Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File:                     dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier:          kYP72/KfmoG4XN1M8CLcoEqI+381CTH298mRpvgK/rU=
Subject key identifier:   A8:88:1E:7D:5A:43:F9:BF:EB:AD:D5:36:CF:A1:69:E2:1D:51:69:84
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer:       /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial:       019EBA6B0446AA0004634C89F01C405EAEB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number:          0DC2
Signing time:             Fri 12 Jun 2026 06:00:36 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:36 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:36 +0000
Files and hashes:         1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
                          2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: fMwHl039WuEOxC+4sj8oqSX33DXtZQnB3NwoubX+4II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:04:46:aa:00:04:63:4c:89:f0:1c:40:5e:ae:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
        Validity
            Not Before: Jun 12 06:00:36 2026 GMT
            Not After : Jun 13 06:00:36 2026 GMT
        Subject: CN=a8881e7d5a43f9bfebadd536cfa169e21d516984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:ae:dc:e9:5f:b6:ee:df:01:7e:12:f1:6d:
                    d9:ad:59:b7:fe:8d:5c:34:5c:b5:17:84:53:3f:7f:
                    af:69:64:dc:8c:c4:77:38:27:cd:de:fc:e9:9f:17:
                    d7:d8:ac:65:51:bb:25:9f:22:0a:4b:73:3d:47:cd:
                    17:03:39:1a:53:59:18:49:1a:1c:f3:94:a6:fd:9a:
                    b8:f7:83:03:17:e5:db:70:6b:0f:24:68:de:d5:c3:
                    9f:a9:39:19:be:17:b0:54:e1:54:c3:38:87:9e:44:
                    33:c1:8b:f7:d5:6d:b6:9e:3c:92:f7:5f:8d:33:ad:
                    e3:54:09:75:c4:c2:53:c5:23:eb:b5:60:16:b2:dc:
                    d0:d8:95:00:62:48:60:11:4d:68:d1:75:3e:2f:6e:
                    e5:43:71:0a:25:0b:76:b6:7f:d0:73:1c:87:b6:10:
                    92:09:d3:ef:4c:d8:13:97:80:a3:f3:ea:d7:82:8b:
                    a3:4c:42:64:7b:dd:47:fc:f7:d1:5e:60:59:b4:ec:
                    dd:15:68:2d:dc:71:4d:65:1f:9a:b7:6a:74:f3:ff:
                    b0:40:d7:53:97:28:35:55:9a:52:2d:61:93:85:cb:
                    ea:ab:d3:05:14:1e:96:0c:ff:de:4f:c7:70:b7:3c:
                    0e:03:40:05:99:70:9a:01:9f:70:41:36:16:4b:be:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:1E:7D:5A:43:F9:BF:EB:AD:D5:36:CF:A1:69:E2:1D:51:69:84
            X509v3 Authority Key Identifier:
                keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:cd:e4:5d:22:c0:ca:2f:61:a1:a5:af:c4:a6:72:16:f2:
         b2:8e:bd:9d:0e:59:5a:53:96:52:ae:fd:87:f6:87:6c:ce:ac:
         1c:5e:c2:38:fb:68:56:20:ef:db:10:3d:9f:06:e6:96:fb:50:
         e2:4e:40:0e:8f:b5:ab:0d:53:c3:08:2a:0d:18:41:38:5f:65:
         ff:0a:9c:70:ec:7f:52:62:88:fc:d7:03:2c:7f:7e:3c:50:dd:
         92:f8:4e:19:99:bb:1c:2a:75:f1:bf:0a:a1:85:3f:57:f2:52:
         e1:c1:ff:01:56:b7:42:56:4e:26:49:9e:4e:1f:15:0c:e5:0c:
         8b:2f:e7:1c:73:c1:fa:99:24:e1:d2:af:82:97:4f:8c:3e:86:
         92:e4:9f:37:6d:75:ba:10:5c:b8:58:bf:4c:69:64:19:25:64:
         8a:20:c8:a6:5c:21:ca:27:cc:83:e8:7e:ed:97:86:a9:d5:47:
         02:1f:a5:f1:c7:74:97:c8:73:85:27:c3:b2:c3:7b:06:29:f5:
         a0:2d:da:0f:0f:68:be:69:60:19:db:a4:fa:57:da:4b:7f:0b:
         7c:a3:bf:5e:90:06:a6:6e:47:30:e5:11:31:f1:67:73:26:35:
         cd:1c:dc:b0:a5:80:7a:68:c6:4b:a5:8f:92:ae:5b:46:1d:c2:
         86:c8:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:54 2026 by rpki-client