Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File:                     wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier:          zYrIqM6tadD288XI3rexrXxbMUrAhm//rCtf3YJceik=
Subject key identifier:   BC:BF:85:E1:8C:0A:43:43:1A:43:EF:83:27:BC:AB:E7:04:BD:D4:87
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer:       /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial:       019EB6575EA16AF4386569B00801E2F5E860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 11:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 11:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 11:00:39 +0000
Files and hashes:         1: JgD7sSFnrb2xUGiELXOjiaZY0BI.roa (hash: 9teg4ZtPmwzMB8k8UcTSQ3ddbpx2ua0lA+j0ULnnCdQ=)
                          2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: 5c+hAWun0vSDpjQXUTiDkr24pVFBXocPF0NsSu3o0tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:57:5e:a1:6a:f4:38:65:69:b0:08:01:e2:f5:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
        Validity
            Not Before: Jun 11 11:00:39 2026 GMT
            Not After : Jun 12 11:00:39 2026 GMT
        Subject: CN=bcbf85e18c0a43431a43ef8327bcabe704bdd487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:b0:28:fd:f2:ea:9e:65:8e:77:82:92:3d:
                    ed:69:cc:e1:28:95:6b:98:08:9d:8d:b7:97:f6:f7:
                    52:a7:87:d6:97:92:65:0b:7e:f3:a9:13:c7:79:76:
                    b8:ed:e2:fd:69:82:b9:8f:70:a1:f1:88:f9:d0:8f:
                    5c:78:6e:38:dc:3a:71:82:3f:e3:3d:2b:aa:e8:32:
                    49:a1:c9:8b:51:c5:04:49:90:df:c6:4d:dc:ca:8d:
                    b8:47:58:c8:ae:4d:34:43:aa:12:1e:dc:6c:b8:db:
                    28:68:12:7b:5f:46:77:86:c5:74:72:09:45:6b:56:
                    1a:1a:41:b3:d5:2f:b5:ef:bb:36:d5:6f:d9:8f:0b:
                    a1:a7:a8:eb:f0:91:4b:13:29:ac:aa:ab:73:7f:77:
                    6e:a0:be:fc:62:1e:d0:83:85:c8:51:83:b1:1d:4c:
                    15:75:05:42:b3:f4:92:dc:43:24:dd:f4:36:8f:13:
                    70:bc:c8:2c:78:f0:8c:bb:0d:6c:50:7a:64:ad:53:
                    e3:f1:8f:6f:3d:1c:6a:40:39:74:df:0c:32:b7:66:
                    61:96:35:64:69:1b:61:90:6c:a8:29:5e:44:1e:ee:
                    e2:e7:10:ba:a4:2e:4b:0b:6c:07:87:4b:78:4b:8b:
                    33:d2:bd:bf:dd:d5:6f:1d:bd:d5:e5:65:38:6b:4a:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BF:85:E1:8C:0A:43:43:1A:43:EF:83:27:BC:AB:E7:04:BD:D4:87
            X509v3 Authority Key Identifier:
                keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:6a:6f:46:24:37:7d:e8:8a:a1:64:b7:65:20:b7:7c:64:
         d7:f2:ee:ee:6d:d8:ad:7a:cc:ab:98:d8:88:25:a0:49:03:26:
         28:9d:69:54:99:c1:32:7d:64:b5:0b:ae:2d:53:43:c4:08:98:
         61:26:98:ec:6a:15:a3:8e:21:c6:f6:34:6a:60:14:29:c4:79:
         94:8d:9a:29:f9:35:0a:d1:bd:37:0b:de:9b:a3:41:e8:47:17:
         d7:05:a5:8e:74:3f:e1:f2:8b:f6:a2:7e:d2:30:ee:bf:48:eb:
         ae:a3:9f:6a:c4:e5:c1:17:fc:c2:7d:98:d9:7a:5e:43:d0:4b:
         7a:5e:80:c2:04:93:ad:39:e8:b1:f8:cb:13:a7:3f:5a:cc:0d:
         e2:5d:a7:df:57:14:6a:fb:e0:33:72:7b:0f:8a:da:af:c0:c1:
         35:14:71:e9:9f:14:58:1c:de:d7:69:40:1b:6b:9f:e6:6d:dd:
         67:e1:3e:c6:df:bb:40:d3:be:84:81:24:c5:19:08:8b:7b:00:
         e2:40:d3:06:48:6c:c7:03:9b:c2:9b:30:0c:bd:01:d2:7b:c6:
         58:c8:93:26:aa:ae:8b:e7:f7:d7:53:4e:e6:4f:3e:d7:d3:9f:
         79:a2:c4:3c:42:39:a5:05:eb:fb:e1:cf:fa:a0:3b:af:01:b9:
         b7:41:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:44 2026 by rpki-client