Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          7+ZXQkDHPiILL38PztY33UKCeujBoW6i63+hv/MWN8I=
Subject key identifier:   C0:02:FC:15:26:F8:FB:EC:AD:6C:0A:75:52:64:1D:A9:45:C5:19:DC
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       019EDE7823635E7D890DCE7E6A19F98F67EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          196B
Signing time:             Fri 19 Jun 2026 06:01:15 +0000
Manifest this update:     Fri 19 Jun 2026 06:01:15 +0000
Manifest next update:     Sat 20 Jun 2026 06:01:15 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: BkzbBWlWzbInDrKEP7LhBWFhSnaRapKM6kgx5x0xzl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:de:78:23:63:5e:7d:89:0d:ce:7e:6a:19:f9:8f:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Jun 19 06:01:15 2026 GMT
            Not After : Jun 20 06:01:15 2026 GMT
        Subject: CN=c002fc1526f8fbecad6c0a7552641da945c519dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:f1:8b:87:e2:c1:5c:bc:5d:54:13:f4:54:
                    84:a1:7a:0f:fc:60:ef:7f:45:80:bd:6a:70:f1:d6:
                    51:ec:91:25:17:54:3b:bc:94:1f:f9:59:e3:a1:b2:
                    65:73:cc:ab:f3:67:0d:c1:68:9c:7d:15:ff:c3:42:
                    9a:5f:35:08:9d:64:f9:d3:34:70:db:9d:c5:a4:bf:
                    7a:a4:c3:53:02:66:40:eb:13:08:7f:d4:4b:3b:e9:
                    5a:07:89:a2:25:5d:dc:00:f4:87:4e:76:1e:92:12:
                    df:63:9b:c8:5a:78:3d:7e:1a:48:f3:3a:32:f4:ed:
                    b9:7f:ca:3b:ac:ef:9a:70:4b:ba:77:d2:90:ad:3d:
                    6f:f9:6d:3b:97:6a:54:7c:84:65:08:1a:7d:6a:6f:
                    bb:25:4f:04:66:29:0c:9b:2c:54:9b:1c:50:22:bf:
                    b0:3e:d2:7e:54:f4:1d:82:15:7e:cb:84:d3:a1:30:
                    2d:3e:62:88:46:58:f0:11:93:40:57:33:97:ce:73:
                    87:ad:ce:bb:63:fc:f3:b0:7c:ae:89:b6:bd:38:db:
                    38:88:dd:c4:f3:6b:4e:3a:38:6b:ea:0c:59:0a:f0:
                    f4:ba:ab:15:ae:47:28:2a:c7:39:5d:00:cf:56:99:
                    82:a5:d3:98:b7:31:11:ec:ae:18:47:6a:f7:0b:05:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:02:FC:15:26:F8:FB:EC:AD:6C:0A:75:52:64:1D:A9:45:C5:19:DC
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:c6:3a:fa:ed:63:ac:60:45:4a:3c:40:9b:8e:0e:fb:3c:
         44:51:1e:25:e4:42:f8:1d:c2:72:e0:c8:ac:55:3b:a5:87:78:
         3a:80:41:f4:9e:11:de:52:ab:c1:d3:59:94:f6:35:b5:0b:89:
         55:4f:8f:5a:c0:75:47:42:8e:85:cf:a8:b4:f4:f2:31:ae:0e:
         0c:2e:20:48:1f:b0:91:3b:ea:ff:0e:bd:99:93:05:f4:14:43:
         51:9d:fd:f7:19:03:e2:4e:9e:26:e6:62:3f:27:10:7b:3f:64:
         cf:33:d4:16:b6:ce:64:b3:55:09:f5:b5:75:a7:bb:7b:40:81:
         21:77:b8:2a:85:8a:16:02:c7:14:29:da:45:03:ba:9b:ff:c5:
         48:5e:38:c8:f1:fb:1b:fb:3c:48:66:b1:a7:0b:b6:04:ea:85:
         6c:81:6d:a8:b1:1a:d9:09:61:1b:43:6d:df:da:f4:bd:cd:fc:
         e6:02:9b:c5:db:08:41:d2:8e:55:c4:39:df:fa:d8:30:9e:c5:
         50:d4:a7:39:95:d9:c6:d3:bb:a6:b5:f7:7a:aa:5c:df:75:07:
         4f:0b:8f:4e:03:f5:79:d8:7e:47:20:4a:bf:c3:76:34:a6:e4:
         1a:98:2f:27:8b:f6:ed:b0:ec:ca:c5:40:99:46:77:23:fd:02:
         fb:c0:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:31:37 2026 by rpki-client