Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File:                     weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier:          6a+P4SP669XCmbWaWf0t1uySFQff8J4iTMFofC8pRew=
Subject key identifier:   FA:24:A6:B5:35:BC:64:84:CF:C9:11:8A:09:15:1C:04:D0:1C:9E:48
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer:       /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial:       019EFD26CB20491FF32CA42AEA969F78219B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number:          C0
Signing time:             Thu 25 Jun 2026 05:00:38 +0000
Manifest this update:     Thu 25 Jun 2026 05:00:38 +0000
Manifest next update:     Fri 26 Jun 2026 05:00:38 +0000
Files and hashes:         1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
                          2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
                          3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: bgjOdnKxzCoWmBZFLyZPi+/y/ocsybUfXEYIRNPf6zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:26:cb:20:49:1f:f3:2c:a4:2a:ea:96:9f:78:21:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
        Validity
            Not Before: Jun 25 05:00:38 2026 GMT
            Not After : Jun 26 05:00:38 2026 GMT
        Subject: CN=fa24a6b535bc6484cfc9118a09151c04d01c9e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:3a:e3:f8:7d:73:a9:f9:86:7f:7d:0c:26:
                    64:25:25:f5:a4:53:75:db:d4:c1:39:1f:25:8c:d2:
                    81:03:1f:ed:90:bd:bf:b9:b9:4a:4f:c6:9c:07:c1:
                    55:bc:43:3e:82:46:42:07:14:0f:2f:59:f9:d1:69:
                    28:16:38:c4:35:a3:3d:0f:02:78:fc:90:25:6b:5e:
                    29:48:e9:fb:c8:dd:2e:6d:89:db:d2:bb:79:fc:c8:
                    25:89:1d:ef:70:ad:52:69:51:a2:98:21:a2:b0:ee:
                    22:ac:12:46:f0:74:68:0a:4d:7e:84:85:b2:f4:2f:
                    d3:15:bb:27:77:ee:5d:76:a5:12:11:40:d3:60:36:
                    50:68:c2:bd:ef:ea:27:b1:df:1b:c5:e2:48:30:fa:
                    ab:96:cd:f4:8a:e4:9a:50:59:10:38:79:60:ba:09:
                    22:51:be:ca:1e:5d:f3:95:0b:9d:0d:c0:36:8f:bf:
                    9f:7e:12:13:0d:92:09:1d:bc:21:4f:0a:11:b2:0b:
                    b5:b3:e1:1a:e7:5e:3e:c4:be:27:5a:72:b1:07:53:
                    1c:66:e7:db:ee:d3:01:89:b8:ca:91:7a:72:a0:17:
                    c4:0f:b2:7d:ef:49:e7:d8:fa:2e:be:f5:13:fe:07:
                    f5:29:83:ab:52:ba:bf:32:79:e4:31:d0:92:f2:57:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:24:A6:B5:35:BC:64:84:CF:C9:11:8A:09:15:1C:04:D0:1C:9E:48
            X509v3 Authority Key Identifier:
                keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:c3:be:84:72:98:16:74:df:2f:82:fd:82:27:a1:90:a6:
         0c:10:3c:d3:89:eb:12:d8:d6:c5:d5:21:a6:a7:05:26:b5:d9:
         54:ef:8c:6e:2b:62:33:1f:d3:4a:a3:0f:50:c8:ee:ef:25:c7:
         8a:1d:85:fc:52:ca:5f:5c:c6:35:9e:a5:45:8a:f6:f6:3f:de:
         71:75:41:74:91:af:f4:d0:d1:73:c6:b2:4e:d4:78:8c:da:f1:
         3d:52:37:04:8b:32:40:0c:a7:bd:59:e8:45:74:6a:44:99:4b:
         f9:59:87:fe:c3:c0:fe:6e:41:3b:46:94:da:36:4e:11:a9:97:
         8c:62:65:3d:0f:37:b9:bd:60:dd:3f:3b:19:bf:e7:16:fe:3a:
         05:52:1c:41:e0:b8:b9:8a:55:51:9f:e8:91:77:fb:9e:28:69:
         d6:92:86:a7:2b:9d:36:49:8c:bc:7b:1f:f5:94:b5:15:e4:23:
         1d:ac:ed:21:5c:1d:cb:84:f0:42:dc:39:91:67:f2:21:a9:db:
         01:95:64:04:cb:c3:53:4c:55:9c:9a:ec:bb:dc:78:3a:b1:2c:
         36:94:0c:1a:19:ec:2d:06:48:48:2a:8c:c9:49:f8:5a:ed:e7:
         d5:36:fc:18:ae:2c:58:cd:c6:a3:ba:6d:f8:4f:79:f5:1e:88:
         2b:41:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:01 2026 by rpki-client