Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          S3t9NijuflgG+xJ+gCnex0TYwOkd0Il22Qmk269Qlow=
Subject key identifier:   64:35:E7:4B:4F:50:21:A1:6B:82:55:DB:72:2C:17:4D:53:38:A8:DD
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       019EB7D79E4EAF4C98D3E9D75F98744D4946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 18:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:21 +0000
Files and hashes:         1: F8BqFfZoIsv5x2t_rO_S_NuJemg.roa (hash: PB4J+IoKo4T7Q6QAGzoR44UFBrvbvOiTrydpAGnj8mc=)
                          2: GLHvXz2R1lOAHX7TzyDNoCB2iBY.roa (hash: OBjA+NNWsAq34/o+6Q0m7vwkANLJOuwcO5B1z9txcvU=)
                          3: Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa (hash: QSZtykOf++sIkuecLt/sSggguVhjdeR5YjW9l7cEQV8=)
                          4: OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa (hash: HQ35g8yBDULlIp8ua3XKzN1vR0rEMHW47KubxInNm2g=)
                          5: QYAIVSd2tgwed65DPiU0ds85aB0.roa (hash: g9cZELqfkNNkZkS/ZARd962rG7NHC+bpHrVh18iN6TI=)
                          6: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: 74KHex474FkEql4+FMJcCMvJ1O0tT+QuMoWeWQQDhdw=)
                          7: jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (hash: fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:9e:4e:af:4c:98:d3:e9:d7:5f:98:74:4d:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Jun 11 18:00:21 2026 GMT
            Not After : Jun 12 18:00:21 2026 GMT
        Subject: CN=6435e74b4f5021a16b8255db722c174d5338a8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:ba:df:f0:2f:6d:61:5f:be:d3:10:53:7e:
                    8a:29:bb:e3:98:59:3e:51:cb:c5:96:37:a3:ca:8a:
                    02:ed:cf:e9:76:8b:78:50:a6:d8:70:38:be:38:7d:
                    0d:76:8f:f9:c5:90:af:19:e3:ac:ee:ca:4d:e6:83:
                    4a:be:05:c9:fc:35:18:1e:1e:b8:81:5a:cd:f0:49:
                    8d:2d:38:5a:dd:dd:3c:eb:92:b6:a9:d1:38:76:4c:
                    20:c4:71:9d:be:42:f9:ff:1b:03:b3:51:1a:c7:51:
                    c2:c7:37:34:0f:f8:31:39:e6:b9:4d:a8:f7:ba:39:
                    f2:cc:c0:6e:e0:e7:fb:74:b6:c5:20:4a:93:7f:49:
                    4f:60:84:41:39:23:f8:71:dc:81:1e:04:dd:48:7e:
                    39:cc:f6:88:d1:df:aa:03:50:2f:e3:5b:bc:8a:a5:
                    e4:38:2b:ac:5c:35:54:dd:c4:b5:7d:3b:41:87:e1:
                    b1:d6:87:92:98:5b:a7:a4:3e:df:4f:8e:2b:a5:4f:
                    d1:06:d4:b3:22:5f:da:a9:99:60:62:4a:c8:6f:fc:
                    da:f5:dd:42:86:e3:8f:e6:c0:17:4f:4b:32:11:ec:
                    e4:64:d8:b0:4b:84:3b:cf:82:da:f4:fd:58:6f:42:
                    90:e6:72:6c:a3:86:54:1c:4a:e9:77:4f:5d:e9:69:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:35:E7:4B:4F:50:21:A1:6B:82:55:DB:72:2C:17:4D:53:38:A8:DD
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:19:f5:85:12:12:d8:34:ef:39:3d:43:69:b7:11:c2:a2:9a:
         df:bc:ef:83:16:a6:1a:c4:a9:45:68:48:ae:43:48:9c:33:ef:
         cb:dd:9f:3b:b9:fa:96:8f:46:e6:20:d4:b9:ab:7a:21:82:a4:
         5e:a0:7b:e4:b1:37:00:d9:2b:18:cc:02:0b:73:d9:93:d7:6d:
         60:a3:cb:40:cb:8c:d8:8e:a8:64:16:27:8c:62:1b:3c:f6:8e:
         27:ec:75:f4:70:f9:d7:9a:99:13:60:4a:a8:2b:ff:6d:79:7a:
         05:62:bd:32:81:e8:2a:d3:e5:a8:c7:56:fd:c2:31:32:31:90:
         d1:38:0b:ca:03:b1:ee:af:40:b0:59:8a:36:76:a4:fe:9c:8a:
         fb:73:ac:ec:75:ea:fb:7d:4a:15:91:93:cc:c4:4a:93:8a:31:
         5b:ae:ac:4a:25:ca:6b:fc:8a:0d:b7:4d:d9:f0:22:f5:e5:38:
         9d:c4:5a:78:52:13:36:25:fd:16:95:2e:bf:38:72:67:3b:42:
         f3:c0:de:ae:5a:3c:65:0d:7b:b8:3a:74:1c:f7:a6:ce:ba:da:
         15:16:13:b7:15:fc:b5:85:63:57:42:09:31:ea:ca:12:46:be:
         e6:ff:97:08:4b:58:d6:d3:b6:a9:97:e5:b3:46:b1:41:42:d9:
         ec:ca:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:29 2026 by rpki-client