Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File:                     w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier:          taA4cQnSUARMkx9vGA6NIbmtk/ggitCdKoxEPBJ0mDo=
Subject key identifier:   C4:3C:E7:36:85:BB:73:B6:C8:B1:E5:96:EA:DB:E4:3A:35:5F:CA:E3
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer:       /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial:       019EB7D7EAC5BAE3D000BC4324994838402F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number:          0A27
Signing time:             Thu 11 Jun 2026 18:00:41 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:41 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:41 +0000
Files and hashes:         1: D3OASNJRyxcVKylwKzpVSr4Ph8c.roa (hash: Z7Uk03nT+HDe/Cth8SAOr4inyUb7bnAc44Mwiwvz1pk=)
                          2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: ZAhy2W895gw3KNolWWk2Y4f85Ss28PZrUgJl0FtL/rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:ea:c5:ba:e3:d0:00:bc:43:24:99:48:38:40:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
        Validity
            Not Before: Jun 11 18:00:41 2026 GMT
            Not After : Jun 12 18:00:41 2026 GMT
        Subject: CN=c43ce73685bb73b6c8b1e596eadbe43a355fcae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:ce:5f:c3:10:86:32:da:75:67:f3:57:8f:
                    81:08:87:08:69:5a:a3:cd:99:f9:86:a5:8d:7a:d6:
                    f9:31:21:3c:ce:ff:84:c5:ac:19:57:d5:f8:24:41:
                    25:ba:86:44:3a:b7:47:13:2e:6f:7d:7f:e0:14:ea:
                    00:b5:b3:a7:b2:5f:e4:4e:df:80:8b:11:96:92:5a:
                    79:4e:ed:11:7c:15:3c:52:58:5a:ad:78:a9:39:66:
                    3d:37:74:ea:9e:b2:3e:c2:14:4a:23:87:1b:fc:43:
                    31:b9:e5:2f:a8:30:c5:45:c7:4c:39:be:ea:96:31:
                    5d:2a:6f:c1:df:22:a3:c6:dd:32:1a:32:0a:7d:ca:
                    e5:1d:61:57:93:cd:c2:20:ff:b0:27:d2:2a:75:7f:
                    ca:39:e9:a0:77:76:1b:18:bb:67:d2:7f:4b:65:57:
                    25:6f:0d:8a:19:4f:92:10:c3:ea:3d:be:77:6a:2f:
                    14:74:10:2f:2b:e0:0c:67:2a:23:06:61:4f:e6:bb:
                    c0:3e:c1:23:49:8d:c1:f4:8a:02:46:43:4b:62:30:
                    ec:86:51:e3:72:34:0d:ed:1d:ad:dc:a2:60:a4:f8:
                    d9:a7:cf:7b:03:17:cf:a6:82:82:26:91:c3:a5:25:
                    52:54:f7:3b:25:47:0f:79:80:97:fd:95:c3:89:c7:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:E7:36:85:BB:73:B6:C8:B1:E5:96:EA:DB:E4:3A:35:5F:CA:E3
            X509v3 Authority Key Identifier:
                keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:d1:c2:25:bf:b5:29:bf:55:9e:dd:7a:83:01:c5:8a:d0:
         24:3c:35:3b:62:02:68:7e:0e:b6:ea:02:a2:ee:31:8f:60:bb:
         79:3f:b5:15:ca:e3:e9:48:35:ed:b5:7e:8e:be:2a:ef:76:1d:
         72:f2:15:8d:d9:84:fd:27:4a:cb:6d:90:09:61:6b:0d:f7:42:
         53:8a:e4:ab:ef:fb:46:5c:fd:ee:52:c5:50:01:dd:e9:a6:55:
         66:8a:a9:e5:6b:66:8a:d2:ff:b4:ef:c3:a3:7e:c8:cb:8f:53:
         28:ed:ac:a9:a6:8f:49:65:1f:7a:0a:ac:9b:4f:9f:22:a5:9b:
         90:28:fb:e6:58:d3:57:e1:e3:d7:f1:a5:6d:1d:8f:36:d3:5d:
         53:e7:18:37:38:b3:0d:8d:b6:16:9a:b5:25:20:cc:24:dd:27:
         62:bf:a0:1d:56:79:77:5f:1f:ee:a7:3f:59:f0:c8:cf:be:2b:
         ff:c7:69:70:96:97:a6:01:6a:2d:f3:37:bc:cd:0c:98:5e:45:
         fd:1c:1e:57:68:68:67:cb:a5:b7:97:25:d1:1c:2c:b4:c9:fa:
         13:7b:12:4c:5c:e7:fb:34:6b:d6:85:51:5f:28:7c:0f:37:5f:
         de:84:3d:11:63:d0:34:1e:00:76:3d:60:94:ab:ad:b5:3b:93:
         14:4e:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:18 2026 by rpki-client