Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
File:                     WnVplLspLknsxjN7f5XWnuKvYeE.mft (raw, json)
Hash identifier:          Z4l8OsK5zUw0V2UItOs/XKJ6+XhaIKAJldLKjPDav2s=
Subject key identifier:   93:31:E2:58:A1:F4:60:B6:6B:53:E9:31:45:97:27:20:6B:F6:70:C3
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Certificate issuer:       /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial:       019F18681A5AAE53AAA8468AC450CAF24361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
Manifest number:          1990
Signing time:             Tue 30 Jun 2026 12:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:43 +0000
Files and hashes:         1: J1dgP4nrlYCPtH0XgkVv9K-jQoM.roa (hash: L3+rfnx98zeA39TwzP/btlWmN7YanCJfBv7Q/RTAlB8=)
                          2: WnVplLspLknsxjN7f5XWnuKvYeE.crl (hash: BEIxWQF03sP0CJM60tcBwS8AfYUwi7A8lqfZ+qL+ybE=)
                          3: rPBNoiA3LAaZSrs5VWA0yP3yN1k.roa (hash: z7hppX01cLUTFRyiAAh/aHIOnNRzj8Vo6jXh0hDhpac=)
                          4: ya5aPAqe4Hx1IhhFtjdZDoOseBY.roa (hash: tpR2+mpp5l1TAReoEhj+zsYR4YGVmOGfhRS14jaZ8fI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:68:1a:5a:ae:53:aa:a8:46:8a:c4:50:ca:f2:43:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
        Validity
            Not Before: Jun 30 12:01:43 2026 GMT
            Not After : Jul  1 12:01:43 2026 GMT
        Subject: CN=9331e258a1f460b66b53e931459727206bf670c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:98:15:53:f9:19:18:7b:7d:0d:02:09:15:
                    24:2c:9a:3b:93:19:48:78:d9:41:2a:74:7a:ca:88:
                    13:10:b0:c3:53:8c:27:0e:1c:bc:09:0d:59:0c:4c:
                    a5:eb:9e:3a:e3:57:6a:7c:55:1a:c8:73:e4:fe:87:
                    9f:f5:c4:28:67:db:c6:af:97:80:84:32:44:6d:f4:
                    66:12:41:42:38:b3:81:9f:eb:4b:8b:b0:40:7a:ed:
                    09:4d:8f:bc:91:91:c9:51:bb:71:41:15:7c:7d:3a:
                    1a:e5:85:e1:b0:d6:8d:cb:3f:55:46:cd:ef:d1:d5:
                    d6:5e:48:12:8f:0a:a2:d1:e4:7f:25:19:b7:b3:aa:
                    ee:b3:97:6e:ff:2e:90:af:14:64:53:09:69:4c:37:
                    c9:14:78:dd:b8:16:a7:fc:0c:6c:f8:67:ef:76:9d:
                    94:0a:1c:4b:fb:af:0d:35:ba:aa:8b:07:60:9e:81:
                    2f:05:d7:70:1c:aa:e4:77:18:21:2c:72:69:7a:a1:
                    9c:1a:2b:11:2e:93:d7:e9:fc:1c:03:b7:e7:11:a9:
                    b4:47:5b:db:92:17:86:ed:4f:6b:e7:a5:3e:15:d3:
                    e2:16:3c:30:3f:36:85:c4:df:c2:cf:49:c7:ad:f0:
                    a8:0a:6e:7b:61:5a:f5:78:94:2b:10:e9:bb:6e:f8:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:E2:58:A1:F4:60:B6:6B:53:E9:31:45:97:27:20:6B:F6:70:C3
            X509v3 Authority Key Identifier:
                keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:99:2a:d2:a2:3a:67:e0:b9:39:0f:23:dc:2b:ae:7b:39:
         f5:1a:97:c8:7f:25:27:d7:2a:07:08:9f:b9:ee:ef:6e:f5:4e:
         5f:c0:1c:a6:93:49:8e:1f:ba:18:18:62:e3:90:3b:9a:f2:eb:
         a7:75:f6:a0:23:64:09:1f:56:53:8e:0f:45:7a:7e:53:f7:f9:
         f7:c7:b1:a2:72:69:89:df:c0:ba:af:96:b8:81:7b:3d:04:d8:
         21:8e:f0:18:e5:15:85:bf:bf:61:2a:68:a0:4d:c4:aa:fe:39:
         67:aa:67:3d:b8:d2:46:b2:9b:c3:a0:31:c1:5e:ff:54:f2:a6:
         6a:d9:f2:a1:62:5f:4f:7a:0c:cb:06:47:63:6f:90:c8:8d:ed:
         e8:ae:0c:7d:6a:8d:65:c9:49:ce:fc:d0:fd:08:43:4b:d2:b4:
         9b:b2:a9:50:9a:9b:ab:64:fe:e8:13:ec:79:68:83:ef:ff:84:
         97:68:82:d9:6c:77:df:5d:97:04:31:61:54:80:68:ee:8b:d0:
         1e:ff:1b:17:f1:f0:20:e8:da:df:9b:21:00:0a:e4:09:35:76:
         f3:11:c3:af:0d:11:e8:19:d6:ae:17:a7:04:33:ed:76:64:2c:
         7e:23:a4:51:88:b5:1b:45:84:c5:4d:e8:f7:49:1e:97:34:a7:
         2d:0e:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:56 2026 by rpki-client