Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File:                     w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier:          tt9cSQ6Ux45fmuCqRKrO7CPQY4hZFtwW+uSl2GsviGk=
Subject key identifier:   9E:A9:84:DC:FA:AC:4A:AC:FB:04:C9:3D:36:32:DE:7B:54:27:51:6C
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer:       /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial:       019E2B14CA80412CE48AB5AE5D6471E70B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number:          02B5
Signing time:             Fri 15 May 2026 10:00:43 +0000
Manifest this update:     Fri 15 May 2026 10:00:43 +0000
Manifest next update:     Sat 16 May 2026 10:00:43 +0000
Files and hashes:         1: 1hYxU510mvC8W-Z5Lh_4RiP_RwA.roa (hash: Qdg6Cvex+ogQOj7yX9Hv45NrkNDmCPh+AWkefNtDGNk=)
                          2: 6eKn3uMQuUNTMkTpT0y-3vnuj_s.roa (hash: WZXQFULC/IwGTQvmcWdtzTS7QYlU+Fpmd+6cLbWavvM=)
                          3: Um_RzOlxicEhNDIKHBSNs-PRpSQ.roa (hash: xMiT/EQRShPHgjRGkcH+fcgroOrBUqddxFIB0qcN/nI=)
                          4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: ymv6O3Kr9QQJ1hhPRFGh6dRuo0vJSZbYpp1t0Ulskmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:14:ca:80:41:2c:e4:8a:b5:ae:5d:64:71:e7:0b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
        Validity
            Not Before: May 15 10:00:43 2026 GMT
            Not After : May 16 10:00:43 2026 GMT
        Subject: CN=9ea984dcfaac4aacfb04c93d3632de7b5427516c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:df:62:1b:82:f5:70:ae:48:1e:97:00:5b:
                    99:17:f6:cf:b3:a8:77:5c:ca:58:fe:34:fa:76:4a:
                    87:ee:c9:3c:86:76:9c:ae:46:53:89:6c:43:9b:da:
                    ce:34:e4:d8:bf:c9:61:79:0a:72:f5:54:55:80:7c:
                    92:df:fb:e3:ad:0d:78:38:09:96:60:07:5d:35:ae:
                    10:bb:60:10:b1:31:4d:73:b4:68:ae:b7:1a:d7:6e:
                    d9:77:1a:60:2f:12:04:3e:9d:f4:fb:21:33:07:87:
                    81:50:cb:2d:dd:9b:40:79:a8:57:0b:0f:b2:66:d4:
                    18:54:1d:21:b9:49:02:bd:53:0a:22:04:50:e2:87:
                    35:69:2b:3e:d1:69:0d:4f:b3:81:fc:3a:0a:86:a9:
                    55:5c:29:15:11:a8:ab:4c:a5:20:a5:c1:36:51:d1:
                    a4:aa:ca:61:28:fb:fc:1e:1f:aa:13:e2:51:91:a5:
                    7b:61:ff:61:d1:31:0f:92:8d:17:5f:94:7c:88:39:
                    52:63:22:80:ce:98:5a:e6:96:63:8d:52:41:a1:70:
                    da:fe:ca:ef:81:83:ac:37:23:fb:f3:05:c0:99:7a:
                    88:08:28:67:ca:b3:9f:96:79:9a:28:89:4d:fb:00:
                    eb:67:bc:ef:f7:21:55:0d:cc:b7:47:3f:04:0d:fe:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:84:DC:FA:AC:4A:AC:FB:04:C9:3D:36:32:DE:7B:54:27:51:6C
            X509v3 Authority Key Identifier:
                keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:c0:7a:b2:f0:be:db:29:c6:81:00:c4:c3:30:e8:67:f5:
         ad:30:1f:19:6c:8a:ca:9a:ef:24:ac:af:71:1a:ae:4d:08:b9:
         b0:a8:22:25:20:8d:64:ce:74:a1:29:6c:4e:e6:04:28:ed:5b:
         7d:92:53:22:87:4a:23:7e:80:39:8e:37:8f:7b:44:56:47:3f:
         04:e5:fd:86:e7:77:23:21:a0:df:51:ed:35:42:0b:54:88:75:
         b3:4c:36:f6:c5:87:35:c0:75:a5:82:26:ec:28:4c:52:aa:6a:
         3b:cd:27:10:9e:08:c7:b1:56:50:a3:ab:48:c9:6b:5d:16:05:
         01:52:6b:a9:06:a3:c9:e5:82:ab:65:b7:6d:5f:21:2b:f5:30:
         df:09:6f:9b:aa:a5:39:32:fa:e0:b2:14:d1:e9:43:c8:34:8e:
         cb:f2:54:ab:a5:f3:9b:9a:02:64:55:61:c1:6a:fd:98:7b:8a:
         92:d6:27:a0:fc:dd:ce:86:d1:7e:7a:a2:72:a9:2d:a3:9d:7e:
         77:04:f2:7c:90:a0:f4:1a:9d:b1:fd:1b:b2:5a:d2:6d:de:63:
         e6:20:e0:a1:1f:16:d4:7a:bc:e6:2e:77:8c:36:1f:ce:e8:2f:
         76:3b:45:a5:17:eb:df:d7:42:92:24:f0:dc:83:58:a1:af:b3:
         08:eb:3e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:46:46 2026 by rpki-client