:9a:30:15:cb:bd:7c:89:c8:a1:
                    87:2d:ce:ac:8f:e8:af:82:1b:13:4f:e0:f0:5e:52:
                    33:84:86:b8:db:a6:0e:60:ff:d9:69:6a:b0:17:bd:
                    0a:b9:86:db:92:44:af:25:4b:91:1d:c9:c9:5a:70:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:FC:7D:DC:AF:43:D5:75:7E:F1:FE:41:15:58:34:A3:01:29:B7
            X509v3 Authority Key Identifier:
                keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:22:84:fc:e8:01:74:f2:fa:86:fa:52:0c:25:48:bc:3f:
         0f:33:f7:6e:b9:dc:4e:5f:81:39:7f:d4:c2:0f:d3:ea:6a:60:
         fd:ba:c8:b2:84:17:cf:37:91:e7:ae:87:0d:6a:20:2c:99:01:
         2b:ce:69:cc:93:88:83:35:59:d2:78:d6:f2:10:49:09:4e:40:
         50:5a:94:78:7b:47:a4:5e:d7:91:47:2d:43:c0:cb:f3:25:da:
         59:7c:d3:31:40:82:07:6a:75:53:10:d4:1c:43:ed:c8:9d:f0:
         5d:1c:bb:b8:eb:31:4e:57:ae:d4:c4:bd:67:19:cf:21:9b:80:
         d0:4e:67:a7:c6:2b:fb:de:7f:21:3a:7d:ff:fe:48:be:60:14:
         23:4f:29:da:b5:41:6d:8e:09:59:d6:d5:ec:9c:7c:c1:a2:9d:
         9d:6f:77:1a:dd:cb:9a:8e:ef:ea:66:39:74:8f:21:9c:de:e5:
         1a:ed:ca:f7:ad:aa:16:a8:5c:6d:58:a1:5e:c6:a3:91:41:56:
         42:2e:ff:ba:87:f8:f4:4f:4f:d6:fa:ad:36:8d:a2:97:13:ba:
         55:c8:39:61:ee:5e:9e:7f:9f:d3:cc:28:71:7a:9a:91:6c:9b:
         b3:e5:ac:ef:e2:44:08:59:31:3b:79:1a:c1:fa:4f:6d:16:42:
         d7:18:31:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZsdY/0kOFrd05RxmhesnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx
NTZkN2MwHhcNMjYwNjMwMTgwMTUyWhcNMjYwNzAxMTgwMTUyWjAzMTEwLwYDVQQD
Eyg4NDYxZmM3ZGRjYWY0M2Q1NzU3ZWYxZmU0MTE1NTgzNGEzMDEyOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46/xRu5YHC/c1HQNaziB9eiHFWaD
Pco5yETY7/qpN5nSF+X+j8ojr74sOoxN7LJ5u/5/SrMZpeAhX7YRyRoQ/Cdx2mmf
rBDD7dKNvHTZzG4WSkaFx7/gURU40P41QP8MZr/o5aqpQbW2TxEdzK8sRxC0saKo
fdmILudm8wmy9gL1mel9ud25kDRAhhz0PuMD8n8ibToyh/dATtmEGnBrEBBhRUyh
tNDJah7k4/zSSDQLkXSue7QpsauzbTK27N4KKCnDXm9QJdqaMBXLvXyJyKGHLc6s
j+ivghsTT+DwXlIzhIa426YOYP/ZaWqwF70KuYbbkkSvJUuRHcnJWnDpXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRh/H3cr0PVdX7x/kEVWDSjASm3MB8GA1UdIwQY
MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt
OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh
LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwMihPzo
AXTy+ob6UgwlSLw/DzP3brncTl+BOX/Uwg/T6mpg/brIsoQXzzeR566HDWogLJkB
K85pzJOIgzVZ0njW8hBJCU5AUFqUeHtHpF7XkUctQ8DL8yXaWXzTMUCCB2p1UxDU
HEPtyJ3wXRy7uOsxTleu1MS9ZxnPIZuA0E5np8Yr+95/ITp9//5IvmAUI08p2rVB
bY4JWdbV7Jx8waKdnW93Gt3Lmo7v6mY5dI8hnN7lGu3K962qFqhcbVihXsajkUFW
Qi7/uof49E9P1vqtNo2ilxO6Vcg5Ye5enn+f08wocXqakWybs+Ws7+JECFkxO3ka
wfpPbRZC1xgxwg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:10 2026 by rpki-client