Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File:                     wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier:          wwcWBCCKbpvMnZmQYTpZwGkj0Q5iZB8MXJ8G8nQwnYg=
Subject key identifier:   15:13:99:FD:99:1F:27:FC:97:2A:CD:9D:E3:D2:E3:C5:A0:76:F2:A0
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer:       /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial:       019F11C080D55E58BE9B4C5FCB1A859DC13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number:          1053
Signing time:             Mon 29 Jun 2026 05:00:56 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:56 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:56 +0000
Files and hashes:         1: U7ys6itFnvuaePn4ScsbAtbzsp0.roa (hash: d+i6tJ5mzYcRwG/S0qIlnLIWWa0XIkizyeSNRfnsoAI=)
                          2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: yPs6ZvrcY6hV03EIrabCL5BlY9b3Dmqj4pFZWQAkZnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:80:d5:5e:58:be:9b:4c:5f:cb:1a:85:9d:c1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
        Validity
            Not Before: Jun 29 05:00:56 2026 GMT
            Not After : Jun 30 05:00:56 2026 GMT
        Subject: CN=151399fd991f27fc972acd9de3d2e3c5a076f2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:4b:29:9e:33:e6:72:6f:30:89:e6:58:41:
                    81:0c:3f:67:d4:b5:22:f2:fa:60:5b:08:65:a8:96:
                    cb:a8:28:29:9e:c2:9a:0d:d0:af:ef:ff:c3:7e:a2:
                    b7:4a:b4:a6:18:09:8f:0a:db:b8:af:aa:9a:0b:4c:
                    a6:b5:ea:8e:76:1d:62:ed:97:50:f6:15:56:08:15:
                    17:c3:5c:c9:17:77:41:97:94:af:88:0d:f0:94:eb:
                    0e:84:07:49:35:9f:75:7e:13:cd:97:8a:bd:78:ef:
                    4b:f3:aa:9d:38:0f:a5:32:31:57:6a:be:c7:2e:34:
                    b3:ed:ba:91:58:5e:90:5e:7e:da:e3:42:57:cf:c2:
                    42:89:d2:4e:ae:3b:26:0f:1d:01:80:87:5f:72:ad:
                    60:ca:d3:9d:b7:66:fc:fe:2e:cc:9f:f8:1f:01:6c:
                    c0:e9:c0:bc:1c:2e:f8:d8:ba:20:8b:c4:c9:57:2f:
                    84:23:2c:f5:79:01:b5:5e:4b:e0:88:58:47:e5:40:
                    d1:b5:32:31:b7:d9:f4:7e:b8:31:de:a0:70:ac:e4:
                    86:3c:07:0d:f3:ea:f5:c1:0b:a5:a7:b4:58:52:cb:
                    e6:5b:bd:19:31:d4:5c:e9:f6:59:e2:41:b1:0b:ef:
                    3e:7e:ab:3f:b8:9f:15:a6:0d:ee:91:ab:bd:6d:76:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:13:99:FD:99:1F:27:FC:97:2A:CD:9D:E3:D2:E3:C5:A0:76:F2:A0
            X509v3 Authority Key Identifier:
                keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:4f:ff:1f:be:2e:9e:a5:e5:ba:aa:a6:55:0a:d9:79:cb:
         2a:41:75:e4:cb:ee:5d:c5:97:ac:0c:d8:22:d4:b6:12:5a:6a:
         99:b9:bf:e4:76:c3:df:4b:d7:6d:17:f4:2d:95:14:da:5d:69:
         13:b7:e4:2c:2e:05:5f:6f:13:48:2a:74:13:c2:3a:13:e2:d8:
         00:56:22:95:07:88:65:38:9b:3f:dc:cf:93:23:43:d4:9b:f8:
         af:b3:67:57:5e:14:c7:b4:06:38:3d:f2:c0:60:c0:65:a8:78:
         5f:46:82:1d:94:58:25:fb:bf:c9:c0:87:96:4a:0f:23:2a:10:
         7a:0d:e8:6e:eb:50:ee:e4:0f:a0:aa:0d:a6:d0:05:24:68:26:
         1c:3b:5e:79:85:46:15:71:3d:21:0a:e4:a4:28:97:08:38:78:
         5e:e8:fa:b2:b7:0f:dd:30:05:50:56:18:aa:77:38:4e:e4:00:
         c6:60:f1:de:7d:ea:dc:60:0f:16:64:df:72:a5:3f:ae:5d:7e:
         52:5b:97:00:fb:8a:61:51:b4:71:c2:57:69:b1:70:69:02:0d:
         7d:5f:59:0b:b3:57:22:9b:24:5d:59:57:93:cb:07:14:40:3b:
         8b:3b:8a:04:cd:9f:1d:25:65:01:e6:20:95:13:cf:3d:55:87:
         89:11:a5:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwIDVXli+m0xfyxqFncE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjBlZTk4NDI2MjcwMzFlY2EyNjRkYWM2NWU1ZmVmNjM5
NDNmOTgwHhcNMjYwNjI5MDUwMDU2WhcNMjYwNjMwMDUwMDU2WjAzMTEwLwYDVQQD
EygxNTEzOTlmZDk5MWYyN2ZjOTcyYWNkOWRlM2QyZTNjNWEwNzZmMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUdLKZ4z5nJvMInmWEGBDD9n1LUi
8vpgWwhlqJbLqCgpnsKaDdCv7//DfqK3SrSmGAmPCtu4r6qaC0ymteqOdh1i7ZdQ
9hVWCBUXw1zJF3dBl5SviA3wlOsOhAdJNZ91fhPNl4q9eO9L86qdOA+lMjFXar7H
LjSz7bqRWF6QXn7a40JXz8JCidJOrjsmDx0BgIdfcq1gytOdt2b8/i7Mn/gfAWzA
6cC8HC742Logi8TJVy+EIyz1eQG1XkvgiFhH5UDRtTIxt9n0frgx3qBwrOSGPAcN
8+r1wQulp7RYUsvmW70ZMdRc6fZZ4kGxC+8+fqs/uJ8Vpg3ukau9bXbc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUTmf2ZHyf8lyrNnePS48WgdvKgMB8GA1UdIwQY
MBaAFMDw7phCYnAx7KJk2sZeX+9jlD+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAt
YzZlY2U1OTAxNTgwLzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAtYzZlY2U1OTAxNTgw
LzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDVP/x++
Lp6l5bqqplUK2XnLKkF15MvuXcWXrAzYItS2Elpqmbm/5HbD30vXbRf0LZUU2l1p
E7fkLC4FX28TSCp0E8I6E+LYAFYilQeIZTibP9zPkyND1Jv4r7NnV14Ux7QGOD3y
wGDAZah4X0aCHZRYJfu/ycCHlkoPIyoQeg3obutQ7uQPoKoNptAFJGgmHDteeYVG
FXE9IQrkpCiXCDh4Xuj6srcP3TAFUFYYqnc4TuQAxmDx3n3q3GAPFmTfcqU/rl1+
UluXAPuKYVG0ccJXabFwaQINfV9ZC7NXIpskXVlXk8sHFEA7izuKBM2fHSVlAeYg
lRPPPVWHiRGlBw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:06 2026 by rpki-client