Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File:                     _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier:          Puag/T5ai8cr0lNHX6V7gQ2yOoGqYjV+tJCTckrc9c4=
Subject key identifier:   8F:9D:01:3A:9F:FF:12:10:53:60:A8:80:CB:69:9B:F8:14:E2:8C:B7
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer:       /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial:       019F333A0C5C2B450D5362C7DDC2785F6563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number:          13CC
Signing time:             Sun 05 Jul 2026 17:01:10 +0000
Manifest this update:     Sun 05 Jul 2026 17:01:10 +0000
Manifest next update:     Mon 06 Jul 2026 17:01:10 +0000
Files and hashes:         1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: fdTtGs4iVo/K91U/8esTu6IkSN7HWB/tctIlOBmDXwc=)
                          2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
                          3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 15:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:33:3a:0c:5c:2b:45:0d:53:62:c7:dd:c2:78:5f:65:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
        Validity
            Not Before: Jul  5 17:01:10 2026 GMT
            Not After : Jul  6 17:01:10 2026 GMT
        Subject: CN=8f9d013a9fff12105360a880cb699bf814e28cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:0e:e1:e6:e6:ec:a6:d2:91:ef:65:b0:30:
                    5f:1c:4e:f4:c6:e7:95:fa:cd:28:d4:0c:67:94:f3:
                    47:78:4f:28:25:45:56:83:a6:ed:79:d2:c4:eb:c4:
                    1d:da:e1:82:d7:de:be:28:cd:7c:2d:01:e2:11:f7:
                    11:ad:d2:91:19:dd:df:d9:ab:f6:93:a9:0a:35:91:
                    c3:1a:31:74:44:8d:ab:d9:cf:e2:10:6c:ba:b2:ae:
                    3a:64:16:1c:61:c4:8c:ce:42:8a:70:ba:5a:bd:5c:
                    01:a3:33:a4:ce:46:d6:45:b7:a9:f7:4f:1c:3f:2c:
                    6f:06:9c:b3:fa:c1:2b:12:b9:86:dd:1c:a4:98:2c:
                    f4:c9:aa:a0:4e:37:51:ee:8b:6f:db:85:07:f2:8e:
                    bb:5c:ab:2c:a1:39:c1:02:37:ef:57:b6:f6:91:7d:
                    19:fb:76:b4:a7:2b:b9:f6:ef:60:04:fe:20:df:2d:
                    eb:c3:7d:6a:fd:69:12:74:10:05:66:e3:20:2d:0c:
                    95:34:6c:80:2d:11:5e:37:78:ff:b7:69:67:6c:f9:
                    a7:43:f2:cc:ba:fe:a6:28:ab:7a:19:b5:24:bd:60:
                    62:0f:cb:79:51:9f:57:6e:37:82:13:41:99:1d:ae:
                    39:be:f3:c9:35:0a:b5:10:e0:04:48:fc:ca:b3:7f:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:01:3A:9F:FF:12:10:53:60:A8:80:CB:69:9B:F8:14:E2:8C:B7
            X509v3 Authority Key Identifier:
                keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:4a:f4:39:78:d9:b2:cf:77:4e:e8:b5:9c:a4:96:3c:dc:
         d7:5d:04:99:93:18:34:fd:16:28:22:6b:70:6f:e4:f8:ad:67:
         00:a3:d8:65:bc:69:9b:81:8a:a9:3f:5c:66:4e:28:93:cd:40:
         ef:72:43:27:d2:1a:fe:31:22:c7:49:f1:03:aa:a5:48:a2:5f:
         aa:cb:6c:50:59:f4:77:f0:6b:4c:e6:c0:a6:a7:25:a4:19:f3:
         63:24:dc:85:86:ae:a0:59:e3:90:8d:3e:58:a1:22:20:ab:85:
         0a:ba:29:18:be:9e:66:56:71:e4:58:6c:06:6e:c0:d5:13:02:
         c7:19:3f:d8:99:83:82:98:a0:95:00:20:da:6c:83:77:53:ff:
         9b:b7:8e:63:79:fa:3c:4f:c2:b0:86:fc:e5:70:9c:75:7a:05:
         12:49:d7:2d:53:59:34:c7:5d:cd:2e:6b:c6:9c:0b:7f:77:c0:
         34:06:ad:3a:cb:a9:96:48:f6:7a:bf:7b:8d:8c:b9:f6:84:85:
         ec:9c:68:b5:99:7d:88:dc:35:42:db:28:66:5a:9d:f8:03:cd:
         04:87:69:04:f8:5f:be:ac:c8:d6:ba:d8:02:b4:9c:69:7d:44:
         ab:47:cc:17:01:51:72:34:43:bc:12:63:c4:e3:c5:d6:40:c2:
         d2:10:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:58:43 2026 by rpki-client