Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
File:                     W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json)
Hash identifier:          UKvKF8eAeO9BjdoTw0Pt66wgFGJiQm08x49GRXLmw20=
Subject key identifier:   5E:AF:0E:5C:FC:49:BB:90:04:A6:60:36:F6:84:BC:07:F8:17:70:37
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Certificate issuer:       /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial:       019EA9AED2017FF48CF270FBE9D7044DA431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
Manifest number:          18EF
Signing time:             Tue 09 Jun 2026 00:01:06 +0000
Manifest this update:     Tue 09 Jun 2026 00:01:06 +0000
Manifest next update:     Wed 10 Jun 2026 00:01:06 +0000
Files and hashes:         1: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: /zfCuHvV7TLT11AwqqcQeHd/K5w9lhVkTW26vK9ktWw=)
                          2: iWfVpt8qyWupkH9yoatFfGG_2CI.roa (hash: l0XaFspVIh+Z8KH4+tmuHJwuVwG7HsPB3cPIWpVhJAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a9:ae:d2:01:7f:f4:8c:f2:70:fb:e9:d7:04:4d:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
        Validity
            Not Before: Jun  9 00:01:06 2026 GMT
            Not After : Jun 10 00:01:06 2026 GMT
        Subject: CN=5eaf0e5cfc49bb9004a66036f684bc07f8177037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:e9:40:d7:62:19:7d:bf:bf:10:14:e3:40:
                    aa:d1:f6:da:46:df:a2:66:dd:cf:6a:53:02:3b:1a:
                    78:15:27:ec:08:c5:eb:22:71:10:03:5f:4d:62:5e:
                    5a:61:2a:55:c7:32:37:40:09:65:ee:70:e8:e7:0b:
                    04:50:91:38:bc:ae:62:20:b0:cd:36:9f:51:b7:b2:
                    fd:da:45:97:17:38:9c:9a:d1:7c:28:b7:ce:2e:93:
                    b9:05:1e:8b:e7:94:17:d7:12:73:58:22:5c:53:cb:
                    5c:f2:b7:87:66:65:8b:3a:21:b1:81:a5:3c:6e:3a:
                    67:2e:5b:1e:1f:11:77:67:cd:c0:be:72:1e:08:82:
                    73:8a:a6:18:53:00:40:0e:2b:d7:77:71:e1:5a:9b:
                    54:d7:ef:0e:23:1b:49:a8:d7:1a:a4:c8:4e:ca:8f:
                    1b:fd:e8:16:57:48:28:ae:c4:26:bb:3a:b8:e0:af:
                    95:68:4a:de:6f:d9:2d:eb:7a:6b:1b:d4:2c:9e:44:
                    56:5d:35:de:eb:ee:99:b5:09:fa:b9:d7:19:e0:ce:
                    3d:8e:fa:c5:b1:41:7f:22:9e:15:e4:90:79:37:36:
                    2f:a6:bf:09:ad:f6:d0:30:49:eb:9c:35:74:9b:ed:
                    84:61:38:77:90:22:f3:68:b5:09:c1:d8:ce:73:ce:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AF:0E:5C:FC:49:BB:90:04:A6:60:36:F6:84:BC:07:F8:17:70:37
            X509v3 Authority Key Identifier:
                keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:e7:b7:21:4b:e3:03:b0:fa:73:de:7e:13:0c:97:ba:9c:
         56:62:ef:2a:47:76:02:47:9c:ce:47:32:b8:50:12:a9:35:99:
         44:ff:ba:33:77:8d:39:00:f4:54:22:e0:56:fa:1a:d0:02:c9:
         11:52:ea:3f:5d:27:02:4b:d2:55:a4:ed:38:bd:f1:78:d7:68:
         aa:f2:05:07:1b:51:67:0d:14:5e:eb:bc:66:44:9c:eb:53:be:
         d8:cd:79:4c:11:7f:12:1e:d5:e9:17:35:57:97:61:79:e2:55:
         e2:97:a8:3e:ae:7b:a5:f0:7d:3f:a2:d9:04:93:4b:e1:63:b3:
         5b:7c:fb:25:94:d0:47:05:96:dc:6c:ba:a3:a5:9c:a2:10:e2:
         ba:1f:52:df:56:95:3c:c8:78:3e:45:4b:77:41:5b:d6:8a:b0:
         d8:23:4f:2b:34:e1:c8:64:39:0d:34:07:4b:e6:a0:63:1a:79:
         88:69:20:8a:ae:26:d3:7a:f8:8d:80:24:e7:37:23:cb:29:c1:
         09:02:5d:a4:17:1b:0e:f9:7a:ed:c4:ef:7c:ad:65:86:e1:ae:
         18:24:8f:2b:a4:a4:a6:f2:61:4b:a7:ae:e8:54:48:fb:5d:2e:
         ae:b3:2d:60:8f:68:66:15:65:19:cb:7c:3b:74:4a:3d:6b:5e:
         b7:db:69:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6prtIBf/SM8nD76dcETaQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTM5ZGEzYWFhNTJkMTMwZmYwNzRmYjA0OTIyMTk2NmQy
YjU3YzYwHhcNMjYwNjA5MDAwMTA2WhcNMjYwNjEwMDAwMTA2WjAzMTEwLwYDVQQD
Eyg1ZWFmMGU1Y2ZjNDliYjkwMDRhNjYwMzZmNjg0YmMwN2Y4MTc3MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaTpQNdiGX2/vxAU40Cq0fbaRt+i
Zt3PalMCOxp4FSfsCMXrInEQA19NYl5aYSpVxzI3QAll7nDo5wsEUJE4vK5iILDN
Np9Rt7L92kWXFzicmtF8KLfOLpO5BR6L55QX1xJzWCJcU8tc8reHZmWLOiGxgaU8
bjpnLlseHxF3Z83AvnIeCIJziqYYUwBADivXd3HhWptU1+8OIxtJqNcapMhOyo8b
/egWV0gorsQmuzq44K+VaEreb9kt63prG9QsnkRWXTXe6+6ZtQn6udcZ4M49jvrF
sUF/Ip4V5JB5NzYvpr8JrfbQMEnrnDV0m+2EYTh3kCLzaLUJwdjOc85xpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6vDlz8SbuQBKZgNvaEvAf4F3A3MB8GA1UdIwQY
MBaAFFvjnaOqpS0TD/B0+wSSIZZtK1fGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUt
ZTg3MmMwZDQwOGEzLzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUtZTg3MmMwZDQwOGEz
LzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXLntyFL
4wOw+nPefhMMl7qcVmLvKkd2AkeczkcyuFASqTWZRP+6M3eNOQD0VCLgVvoa0ALJ
EVLqP10nAkvSVaTtOL3xeNdoqvIFBxtRZw0UXuu8ZkSc61O+2M15TBF/Eh7V6Rc1
V5dheeJV4peoPq57pfB9P6LZBJNL4WOzW3z7JZTQRwWW3Gy6o6WcohDiuh9S31aV
PMh4PkVLd0Fb1oqw2CNPKzThyGQ5DTQHS+agYxp5iGkgiq4m03r4jYAk5zcjyynB
CQJdpBcbDvl67cTvfK1lhuGuGCSPK6SkpvJhS6eu6FRI+10urrMtYI9oZhVlGct8
O3RKPWtet9tpJA==
-----END CERTIFICATE-----
Generated at Tue Jun 9 04:44:55 2026 by rpki-client