Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File:                     WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier:          2eFzSBYokUig0MsjzdLsIVgPhd8xqWzje7bd5vzlNRI=
Subject key identifier:   53:6E:C0:C8:59:CF:C7:B3:6E:90:31:28:62:9A:21:3D:6A:F4:E7:85
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer:       /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial:       019E9B4DC5B79A05C43D14335E97B815FD9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number:          13B5
Signing time:             Sat 06 Jun 2026 05:00:25 +0000
Manifest this update:     Sat 06 Jun 2026 05:00:25 +0000
Manifest next update:     Sun 07 Jun 2026 05:00:25 +0000
Files and hashes:         1: DghlG5g8kh3BeIC870myqIarxAw.roa (hash: jDUL776SurMFsX7IAknzdET8gzAlypgO2s6eGi65foY=)
                          2: RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa (hash: IWGFsdcNHT1pJQgqJ040THMUt7oZlhEWCHXEnZys69k=)
                          3: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: vjLu3n5KQhlxcPK3500w+g8ac/Cz0V5MtvnsAGuUKLw=)
                          4: um-Lorhk6tusr5ZZhejZsnrGt8I.roa (hash: DrlD6P/FnEJtBBpWVV2J3o/4TxhGlcEWI7wpBpxOr+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:4d:c5:b7:9a:05:c4:3d:14:33:5e:97:b8:15:fd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
        Validity
            Not Before: Jun  6 05:00:25 2026 GMT
            Not After : Jun  7 05:00:25 2026 GMT
        Subject: CN=536ec0c859cfc7b36e903128629a213d6af4e785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:d6:45:43:34:85:64:f7:e0:ef:69:0d:06:
                    2c:09:30:ae:ea:73:9e:f3:79:9b:72:d6:25:d0:4b:
                    4e:65:b1:69:e9:43:6c:6f:47:ab:29:13:24:f4:95:
                    38:09:b8:51:e2:29:d0:48:66:f9:ac:3a:c2:b9:5c:
                    cc:ed:8f:43:df:fb:96:ea:21:d8:83:f3:b1:92:98:
                    a6:9f:a3:fa:1c:3f:19:d2:49:0d:71:db:db:ef:94:
                    02:e0:ff:9f:cf:53:ef:fd:a7:c2:73:ca:92:19:9d:
                    a5:a9:42:a0:ba:4a:d0:94:8d:07:26:64:0d:d1:37:
                    34:05:fd:c4:73:65:56:07:6a:3f:40:44:b2:51:64:
                    80:f5:57:9f:f7:3c:12:1d:4d:6c:f5:28:d4:db:14:
                    1d:65:ee:82:21:7e:1f:e6:90:72:8c:50:d4:8d:f6:
                    e4:8c:c0:82:ef:11:01:5c:f7:03:3e:87:97:39:84:
                    27:6b:8f:2b:7e:68:78:78:ae:a5:4d:c3:7b:3a:a6:
                    68:bf:ea:c5:74:78:88:43:3b:bf:77:58:f4:fe:b2:
                    0a:fc:b3:9e:ce:b3:4b:8d:c3:25:b9:46:3f:c8:79:
                    33:3f:67:7b:cd:d0:d1:de:6a:c3:e2:48:2b:14:c0:
                    ea:91:61:32:94:50:e5:fa:21:0b:90:9c:ec:7b:2f:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:C0:C8:59:CF:C7:B3:6E:90:31:28:62:9A:21:3D:6A:F4:E7:85
            X509v3 Authority Key Identifier:
                keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ab:44:90:fc:53:24:37:91:61:a7:74:c4:d5:16:32:83:81:
         8b:8a:7b:29:26:ae:0c:2a:fb:e8:0a:d0:dc:b5:31:72:b9:36:
         25:02:09:9f:e3:b8:7f:3b:f4:9e:7d:52:e8:01:00:0b:64:27:
         06:28:7e:6f:c8:1d:67:c4:31:e5:31:4f:aa:46:26:11:60:90:
         77:ae:23:02:73:df:4e:a4:42:a9:4a:04:a8:db:59:1e:b5:4c:
         b3:86:2e:a2:a8:74:8f:44:55:e3:27:75:77:91:60:69:57:df:
         4a:27:fc:83:53:c9:59:de:93:6e:4a:70:7e:79:28:d5:69:b3:
         4e:bf:a5:4a:6f:72:d9:2d:3a:4c:fb:1e:be:18:cc:5c:5f:e6:
         2b:3e:e8:5d:85:1d:e9:b9:b1:94:15:c9:6e:d3:fe:ba:8d:a3:
         19:b7:2f:06:67:d3:a9:65:67:51:28:02:c8:9d:38:91:cd:19:
         b1:d4:9d:90:d7:65:c7:a9:f7:cb:9e:f6:23:3f:0c:6a:f6:2e:
         b7:ae:ee:1f:66:f2:ce:8a:4f:df:c4:b8:bb:f0:d7:14:4e:cd:
         87:1d:00:ac:df:e8:bc:37:29:74:8e:8f:c6:6b:2d:8b:a6:6f:
         d8:c2:6c:87:ff:53:29:c3:56:6a:56:df:c7:c5:95:37:ff:42:
         c9:15:87:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:10:47 2026 by rpki-client