Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File:                     wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier:          QfQnWoL3QOybmLoQiuAdJH/l6AjRzBKhj/3CBXXSPno=
Subject key identifier:   1A:B5:2D:7E:F4:A3:45:79:03:8C:06:56:63:A3:27:86:47:86:FD:E6
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer:       /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial:       019EB8EA65126B0839F9506BA5A9BF37BC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number:          0B91
Signing time:             Thu 11 Jun 2026 23:00:29 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:29 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:29 +0000
Files and hashes:         1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
                          2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
                          3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: MAQeDFjcS1mVCoANKQOQ2+Kri5uSNfMUjdYSuKQZBWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:65:12:6b:08:39:f9:50:6b:a5:a9:bf:37:bc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
        Validity
            Not Before: Jun 11 23:00:29 2026 GMT
            Not After : Jun 12 23:00:29 2026 GMT
        Subject: CN=1ab52d7ef4a34579038c065663a327864786fde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:61:00:4e:3f:5c:9d:96:33:0a:41:38:03:
                    e4:31:c9:26:7c:32:83:22:55:dc:cb:90:83:22:d4:
                    3d:49:d3:a3:47:16:30:a9:65:e8:06:f7:9c:2d:09:
                    c1:e2:48:4a:f1:59:5c:d0:6f:bc:d6:e2:61:05:7a:
                    22:5a:5f:e0:1c:54:57:2c:ec:b3:93:ed:ac:91:c2:
                    92:6a:36:ba:0a:66:25:e2:93:93:06:5f:eb:92:96:
                    c1:a5:f0:e2:5f:57:08:79:2a:98:39:9b:c4:c7:6c:
                    28:6a:c5:39:0a:48:75:6e:32:bc:b0:aa:79:9e:34:
                    69:c9:a8:3f:b0:85:44:8d:18:22:52:ee:33:44:94:
                    dd:11:50:3a:4b:0d:da:c5:5a:29:71:e9:f8:35:64:
                    02:54:3e:31:54:20:fb:64:38:dc:56:fd:55:dd:69:
                    67:32:c6:e5:48:de:61:94:5f:b4:50:29:c1:4c:b3:
                    a5:9c:89:b2:66:eb:dc:fb:1a:3a:18:6e:a2:29:22:
                    36:d4:9a:ef:46:8d:b6:03:2b:21:08:d2:f4:f1:ee:
                    37:88:ae:c3:ba:9a:81:7a:32:45:b9:11:94:23:b5:
                    47:4f:93:ad:be:7c:de:08:69:42:5b:fc:20:f6:4b:
                    14:d0:6d:b7:f6:30:33:da:26:33:6c:bc:61:a9:83:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B5:2D:7E:F4:A3:45:79:03:8C:06:56:63:A3:27:86:47:86:FD:E6
            X509v3 Authority Key Identifier:
                keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:d5:c9:1d:3a:46:82:00:8a:db:c0:8d:9e:30:41:94:e1:
         5a:0b:15:67:96:1f:7b:93:44:a8:90:80:fd:2d:8d:0d:53:cb:
         65:64:a3:e0:fc:de:43:5c:19:3e:f0:2d:32:62:c6:11:ef:8c:
         3a:47:5f:d2:e1:cb:cb:37:f2:b7:5b:05:07:62:88:3a:1d:ab:
         5e:20:ad:14:8b:c6:bd:e9:46:17:6d:b7:ca:b1:fc:af:b8:a2:
         8d:18:b3:2a:d4:e5:2f:64:81:44:c3:8a:cc:5f:8b:98:d9:28:
         76:8b:12:7f:1e:48:5f:9d:72:8c:04:8a:8c:18:40:14:d1:46:
         3b:86:5c:51:9d:a0:d3:62:76:5f:9c:c9:f6:eb:e8:4d:cc:b6:
         06:dc:94:c9:15:2a:fe:eb:90:66:60:0c:39:22:dd:46:04:b6:
         c3:1f:28:d4:07:12:d0:bc:c2:2d:4b:01:ac:10:e9:a9:18:19:
         70:a1:db:26:71:8d:23:fe:bb:fe:fa:d9:c3:f9:c2:cd:13:cb:
         72:2a:55:4e:6f:0a:11:ee:39:42:3e:2d:28:37:7f:4b:4c:77:
         38:29:f6:7e:63:c7:79:3b:e5:57:98:46:85:fa:8b:e6:a3:8b:
         cb:75:53:34:3f:39:60:11:a4:cd:58:07:38:c3:47:4e:90:a5:
         7c:b6:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:02 2026 by rpki-client