Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          jyS0PbJDhX54hyIE/iIl8HuX7K7TD8AlPPyP0tKFh0M=
Subject key identifier:   69:8C:5D:4D:72:A2:72:55:53:52:0C:F3:7B:45:33:AE:5A:91:1C:56
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       019EB4D6DBD8326CC3505C1DDE0FAF1A6672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          1953
Signing time:             Thu 11 Jun 2026 04:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 04:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 04:00:40 +0000
Files and hashes:         1: 5cl4Z6asyPqRl4z3J4ySouDyEeE.roa (hash: PzM5l6ACiLTk3VlfamE9R6T8MML28IE4R3kgNFrFOdE=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: kX66YdeGwphFtZ0sDFpEtZiYLwUP0+GPjAUv/7BFdR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b4:d6:db:d8:32:6c:c3:50:5c:1d:de:0f:af:1a:66:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Jun 11 04:00:40 2026 GMT
            Not After : Jun 12 04:00:40 2026 GMT
        Subject: CN=698c5d4d72a2725553520cf37b4533ae5a911c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:f0:7c:b8:07:95:39:aa:92:0d:cf:da:ad:
                    4a:d0:13:ee:27:0e:40:cb:fd:40:0e:28:04:35:1b:
                    78:cc:64:da:a6:04:c6:9d:35:0a:15:0e:a2:b3:66:
                    c0:dd:30:e4:a1:41:e8:74:cf:74:a8:88:29:68:f6:
                    2c:e7:8d:89:14:b2:40:15:66:50:e2:dd:7b:21:b1:
                    9a:0b:0e:3a:37:2c:f2:6c:7e:23:48:4f:a6:58:9e:
                    8e:fa:da:7f:9e:07:91:bf:7f:87:42:72:a4:27:93:
                    78:ac:ee:6e:eb:38:19:14:3e:2b:4f:12:2c:99:63:
                    2c:95:d8:aa:bd:26:26:dc:d6:5a:e8:41:e0:db:d1:
                    cd:3b:c3:08:0c:d4:0e:15:ec:7d:dd:82:ed:6d:31:
                    f7:05:b4:1a:9e:68:d9:1f:01:76:e1:b0:4b:c7:42:
                    ea:7e:42:06:7f:b2:ef:37:86:8f:10:46:3d:9c:dd:
                    63:f5:35:b4:70:93:d0:e1:b4:cc:ef:c6:05:ea:c8:
                    61:87:09:45:3e:aa:af:a6:fb:1f:92:f5:1b:c8:c3:
                    a5:fa:7a:3f:5d:c0:d0:d0:f8:ff:b4:57:cc:41:ac:
                    6e:8f:e0:74:32:01:fa:d8:c1:fa:0e:d6:cb:74:54:
                    9b:b0:21:e8:46:c8:26:6f:9f:29:c5:69:ad:6a:ca:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:5D:4D:72:A2:72:55:53:52:0C:F3:7B:45:33:AE:5A:91:1C:56
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:67:19:91:3d:8c:28:70:b0:f7:eb:25:77:8d:cc:b7:d8:f9:
         91:a3:fd:50:04:f8:92:10:1f:eb:77:75:f5:20:12:4f:6b:cc:
         fd:d1:e3:2a:e3:f2:01:6e:2d:af:82:75:17:88:70:71:10:6c:
         e5:c6:69:37:55:3a:c7:6d:7b:8d:9e:05:2e:42:dd:f8:cf:ee:
         6f:23:b0:11:a9:1d:03:4d:98:28:8b:4e:64:05:e2:35:57:57:
         84:3f:3b:82:64:fb:1c:a1:80:58:37:3e:0a:d9:1c:9a:6a:d2:
         1b:b0:7e:87:95:0b:f1:73:df:d1:5d:f0:d5:e5:da:e0:c3:31:
         d5:2d:a8:b7:d0:19:cc:28:88:61:e2:3b:29:8a:ff:d8:ac:42:
         56:f8:5c:28:da:7c:6e:78:ba:00:ea:e3:de:ea:39:4e:ed:a5:
         d1:9d:99:c8:e2:78:b6:76:53:25:41:af:c9:97:96:6e:d6:45:
         cc:06:d4:e7:6d:bf:42:95:57:a5:9a:d1:09:5c:c2:5f:9a:95:
         8a:6d:6e:37:f1:58:b0:9a:c5:c1:9c:90:e9:44:b0:04:a1:ce:
         18:67:50:0f:14:28:91:b5:6a:db:57:c0:a9:b5:b8:bd:3b:ae:
         0e:d4:0c:41:22:2b:44:2f:7b:33:93:f0:89:5a:bd:0e:4f:d3:
         02:0d:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:31:39 2026 by rpki-client