Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          h2wcPYTLHAJe1Q+LWk+NI7IAB8wpB/YVpZqHWJMlrhw=
Subject key identifier:   76:77:05:E4:CC:39:3C:BC:F0:50:B8:EF:D4:2C:63:34:AD:69:46:1D
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       019EB6C5B55FE7D907C7F238EC306FDF319C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 13:01:10 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:10 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:10 +0000
Files and hashes:         1: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
                          2: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
                          3: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: 6RdTb/h5C5gV15f9gLBHU1KpquFz7SWqPDzm4GDEnnU=)
                          5: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
                          6: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
                          7: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
                          8: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=)
                          9: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:b5:5f:e7:d9:07:c7:f2:38:ec:30:6f:df:31:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Jun 11 13:01:10 2026 GMT
            Not After : Jun 12 13:01:10 2026 GMT
        Subject: CN=767705e4cc393cbcf050b8efd42c6334ad69461d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:51:9d:68:f3:c4:e8:f0:6f:97:c2:f3:ce:
                    4d:ae:9b:99:97:42:c6:e1:07:37:25:85:05:c7:22:
                    1c:a6:9b:bb:a8:8f:25:04:05:19:3e:71:3f:0e:a2:
                    0b:ab:6b:6f:88:dc:ec:2c:fc:5d:6c:f3:cf:8d:f1:
                    d0:59:ed:80:1d:92:33:39:21:f7:6e:06:37:83:82:
                    31:64:93:13:b5:d2:44:e3:3a:a0:b3:2a:ee:7c:64:
                    5a:2e:78:35:17:52:cb:b5:68:9f:e2:a3:b6:4f:aa:
                    7a:a1:ca:3b:f9:2f:b0:dc:bf:82:58:0f:43:30:1d:
                    1d:de:b2:17:f5:05:ac:1c:59:9c:c2:86:9e:98:60:
                    4a:54:c9:95:33:26:e9:db:5f:45:78:40:9a:2e:7d:
                    65:7d:da:ac:d3:f3:ff:f2:4c:fc:be:7a:52:d4:8a:
                    ea:48:f1:9d:0b:54:f1:59:d6:4a:18:f1:f9:44:28:
                    17:da:e9:de:3a:a5:f2:5d:e4:63:dc:69:ed:63:6a:
                    07:75:c9:3b:4a:e3:a0:3c:e6:e0:94:ef:e3:b2:7f:
                    5e:13:54:b3:46:80:a9:8d:87:46:53:69:47:bf:bd:
                    df:2f:ef:f6:a5:c1:74:fc:c4:9d:13:6e:85:9b:de:
                    ec:f9:89:0c:89:7e:d4:4e:96:d8:3e:b1:18:d5:5f:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:05:E4:CC:39:3C:BC:F0:50:B8:EF:D4:2C:63:34:AD:69:46:1D
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3a:33:74:f4:7f:7b:6a:ca:0e:4c:fd:5f:96:07:93:ec:ce:
         27:66:36:e2:c2:ea:57:7b:fe:92:5d:0b:a1:aa:d1:f9:72:29:
         fd:1a:bd:12:48:02:9c:c5:6b:0b:a2:01:3d:7a:50:de:6d:71:
         ff:b5:80:35:64:2a:8d:c6:f7:a0:a4:5a:99:94:dc:49:93:7e:
         fb:e0:8b:00:c4:93:d2:5b:ae:a3:12:29:4d:75:87:f6:ac:89:
         70:2d:7d:fa:1f:16:61:b4:25:0c:37:83:56:08:31:3a:f8:ec:
         e5:7a:e6:56:9e:39:15:94:a9:8f:c6:66:87:91:55:35:e2:a2:
         6a:f4:a5:55:00:ea:5d:5a:ef:28:99:91:c9:3f:31:a1:b4:4e:
         6b:b4:e1:91:0f:62:26:be:fb:75:f9:1b:8b:43:89:5e:19:f0:
         b3:34:31:e0:12:ef:9d:e3:44:6d:1f:c3:28:43:70:0e:24:23:
         f9:cb:3f:27:b7:ff:05:b8:8d:15:2a:c2:43:ba:1a:bb:26:73:
         e0:0a:38:b8:0e:05:8e:12:e1:02:7c:dc:f3:86:79:b3:ee:b8:
         a2:13:b1:2b:3b:59:bf:bd:f6:69:75:3e:e1:a4:28:45:f5:4e:
         9f:ae:6a:9f:9f:fe:e7:cc:10:e4:74:73:5d:e8:52:27:ba:7f:
         5d:93:85:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xbVf59kHx/I47DBv3zGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjYwNjExMTMwMTEwWhcNMjYwNjEyMTMwMTEwWjAzMTEwLwYDVQQD
Eyg3Njc3MDVlNGNjMzkzY2JjZjA1MGI4ZWZkNDJjNjMzNGFkNjk0NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxopRnWjzxOjwb5fC885NrpuZl0LG
4Qc3JYUFxyIcppu7qI8lBAUZPnE/DqILq2tviNzsLPxdbPPPjfHQWe2AHZIzOSH3
bgY3g4IxZJMTtdJE4zqgsyrufGRaLng1F1LLtWif4qO2T6p6oco7+S+w3L+CWA9D
MB0d3rIX9QWsHFmcwoaemGBKVMmVMybp219FeECaLn1lfdqs0/P/8kz8vnpS1Irq
SPGdC1TxWdZKGPH5RCgX2uneOqXyXeRj3GntY2oHdck7SuOgPObglO/jsn9eE1Sz
RoCpjYdGU2lHv73fL+/2pcF0/MSdE26Fm97s+YkMiX7UTpbYPrEY1V+VeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ3BeTMOTy88FC479QsYzStaUYdMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzozdPR/
e2rKDkz9X5YHk+zOJ2Y24sLqV3v+kl0LoarR+XIp/Rq9EkgCnMVrC6IBPXpQ3m1x
/7WANWQqjcb3oKRamZTcSZN+++CLAMST0luuoxIpTXWH9qyJcC19+h8WYbQlDDeD
VggxOvjs5XrmVp45FZSpj8Zmh5FVNeKiavSlVQDqXVrvKJmRyT8xobROa7ThkQ9i
Jr77dfkbi0OJXhnwszQx4BLvneNEbR/DKENwDiQj+cs/J7f/BbiNFSrCQ7oauyZz
4Ao4uA4FjhLhAnzc84Z5s+64ohOxKztZv732aXU+4aQoRfVOn65qn5/+58wQ5HRz
XehSJ7p/XZOF/g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:37:46 2026 by rpki-client