Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          OG+rlzeqVa/WyqhcfE6xmxfowVDw8I3j9o9oahGiMnE=
Subject key identifier:   19:E9:53:C0:85:48:D0:91:BA:CA:8A:C3:4B:EF:A7:72:32:33:82:53
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       019E55FFA4FE13528BFB20E187F07F84BA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          0599
Signing time:             Sat 23 May 2026 18:01:17 +0000
Manifest this update:     Sat 23 May 2026 18:01:17 +0000
Manifest next update:     Sun 24 May 2026 18:01:17 +0000
Files and hashes:         1: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (hash: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: qmlOVl0m4gpCUr7TCUtgXVtAOPR8XXIks9V4cVSbIRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:55:ff:a4:fe:13:52:8b:fb:20:e1:87:f0:7f:84:ba:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: May 23 18:01:17 2026 GMT
            Not After : May 24 18:01:17 2026 GMT
        Subject: CN=19e953c08548d091baca8ac34befa77232338253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:78:c5:c6:48:43:31:c5:17:f8:ba:f2:11:
                    3e:2f:d3:e3:20:a3:48:39:da:35:19:98:12:67:99:
                    69:03:0f:7e:22:91:ac:f0:48:a5:f6:82:91:ec:ae:
                    84:98:e0:6b:40:12:4b:36:ab:2d:87:94:f1:49:b3:
                    af:cb:85:f5:f1:db:15:fd:4b:79:fd:9f:af:e2:7c:
                    9a:10:01:cb:cf:5d:13:18:4c:22:49:3a:50:03:a3:
                    ef:d5:5e:bb:a6:eb:0d:83:79:f5:88:e8:32:9c:5f:
                    69:5d:bc:1a:66:14:7c:60:61:9f:5e:4b:ed:97:c9:
                    27:13:dd:c4:c4:b9:5e:30:dc:16:8e:6d:46:e8:99:
                    f9:d3:54:8d:21:d8:40:b6:b3:0c:f0:65:37:b4:e2:
                    63:29:b4:4e:e3:d5:2d:d4:23:35:dd:02:89:e1:8e:
                    d4:54:39:bf:c6:3d:11:04:7f:e0:d4:03:10:c6:69:
                    5e:d8:b1:76:b1:57:bb:31:01:2e:ee:b5:1e:fe:d3:
                    06:ef:68:4d:1d:ee:d4:21:c0:3d:78:ab:a4:46:7f:
                    6e:e3:f7:26:e0:fd:3e:a2:b1:d9:d5:6f:fa:7c:dc:
                    cc:8d:39:10:6b:04:a3:07:ff:61:e7:67:75:37:90:
                    43:9f:3e:46:5f:13:c8:60:ad:3f:ff:32:b3:d4:31:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:53:C0:85:48:D0:91:BA:CA:8A:C3:4B:EF:A7:72:32:33:82:53
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d1:0c:35:34:44:55:68:12:30:49:15:c1:ea:7e:77:29:c7:
         89:e8:a7:f3:3e:9a:1c:91:b7:6e:b5:f8:fa:59:e8:eb:94:57:
         6d:5a:d1:63:3c:33:e3:db:b4:af:74:67:3b:5c:61:17:6f:cc:
         2e:02:bf:33:bf:05:97:c5:16:2c:45:fc:a3:5b:c8:cd:e9:f7:
         da:f5:8c:fb:1f:83:c8:c4:df:10:94:d4:df:a2:f6:0b:5d:1d:
         51:a5:17:b9:38:d8:40:53:fd:67:82:4a:ce:5d:68:c3:11:8f:
         e2:f2:22:2b:c1:cd:b4:ed:a1:97:62:01:71:e0:63:67:a5:20:
         c9:01:17:a9:3a:b4:5c:30:d8:e7:f6:a3:4a:59:b2:0c:b8:18:
         96:47:0a:44:36:c5:eb:d8:d9:30:56:ac:1b:d7:47:12:8b:f0:
         fc:66:12:e9:4e:5e:0e:02:5c:2a:97:9a:3b:d4:4a:4c:df:ab:
         00:8c:67:0b:bf:b1:54:bf:cd:1a:58:53:99:13:af:ff:07:39:
         75:e3:49:15:ac:fa:e9:c7:eb:52:de:fd:07:3c:6b:c4:7d:95:
         d4:8e:07:66:f3:1b:e6:03:8f:35:4b:3f:9b:58:a2:e1:a5:7b:
         b4:56:5b:2a:0e:fd:fc:37:38:5f:55:15:00:69:e0:53:4b:ba:
         0b:dc:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 21:01:32 2026 by rpki-client