Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          2172jXf1TgcrM8ThfKxxFyE6anL7Hf/w/X4nwJC+ZE8=
Subject key identifier:   A8:B6:A7:12:78:7C:11:52:DC:B6:92:6C:9A:6D:FA:B8:50:95:4E:D3
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       019EDC5320E6C828AE89669005BA8A1BC7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          0D51
Signing time:             Thu 18 Jun 2026 20:01:35 +0000
Manifest this update:     Thu 18 Jun 2026 20:01:35 +0000
Manifest next update:     Fri 19 Jun 2026 20:01:35 +0000
Files and hashes:         1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: zVYSGTqTeazD4ZaE36wdJaQwqs5BcBhc3dyZES2aP5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:53:20:e6:c8:28:ae:89:66:90:05:ba:8a:1b:c7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Jun 18 20:01:35 2026 GMT
            Not After : Jun 19 20:01:35 2026 GMT
        Subject: CN=a8b6a712787c1152dcb6926c9a6dfab850954ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:67:35:89:ac:2c:bf:98:30:2d:0b:2b:b7:
                    af:1f:06:fd:35:80:ee:78:77:a9:af:c7:9d:d3:0c:
                    19:22:6a:ec:ac:3b:2e:5c:22:2f:6c:33:73:22:b9:
                    d8:88:d9:0e:f5:96:6a:55:36:4a:d6:d3:98:73:ae:
                    b0:6d:4b:90:7a:e5:f7:c8:10:c0:96:b5:05:fe:07:
                    80:23:fd:73:fe:f8:47:84:29:06:2e:08:65:5f:79:
                    3e:2d:e0:27:de:c7:4e:47:56:ec:1e:6d:67:1f:50:
                    46:ab:72:43:a0:3f:46:29:93:3d:bb:09:6e:16:49:
                    d2:b5:28:b2:b2:ec:16:0e:5d:50:99:1d:0d:07:49:
                    2e:d6:96:f1:86:c0:01:88:a6:03:51:d0:c1:df:6e:
                    ef:2f:cc:e4:33:77:bf:20:43:19:75:fe:31:fe:c1:
                    9c:43:d2:17:c7:0f:3a:14:52:c0:cc:d4:ab:01:83:
                    7c:06:59:fe:c9:68:a7:a3:58:1e:95:c2:b9:cf:3e:
                    d0:af:43:00:87:aa:99:7b:ce:b6:89:aa:9d:3a:c7:
                    3b:7e:0b:26:22:04:39:ad:95:c8:6f:41:a5:57:6a:
                    d9:8f:ba:9c:ba:f0:7c:27:2c:5a:bd:9f:53:38:f0:
                    be:73:6f:1d:c4:53:78:b4:41:c7:86:4d:96:8c:3d:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:A7:12:78:7C:11:52:DC:B6:92:6C:9A:6D:FA:B8:50:95:4E:D3
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:61:9c:86:ae:60:9c:2b:ab:66:57:09:b8:70:27:78:2e:17:
         25:5b:21:81:70:5f:82:eb:6a:ee:cd:b6:0f:88:7b:c3:be:2d:
         81:2a:43:4e:de:f9:2c:b5:90:84:d0:a7:98:07:7c:83:45:65:
         85:41:4a:e5:fe:15:7b:3f:b4:1b:19:08:78:fe:af:65:a3:e4:
         09:2c:06:44:37:54:5a:11:bb:8c:09:78:53:f7:ca:27:e9:60:
         4d:c3:80:33:93:4a:e3:9d:7f:57:48:9f:f3:98:1b:50:eb:17:
         c6:7a:95:99:2b:d1:f7:e1:9d:a9:01:8e:31:99:81:48:3a:cd:
         4c:29:88:e4:7c:46:df:9f:89:f0:7d:4d:8b:6b:e0:81:9a:c7:
         80:1f:47:22:4d:6d:99:2a:b8:cb:37:a9:7e:80:38:6c:1c:ee:
         9d:c0:15:dd:2a:cd:73:aa:25:8d:bc:da:1f:21:6a:7a:78:40:
         f1:a9:14:db:5c:6d:2f:1b:29:f5:b0:96:26:6a:40:dd:94:1f:
         0b:ba:78:11:4e:92:b8:66:59:e2:03:11:4a:dd:7d:6c:75:77:
         0a:8f:b8:48:3f:09:fa:8d:cd:d0:04:54:9c:a1:28:2a:4d:ce:
         a0:39:6c:5d:78:67:3a:4b:a6:a8:f1:73:62:ab:a8:dd:5d:49:
         3a:7c:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:28:40 2026 by rpki-client