Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File:                     W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier:          mGK7QACjSwDoZ3SLJztPHE/4gqEsGl2MLiRCkMZ1OlU=
Subject key identifier:   C6:19:A3:EE:24:94:17:AA:C6:F3:6E:4F:9A:95:63:90:0C:6D:0D:A1
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer:       /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial:       019E2AA7637B72965678351F96DF2E1070E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number:          113B
Signing time:             Fri 15 May 2026 08:01:13 +0000
Manifest this update:     Fri 15 May 2026 08:01:13 +0000
Manifest next update:     Sat 16 May 2026 08:01:13 +0000
Files and hashes:         1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: fYkjI8QH5ISWnQXu+epoyBnQwwaCx6YZXn3ET7p3EJE=)
                          2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:63:7b:72:96:56:78:35:1f:96:df:2e:10:70:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
        Validity
            Not Before: May 15 08:01:13 2026 GMT
            Not After : May 16 08:01:13 2026 GMT
        Subject: CN=c619a3ee249417aac6f36e4f9a9563900c6d0da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:b7:fb:30:5c:c5:bc:c0:51:df:96:92:1d:
                    32:2d:d4:c2:cf:14:e4:2c:a9:a5:df:bc:35:49:a2:
                    5a:0e:96:46:f9:73:9c:06:08:99:2e:54:52:c7:bf:
                    d0:34:a0:33:78:77:2d:00:90:c1:38:4e:f9:26:49:
                    97:ab:e7:22:00:77:4b:ea:d9:de:f8:2b:43:5c:0a:
                    12:c8:6c:44:0e:a3:7f:d2:ac:40:4c:4f:76:a8:d2:
                    83:2b:44:e6:2e:1f:b6:e9:74:85:2a:3f:52:11:11:
                    e4:15:f4:36:85:4c:fe:e8:fa:46:8f:ec:b3:4a:f1:
                    e3:8f:d0:38:5a:25:84:09:f6:6e:1a:54:4a:b1:c3:
                    54:41:2e:fe:74:d6:0d:15:df:88:a4:0f:ce:59:f4:
                    0e:df:be:ed:0d:85:65:1e:82:09:a4:a0:95:08:f9:
                    33:26:20:5e:07:51:6a:9a:c2:00:ab:1e:08:30:28:
                    2f:29:97:f7:72:1b:c6:0f:71:f4:ab:14:dd:bd:2b:
                    fa:af:de:fe:2e:87:d0:45:29:0b:94:72:4a:df:2c:
                    e7:d7:7c:94:cd:04:58:8a:ad:d0:0f:fc:60:b0:a4:
                    67:f7:b1:72:ce:20:66:7e:81:bf:aa:88:cd:3d:0a:
                    c8:c7:c2:6f:4c:da:22:b5:7a:36:f4:1a:69:0d:0a:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:A3:EE:24:94:17:AA:C6:F3:6E:4F:9A:95:63:90:0C:6D:0D:A1
            X509v3 Authority Key Identifier:
                keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:91:ef:0a:ac:c8:2e:2a:e9:f1:07:d3:c4:84:c9:bb:ff:
         dc:04:b7:ab:61:22:2a:c6:bb:14:2b:a0:05:1b:37:4b:7a:40:
         94:dc:cf:fd:5b:24:db:e8:4e:ce:37:d0:e1:6e:15:eb:08:59:
         78:48:13:15:d5:2f:82:0b:95:12:92:04:e5:0a:f6:05:e7:6b:
         69:e9:fd:2b:f0:00:01:93:fd:9e:57:15:fd:61:6e:e1:fe:b1:
         72:bf:be:e5:ef:5e:10:a7:d0:2e:01:26:a3:43:31:2a:25:fb:
         e2:e8:9c:4a:2a:14:a8:c3:bf:3c:e5:13:cd:4f:30:5b:c6:35:
         f9:aa:83:8d:f9:9d:4e:13:91:23:5e:b9:fc:ca:aa:95:69:bf:
         53:ad:2b:64:91:05:40:8e:ed:cf:62:4f:89:00:4c:7c:fb:2f:
         f6:a5:f3:e9:05:a7:d2:a1:bc:4a:57:90:e6:b6:26:03:f9:99:
         30:a3:6b:7c:45:99:29:cf:7c:36:53:2e:87:34:55:46:17:68:
         65:be:41:1d:66:b0:90:b9:28:b3:d7:16:51:e1:12:b7:6d:59:
         a0:b3:15:48:36:7b:f6:13:d1:ad:ed:50:df:b5:57:ea:19:2a:
         c1:17:0a:aa:05:ac:32:5a:f6:c8:11:35:ee:e0:6c:f3:c1:51:
         2c:f0:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:43 2026 by rpki-client