Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File:                     WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier:          uE4842Kt6nSmqZVWWJ6BafDuZ/Dy4eURp7+Nih69okQ=
Subject key identifier:   F9:00:A5:A1:13:90:13:4E:CB:39:2B:B0:06:CB:12:E1:BB:36:32:5C
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer:       /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial:       019E91DCCDAB5EBE986D68EACD74D22EC1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number:          10A9
Signing time:             Thu 04 Jun 2026 09:00:27 +0000
Manifest this update:     Thu 04 Jun 2026 09:00:27 +0000
Manifest next update:     Fri 05 Jun 2026 09:00:27 +0000
Files and hashes:         1: 59YcII7vwSrelszgVXfE1Zyv6ic.roa (hash: q6jTMI6TImBNKUCWPMApFyq9F6Fxj9YmbzWV3XM+69w=)
                          2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: 0Gxk6g/q0ioKkALHBNpihj/950rp0Jk+GJk0zT0f1BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dc:cd:ab:5e:be:98:6d:68:ea:cd:74:d2:2e:c1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
        Validity
            Not Before: Jun  4 09:00:27 2026 GMT
            Not After : Jun  5 09:00:27 2026 GMT
        Subject: CN=f900a5a11390134ecb392bb006cb12e1bb36325c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:64:b8:13:59:5d:0e:02:21:73:3d:54:de:
                    ea:35:58:3b:0b:f4:88:a0:4a:f6:a7:c9:96:82:66:
                    a7:b4:26:1c:d6:2c:48:5d:5e:60:d2:50:1d:fc:13:
                    56:fc:ac:a0:99:8d:79:09:f8:dd:9a:97:4c:38:40:
                    d7:7c:ae:90:79:2e:fc:97:60:33:28:76:d4:8f:f6:
                    75:45:80:1b:35:c5:4d:37:f4:2b:a2:d4:cf:e8:2f:
                    37:2d:59:40:a4:c1:1e:05:ed:46:7b:00:35:27:4e:
                    73:87:cb:e7:8c:b0:f6:73:b1:1f:3b:32:79:6d:0f:
                    3d:95:c3:5f:20:90:34:1a:a7:4f:5f:32:e3:47:86:
                    fc:ec:50:fe:df:4d:97:93:79:7d:c9:0b:f5:e3:d8:
                    68:98:c6:c3:76:10:5f:4a:24:4c:de:5c:40:fb:eb:
                    21:35:db:16:a6:31:20:2a:98:a7:6d:10:0b:98:d3:
                    60:ed:ad:2e:62:a0:ce:96:fd:f0:46:45:4d:3f:9b:
                    16:0c:c2:a9:a3:ee:39:0b:2d:77:20:5b:46:e1:7f:
                    65:e3:09:f8:38:10:74:af:27:76:ad:7f:2c:12:14:
                    39:ad:17:9b:a7:80:53:d6:5d:4a:38:83:db:cb:cb:
                    6c:4a:b1:82:cd:18:11:09:b3:02:ff:b2:e6:01:41:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:A5:A1:13:90:13:4E:CB:39:2B:B0:06:CB:12:E1:BB:36:32:5C
            X509v3 Authority Key Identifier:
                keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:04:3e:c1:99:96:98:fa:de:2d:ab:3d:5a:09:6e:e5:15:
         3b:6b:e7:a8:2a:c3:90:7d:1e:56:6e:b9:5d:db:e9:74:27:16:
         0b:9b:7a:78:9a:48:68:33:60:23:88:7f:d1:72:72:9f:84:da:
         d8:3c:d1:84:7c:05:c7:09:b5:cf:cb:71:a9:45:ed:b4:a0:17:
         63:26:db:b6:56:91:04:2a:ee:5a:33:67:3b:62:c8:40:c7:d6:
         98:c2:e6:02:04:ea:35:c6:93:70:c2:9c:ca:5e:95:4c:b1:a5:
         a3:f8:e5:3c:63:b3:19:6e:2a:1f:bc:63:a3:9a:a5:65:7d:79:
         58:f0:c6:26:b8:fc:ed:da:a1:8f:a3:3d:32:78:32:09:13:f5:
         cb:c6:a8:f1:89:04:19:b7:2b:b6:e5:32:37:56:dd:8d:c8:96:
         9b:0e:9f:47:ce:ea:1c:85:a9:71:1c:4a:97:e6:c0:55:74:04:
         0b:04:2d:c0:2b:d8:0b:9c:e2:10:48:23:ff:d6:35:9a:b6:48:
         b3:c2:a6:13:03:25:8b:c7:d5:dc:9d:b4:00:89:ca:46:d8:fe:
         7a:a8:f5:5d:d3:3d:70:61:03:0b:db:96:6a:8a:12:55:12:8b:
         c8:c4:f2:4e:9e:0b:08:1b:c2:44:40:a8:76:f0:c7:d5:9f:64:
         ea:fa:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:12 2026 by rpki-client