Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File:                     WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier:          dflu7rEpioD8pNadr0fs9tv8xQkNrsN68tboxfUq478=
Subject key identifier:   FC:46:4D:E8:41:66:F9:F6:39:CF:03:C7:1A:13:75:50:C8:A9:88:B8
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer:       /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial:       019E924B173602159DA0C13429D8A4601F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number:          0249
Signing time:             Thu 04 Jun 2026 11:00:55 +0000
Manifest this update:     Thu 04 Jun 2026 11:00:55 +0000
Manifest next update:     Fri 05 Jun 2026 11:00:55 +0000
Files and hashes:         1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: eniQ1UouaTNgzPzTlykPHm+Ko11IELTzR9fH91yFiYY=)
                          2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:4b:17:36:02:15:9d:a0:c1:34:29:d8:a4:60:1f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
        Validity
            Not Before: Jun  4 11:00:55 2026 GMT
            Not After : Jun  5 11:00:55 2026 GMT
        Subject: CN=fc464de84166f9f639cf03c71a137550c8a988b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:75:93:8d:92:02:99:06:8e:16:a1:fc:13:
                    90:5a:0f:ee:c3:31:9e:26:0e:a6:bf:04:16:22:bf:
                    03:50:29:31:db:63:e8:55:aa:e8:93:b8:b1:fd:64:
                    55:cf:98:7c:c5:1a:34:96:1b:59:8d:80:b8:70:56:
                    18:9b:f6:2d:f6:00:07:d3:77:17:2b:5a:6b:8a:cf:
                    ab:90:28:cd:20:38:d2:13:9a:c3:fa:09:94:c8:a9:
                    60:34:3e:f7:59:1d:ef:61:6f:d1:1e:ed:f9:5c:34:
                    a5:ce:25:ba:df:99:0a:be:cc:f7:af:58:e6:fb:1b:
                    30:c3:80:25:9a:94:dd:56:29:d3:53:84:af:5f:8a:
                    cf:ee:9a:c5:fc:4b:66:8f:ca:1e:75:1c:35:87:a8:
                    e2:28:6c:64:89:c2:09:0d:77:ec:0f:0c:2d:3a:4c:
                    0c:82:7b:90:4e:00:77:01:c1:ed:1e:06:2a:06:79:
                    13:fc:f1:e0:6c:74:da:45:26:df:3e:b8:f8:47:a5:
                    6a:65:67:69:e4:1e:16:7b:3b:15:1f:94:d5:42:c7:
                    3e:84:85:2d:46:14:3b:b1:bc:df:db:e0:87:37:e0:
                    29:f0:63:d3:84:af:bb:f4:b1:6b:d5:7a:eb:74:46:
                    fb:69:d8:12:4f:e3:d0:3e:9a:31:5a:41:d0:42:f0:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:46:4D:E8:41:66:F9:F6:39:CF:03:C7:1A:13:75:50:C8:A9:88:B8
            X509v3 Authority Key Identifier:
                keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:98:b1:82:1f:17:53:98:ea:3c:49:e9:ab:cd:06:3c:c2:
         d8:f7:c6:7f:56:71:1f:68:08:86:0e:49:fd:7e:25:cd:b2:4f:
         24:76:a7:7a:fc:aa:dc:7c:02:b9:1d:61:23:74:9f:bf:a9:d6:
         3b:11:d6:08:a4:56:b7:22:08:b8:f3:4f:5d:05:c3:42:00:95:
         3d:64:98:32:0e:ed:71:63:56:70:fa:b1:ba:93:b3:dc:38:5e:
         f8:c6:25:cf:5d:47:b7:0a:5d:3a:96:93:4b:55:37:05:ba:92:
         ae:31:b9:b4:f9:b1:95:5c:a9:60:6d:b0:2c:d7:8c:94:b2:98:
         72:11:ec:67:ce:2a:92:0f:ee:1c:7a:11:89:d8:e5:ef:c2:ce:
         4d:f0:6a:93:95:da:22:23:f5:8f:cd:20:ba:4b:f1:4f:18:92:
         fa:6e:cd:0d:70:1f:c2:9b:48:cd:5e:84:3a:95:e0:42:1b:32:
         96:f2:76:94:3e:7c:e6:4f:a0:05:f4:eb:48:17:d5:3b:9e:79:
         58:56:6a:9b:6b:a0:bd:c3:11:7d:c9:49:76:84:b0:ed:06:b9:
         e9:5b:b3:73:04:3a:8b:75:ae:c2:58:7b:df:10:e9:a3:72:c7:
         37:ba:03:96:e2:c4:0e:8a:bf:1b:a4:72:59:cf:b5:49:12:f0:
         c5:66:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:00:45 2026 by rpki-client