Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File:                     M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier:          9EFyU9zLoF7/zp0lDgP+kcYqKJJmyH17lk46fdCm+eg=
Subject key identifier:   E5:EB:5C:83:01:6B:E3:1E:74:4D:F3:41:00:5C:79:42:97:C8:68:9C
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer:       /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial:       019E9138811BBEB63C350292F616ECB0407F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number:          1945
Signing time:             Thu 04 Jun 2026 06:00:59 +0000
Manifest this update:     Thu 04 Jun 2026 06:00:59 +0000
Manifest next update:     Fri 05 Jun 2026 06:00:59 +0000
Files and hashes:         1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=)
                          2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: elkJtttoxZWmofarI2r5z2lYBgYa1q6MUXe2LoKtfBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:38:81:1b:be:b6:3c:35:02:92:f6:16:ec:b0:40:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
        Validity
            Not Before: Jun  4 06:00:59 2026 GMT
            Not After : Jun  5 06:00:59 2026 GMT
        Subject: CN=e5eb5c83016be31e744df341005c794297c8689c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:98:cf:cc:d2:81:d8:8b:a4:e5:80:64:bd:
                    b8:94:d1:fe:66:a6:17:ff:11:f8:b1:cb:03:17:3e:
                    ec:58:4b:68:b8:f0:e4:3c:01:0a:53:ed:38:c5:98:
                    7e:aa:a3:24:94:36:16:6a:af:84:41:9e:34:83:94:
                    73:cf:08:bd:b7:8a:cc:a8:3d:23:0e:d8:01:d0:eb:
                    ad:51:03:ef:ad:93:95:6f:f1:e4:e1:32:0f:d4:01:
                    c6:f5:09:8b:b2:73:71:60:c5:6a:30:76:e7:3a:3d:
                    28:c2:b3:e0:84:ae:76:84:cf:bb:f5:b1:46:26:89:
                    52:a2:4f:d1:7b:8c:2e:78:39:66:54:ef:40:59:1a:
                    47:94:9b:af:45:a2:40:e0:d2:5d:e9:d2:a7:0c:e2:
                    3f:2a:d4:ff:a0:3f:ed:bb:43:43:2a:0a:de:e5:cc:
                    3e:9e:dd:8a:2a:2c:bc:85:2a:4b:65:82:48:13:19:
                    b7:1e:ab:04:f4:fa:09:2d:2e:44:7b:17:6b:29:f9:
                    7a:68:16:6d:6c:01:9f:c7:1f:94:a3:15:d6:76:da:
                    2d:8b:e7:b4:72:0d:5e:25:dc:d6:c9:48:34:6e:ec:
                    7c:90:59:d4:c8:7a:cb:1e:3e:2b:a3:0e:9d:94:7f:
                    a8:76:5a:61:67:ba:c5:01:4b:c4:61:b4:8e:82:c5:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:5C:83:01:6B:E3:1E:74:4D:F3:41:00:5C:79:42:97:C8:68:9C
            X509v3 Authority Key Identifier:
                keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:19:7b:0d:9a:a5:8d:c3:fb:70:17:1c:8d:af:da:2c:a4:66:
         a4:22:c5:65:b4:92:e1:3a:91:de:fa:af:81:26:e2:35:3a:ed:
         c4:ad:51:9d:38:f0:29:e3:bf:90:e8:eb:44:33:57:1a:fd:d0:
         18:51:38:e2:96:1d:bc:a2:e1:a1:27:be:30:71:46:20:99:fb:
         9c:4d:4d:04:7f:4e:e0:da:0d:6b:7d:62:84:7e:5e:89:02:a1:
         b1:d2:6c:d2:ea:f5:d7:ef:f6:5c:c1:f8:72:a6:01:8c:95:8c:
         9b:e3:e9:e4:1a:a8:74:1f:69:9a:c4:14:62:0d:67:4c:b4:7a:
         47:62:13:9d:6a:6b:5c:7e:94:72:04:06:db:a7:fb:fe:3e:54:
         7a:ab:7e:e2:57:c2:c3:1b:f7:64:c2:6f:e7:79:a2:53:52:e3:
         11:ad:cf:14:8d:a4:dd:d5:18:af:2b:8a:71:e5:39:0d:57:b2:
         2d:c3:11:2f:97:b6:9f:7a:b0:37:bb:38:ef:2c:16:a5:d5:46:
         f8:70:0e:08:00:09:69:df:49:ee:54:e9:9f:21:b1:fc:35:89:
         b8:12:46:02:ed:5a:3b:2e:18:8f:26:d3:c3:ec:78:b0:ba:20:
         a7:a2:7f:18:8f:95:e6:75:60:39:08:92:87:a6:6b:5d:cc:86:
         0f:20:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:05:44 2026 by rpki-client