Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File:                     wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier:          MOY3MVk9lMyNhGNoseLP5Z7pLKAsEKWwQCByX3BSOVk=
Subject key identifier:   C4:02:B8:46:96:86:36:74:FE:F7:7F:C9:B9:58:80:44:06:B5:C2:A6
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer:       /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial:       019EB76A7251CAE1DE669BCE19926E027536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number:          1965
Signing time:             Thu 11 Jun 2026 16:01:07 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:07 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:07 +0000
Files and hashes:         1: VIJwQfnhHs3GHlmC403kclYI19k.roa (hash: pBGpIGY8oZecekT32agQOuUVvcZzYj8n135ZMBKxfjM=)
                          2: v0t-x1ezAOQzRGxbJKUbHeC0HN4.roa (hash: NklbdNXJrdH3kXOcwc9Kb/YETkdY+vXKTqyupumOkFo=)
                          3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: XvweAeI9yrnWG0ft7DD6yH/sBxyMV43EZx6Gxo6VCig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:72:51:ca:e1:de:66:9b:ce:19:92:6e:02:75:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
        Validity
            Not Before: Jun 11 16:01:07 2026 GMT
            Not After : Jun 12 16:01:07 2026 GMT
        Subject: CN=c402b84696863674fef77fc9b958804406b5c2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:e8:3e:c8:10:70:e0:d5:6c:d7:7a:f0:ae:
                    7b:d8:3b:01:72:a2:a6:c9:52:7c:ef:fe:86:4e:ed:
                    6a:b1:37:86:e7:bf:5b:64:77:39:d6:44:54:24:b7:
                    b9:24:df:64:1f:73:b7:1c:fe:1f:67:36:43:54:b6:
                    43:0d:33:52:32:a4:73:f2:ef:0b:dc:89:ef:86:9a:
                    46:4b:18:77:2c:95:67:51:65:b0:69:78:85:f6:47:
                    84:71:9f:28:97:63:b8:7a:07:59:24:a8:a8:0e:86:
                    6c:a2:cc:82:75:3d:e6:33:8a:78:62:42:07:9a:07:
                    a6:c6:98:48:6d:00:3e:dc:1c:94:37:20:3a:a1:6e:
                    ce:54:79:18:d2:57:54:d6:ed:64:c0:ea:7e:81:7f:
                    fc:cd:03:af:5a:00:1e:fe:f1:4a:15:f3:1f:7d:d9:
                    55:70:c3:4f:fd:f9:dd:eb:ba:e9:cb:1b:ec:ee:63:
                    2c:67:c8:90:0a:54:5e:3e:31:12:02:d5:93:f5:97:
                    ba:0c:1c:f6:ff:1f:88:ac:de:05:37:5d:8c:1c:f5:
                    9c:8b:04:c6:9c:1e:91:77:ac:f9:f4:d3:07:b2:d3:
                    d9:ad:0d:7e:26:db:a1:ea:e8:3d:91:bd:f8:71:42:
                    46:76:5d:b9:ce:6d:7d:ea:58:f3:28:02:7f:9e:73:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:B8:46:96:86:36:74:FE:F7:7F:C9:B9:58:80:44:06:B5:C2:A6
            X509v3 Authority Key Identifier:
                keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:b5:b9:b7:43:23:89:05:7a:a0:00:08:44:5b:c7:a0:7b:
         c0:a9:6b:d6:2b:cc:b5:9e:cf:45:d9:a6:52:31:00:10:b1:e8:
         1e:dc:c5:eb:80:7c:ee:92:10:cd:32:02:af:04:59:09:59:76:
         e9:14:47:f6:7d:71:b9:cf:1d:8d:0f:78:28:ef:1a:d7:94:d0:
         3b:dc:8a:bd:5a:12:bd:b6:3b:1e:d6:70:5a:78:c7:5c:a3:81:
         58:fe:a6:60:2a:94:f6:37:fa:ed:0b:8e:d8:f0:32:98:bd:46:
         41:5e:21:9b:2e:37:0d:fd:28:fb:1a:34:99:93:01:a3:11:03:
         ad:66:b4:5c:23:cf:15:51:9a:d2:f3:dd:78:1e:55:34:16:d8:
         2d:7b:61:cc:bb:6e:d2:6f:64:ca:d4:b8:7a:76:95:f5:77:1f:
         74:ed:b9:94:b6:42:14:6e:6e:aa:0d:b6:83:1d:57:75:ab:4a:
         ba:4d:31:bd:65:03:44:a8:7a:07:e5:28:7d:23:58:ed:0a:76:
         c7:38:81:52:43:35:47:57:93:4f:18:87:bb:90:15:02:0e:2f:
         7c:5f:03:25:2b:24:ea:e5:06:7f:bf:b4:12:5a:5d:17:9e:b1:
         87:44:db:b0:f3:f1:d7:d6:94:83:35:99:de:3b:3a:77:95:08:
         1c:b9:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:19 2026 by rpki-client