Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File:                     WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier:          ahKSZhURstb6QL7qiuRAzHoihjSG5TlzNjvEcBpcw/E=
Subject key identifier:   3A:AA:F6:D2:B2:83:97:BE:71:76:47:25:44:3C:66:6A:2A:4D:B9:5F
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer:       /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial:       019EB7A152D9BD6DB16E947940721B5D5CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number:          0579
Signing time:             Thu 11 Jun 2026 17:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:03 +0000
Files and hashes:         1: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: C9NrvIS8xUltg0ZUHOzgjWOX++dr1JY6OFJLozYyYGk=)
                          2: rm6gBchORJ-jpmu9RaApbnzR-8w.roa (hash: lte7WLkbI36lJ+4fiNF1yu19eeqodaTXa0g3tAj6qk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:52:d9:bd:6d:b1:6e:94:79:40:72:1b:5d:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
        Validity
            Not Before: Jun 11 17:01:03 2026 GMT
            Not After : Jun 12 17:01:03 2026 GMT
        Subject: CN=3aaaf6d2b28397be71764725443c666a2a4db95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:b3:80:d1:c3:0e:1f:61:25:d3:01:3d:6f:
                    1f:20:c1:1b:d1:4d:42:c6:9d:8e:57:fe:b7:be:58:
                    64:27:81:af:ae:fa:92:61:73:0d:49:2d:fb:53:7a:
                    b9:83:6f:4c:11:70:bb:ea:7a:c9:52:66:a4:85:bf:
                    f0:42:27:77:12:1c:9c:a6:d8:7b:3e:b1:f0:bb:53:
                    5b:8e:d1:4f:99:a7:78:01:00:0c:f8:ba:84:20:42:
                    5a:bc:f0:ae:9e:95:05:dd:50:8c:60:27:b3:1b:54:
                    0e:a2:25:a6:4e:90:d5:f4:c1:71:b1:83:43:26:b7:
                    83:a8:08:72:03:40:e1:b7:b8:88:7c:13:98:5c:b4:
                    bc:2a:9e:43:19:5e:59:5f:5d:cd:82:f9:bb:c6:f1:
                    6d:65:e6:3c:56:f5:f5:a1:ca:3d:0d:39:f0:e5:14:
                    2d:d1:46:ab:40:9e:f2:ef:ba:9d:c0:e1:0f:c8:48:
                    a5:04:d3:8b:80:69:3e:5d:33:35:6a:3d:e7:f0:7e:
                    c2:7c:4a:71:ac:b6:50:25:fe:15:27:be:7a:1b:3c:
                    fe:28:cd:ec:2f:a9:5c:47:d8:26:33:f6:ad:22:a5:
                    e0:41:29:c4:bc:99:32:e0:36:c6:31:0f:ff:56:17:
                    ba:7f:e9:8b:c3:7c:70:5a:ee:c4:d8:10:3b:c7:16:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AA:F6:D2:B2:83:97:BE:71:76:47:25:44:3C:66:6A:2A:4D:B9:5F
            X509v3 Authority Key Identifier:
                keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:0b:3a:a9:2c:e6:7f:db:4e:42:e7:61:12:95:db:b1:08:
         37:5e:3d:63:9c:eb:38:36:8e:4c:74:53:ec:6a:b0:7c:a2:93:
         f2:92:28:0d:a1:98:cf:a1:6a:f5:b8:61:2f:07:c6:19:4a:53:
         a0:b3:8f:7e:1c:c7:af:db:89:bc:d5:00:4d:11:22:e6:f3:09:
         a1:65:50:61:cb:ad:90:85:0e:19:c4:d2:55:51:d4:c6:da:9f:
         9c:ea:2c:12:cd:19:2c:d5:bb:97:37:e5:84:5b:36:c6:67:19:
         3d:1a:59:0a:1f:1a:6f:9e:a8:61:22:01:92:e8:87:26:04:f8:
         b0:cd:3b:bf:38:cd:31:44:20:93:ea:7b:38:79:3a:bb:58:d2:
         fb:98:dd:8f:ae:b7:3b:63:e9:d0:0b:74:44:e4:dd:c9:9b:a4:
         5a:55:71:62:e2:4c:6d:f2:a8:0f:ce:ef:bf:57:e6:7b:63:6e:
         75:10:ec:fa:34:b3:e8:d0:d7:4e:67:4c:1c:9a:26:6f:56:3e:
         c1:76:70:da:70:34:a0:5a:bf:88:7f:9a:33:8e:b8:b3:61:c9:
         54:14:78:54:95:12:e6:6c:d6:78:fb:8a:e2:fc:9d:87:da:7d:
         0e:ba:34:b4:28:6c:71:0d:ba:1b:5a:ed:d1:04:8d:8e:fe:9e:
         be:64:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:08 2026 by rpki-client