Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File:                     w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier:          0f0ktkGIyiNI9pdSd8JuRHrjTm0oNIV4we+e+U0ULkQ=
Subject key identifier:   93:3D:C8:A6:87:08:B8:D7:97:0C:CD:21:18:DA:9F:CF:6C:D2:56:94
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer:       /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial:       019F115346B076BD050DEAE30105DCB2B338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number:          0509
Signing time:             Mon 29 Jun 2026 03:01:37 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:37 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:37 +0000
Files and hashes:         1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
                          2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: U0trEsYeNitVgWI0oDVOjnk0mLNm+MBavEIt2Rbo+Hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:46:b0:76:bd:05:0d:ea:e3:01:05:dc:b2:b3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
        Validity
            Not Before: Jun 29 03:01:37 2026 GMT
            Not After : Jun 30 03:01:37 2026 GMT
        Subject: CN=933dc8a68708b8d7970ccd2118da9fcf6cd25694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:24:af:35:fb:fb:8c:d0:86:62:9a:b2:af:
                    6b:7f:07:7d:4e:e2:ab:37:a1:27:f5:74:19:79:95:
                    0d:38:04:04:22:eb:91:3a:be:e2:fb:1f:36:80:11:
                    d8:25:7a:a5:ae:e1:06:a2:22:6a:85:63:7c:f8:d1:
                    13:4f:55:ac:ae:98:55:2c:1f:fd:b8:2f:71:e3:ac:
                    fd:46:1b:30:2e:18:32:97:84:b3:5e:6f:41:3c:4e:
                    b2:43:2d:3c:58:5c:d4:0b:64:57:f8:11:cc:88:46:
                    43:f1:4f:2a:1a:5f:a8:de:50:bf:97:85:bc:3e:d5:
                    7e:45:83:8d:bc:c2:db:d4:59:c2:f3:d5:f5:f9:73:
                    03:19:f4:a9:f6:70:f3:ab:f0:f1:74:cb:c3:06:44:
                    95:c9:2d:55:c1:f2:f1:21:75:f7:44:47:fb:8b:e8:
                    a2:e4:6d:05:5d:ec:f3:05:ad:60:59:39:37:ac:ec:
                    93:65:79:af:52:dd:9c:89:d5:60:4a:46:a0:7a:eb:
                    c1:6c:70:01:d0:d5:83:b8:15:31:15:3b:f2:3f:88:
                    8b:ca:b0:32:4f:1a:0f:9e:4b:ea:cb:64:1f:95:8f:
                    f7:d0:d0:06:c2:31:95:0a:1a:ac:02:8c:86:94:80:
                    8a:fc:5d:c3:de:35:02:71:bc:36:c9:c7:63:18:58:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3D:C8:A6:87:08:B8:D7:97:0C:CD:21:18:DA:9F:CF:6C:D2:56:94
            X509v3 Authority Key Identifier:
                keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:0f:2f:3f:be:92:38:e0:ef:c1:90:6d:76:8f:9b:bb:d6:
         69:b9:ae:ea:6a:0e:7d:68:81:99:40:70:53:b8:45:06:d4:a3:
         f9:f4:2f:5a:5b:94:c1:a0:b2:59:78:89:f7:f0:b1:5d:94:66:
         80:1f:04:a3:3b:18:3f:34:7d:3d:52:f2:6a:12:07:37:c8:2b:
         9a:f5:7f:98:8e:29:a3:5e:58:f8:11:0d:d7:00:3a:a9:4d:e4:
         e6:70:13:ea:36:05:98:1a:2b:30:9b:2d:25:b0:73:99:23:c3:
         cf:9f:3e:68:64:ca:24:e7:5e:e6:08:c4:2b:88:c6:30:e9:cb:
         e5:b6:a6:d9:72:90:95:9d:cd:49:8b:aa:a5:bd:12:24:b9:7b:
         5b:84:93:90:10:07:14:cb:7f:3b:2a:d5:b9:fa:ce:12:42:02:
         7b:60:f2:a9:fe:f7:7c:56:98:a5:44:dd:c3:24:fd:5f:49:6f:
         2d:17:4d:10:bc:0b:91:71:c8:51:35:90:0b:91:1b:fc:f4:85:
         52:86:35:28:e4:8b:5c:46:39:a8:10:d5:5e:41:75:b7:45:ef:
         c5:7f:a2:9b:58:3d:a8:96:85:3f:a7:56:e8:f0:1e:42:12:15:
         cc:44:cb:13:24:9d:38:51:0d:c5:e0:ac:55:d8:28:87:a2:ff:
         16:97:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:43 2026 by rpki-client