Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          1fu8mreFSttUg75X+qo/LESRkUiM9xRuICbxzsEDZow=
Subject key identifier:   60:F3:66:0C:94:9C:6F:ED:63:25:7D:B4:0E:61:A9:6A:2D:36:77:FA
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019E2A0289B529666A5657B0A5DA95AF76F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          0109
Signing time:             Fri 15 May 2026 05:01:09 +0000
Manifest this update:     Fri 15 May 2026 05:01:09 +0000
Manifest next update:     Sat 16 May 2026 05:01:09 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: 6F7tUUqDMyx53W8j6NHneSI6E3mCLBeU2gzAN7HAN9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:89:b5:29:66:6a:56:57:b0:a5:da:95:af:76:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: May 15 05:01:09 2026 GMT
            Not After : May 16 05:01:09 2026 GMT
        Subject: CN=60f3660c949c6fed63257db40e61a96a2d3677fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:de:52:b8:80:36:d5:ad:29:27:b4:c4:5d:
                    f4:9c:03:e7:a5:06:ab:b6:a4:53:12:8e:37:2c:41:
                    50:bb:6f:8f:11:a8:bb:16:87:74:5d:97:1e:6a:a5:
                    b3:82:6a:92:de:e9:45:62:1e:1e:c3:12:7e:51:83:
                    ef:9e:89:4e:3b:61:b8:bc:83:a4:d4:21:d7:a3:74:
                    3e:70:8b:fc:44:b0:18:2a:58:31:91:be:6c:94:72:
                    79:15:15:ba:7a:08:fc:40:e0:4e:ce:33:12:c8:eb:
                    12:b3:e9:21:41:9d:80:4a:aa:64:47:d7:29:d6:ad:
                    08:4b:05:7c:84:0f:4f:03:0e:ac:c8:3a:ac:e9:f7:
                    dc:7b:08:6d:67:a7:ac:70:ab:fb:97:c0:c8:9e:3c:
                    e0:d6:bc:b3:d8:6b:b5:d0:25:75:4b:c2:ab:e8:d3:
                    40:86:e7:78:bd:1f:74:d7:50:db:64:9a:5b:b2:d9:
                    60:14:21:86:aa:58:78:7b:36:f6:47:c1:c2:85:f5:
                    9a:a7:ca:03:6d:ae:1d:0e:90:6b:28:d2:ec:b0:c2:
                    87:b0:e1:bf:6a:1c:aa:5d:9e:89:88:f9:af:cd:19:
                    25:a7:0c:1e:93:07:ea:4d:87:46:eb:5d:32:c8:26:
                    17:75:dd:8d:31:af:10:0f:8d:14:28:79:43:a1:ea:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:66:0C:94:9C:6F:ED:63:25:7D:B4:0E:61:A9:6A:2D:36:77:FA
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:56:4a:3f:d0:72:e1:75:2d:e4:36:a7:3e:44:0f:60:30:
         78:7a:87:87:19:86:59:ac:b2:d3:3a:2c:fd:84:e6:e5:13:2d:
         31:86:f1:cf:37:29:0a:55:a9:9b:98:a5:68:68:54:b7:48:82:
         6e:e8:4a:1d:cf:da:a4:aa:5d:ee:11:77:7e:8f:d6:ab:6d:50:
         8d:87:89:c9:84:85:5d:56:30:72:a7:fe:b3:c8:21:6c:69:cc:
         43:ab:14:d4:41:b2:fd:de:02:9e:4e:d0:1b:91:59:74:2f:9d:
         f4:73:53:a9:65:ad:c8:e0:5b:69:88:c2:04:b2:62:8e:1c:64:
         a5:47:c0:bf:74:80:c7:ec:85:83:f5:37:34:14:1a:f9:ab:33:
         1c:17:3c:b1:6f:1f:48:d9:37:e1:49:0d:f1:0d:48:29:ae:b0:
         1b:4b:0e:fb:cd:e3:9b:f9:be:05:4c:e7:d2:60:ba:b9:83:27:
         f5:03:66:6b:48:c2:1d:32:a2:42:5e:27:c4:7d:92:34:5d:7b:
         59:87:94:d6:1a:d6:57:f9:fa:9c:c2:d9:8d:35:3b:6a:65:b4:
         b7:4d:c4:d9:58:8a:22:bd:9e:2e:b6:4a:2a:ed:98:d7:43:1b:
         50:05:97:9d:cc:37:9d:56:6d:30:fe:80:4e:2d:5c:ee:c4:6d:
         fd:d4:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:17:55 2026 by rpki-client