Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          H78U8rBXP34DWGqSD1y46UVFn03hWxrlRhMq98ooqio=
Subject key identifier:   D2:76:77:F0:BA:4D:FB:55:EC:8E:E1:2A:87:2E:FE:BC:A2:DF:EC:02
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019EB98FEBEB06DCDD7B2081E84C261BDD4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          199C
Signing time:             Fri 12 Jun 2026 02:01:17 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:17 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:17 +0000
Files and hashes:         1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
                          2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
                          3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
                          4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
                          5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
                          6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
                          7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
                          8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
                          9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: Zmgd5DRN333eE7Ju9S2ZacQtne+SJBE3hRadBqFbcgo=)
                          10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
                          11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
                          12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
                          13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
                          14: jOWVYK7gkC0LkmTchBPKIshY1wg.roa (hash: GtMSCed+k6Ff9NDCC09DG2TdmxdSLzC8T5DFgatfys0=)
                          15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
                          16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=)
                          17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:eb:eb:06:dc:dd:7b:20:81:e8:4c:26:1b:dd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jun 12 02:01:17 2026 GMT
            Not After : Jun 13 02:01:17 2026 GMT
        Subject: CN=d27677f0ba4dfb55ec8ee12a872efebca2dfec02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:7f:1f:70:21:79:25:9e:86:91:50:3e:25:
                    68:62:46:99:26:99:cb:48:ce:57:bf:d4:f3:ec:d9:
                    cd:9e:97:ad:09:f7:e3:a8:fb:36:37:16:a8:72:3e:
                    e9:0b:54:df:9e:42:a8:2e:df:65:98:4f:24:b2:95:
                    20:fb:53:61:78:97:45:e7:54:5b:4a:39:3e:ae:14:
                    3d:cc:f4:93:92:9e:92:6d:ad:2c:11:06:4f:b0:d0:
                    c5:6d:50:36:6d:a5:a6:98:a7:17:00:43:ac:1b:5c:
                    09:6d:4a:61:f0:db:cb:85:82:6b:aa:ef:ee:12:64:
                    b8:83:1c:a1:dc:3e:41:ec:bc:f0:e2:79:6b:ea:e4:
                    fb:a7:33:0d:54:38:4c:24:46:0c:08:ad:bf:f3:61:
                    3a:10:c7:9c:71:f3:e2:ab:01:9e:5f:a9:c1:84:98:
                    f2:42:06:44:fd:0f:64:3e:bd:41:03:97:2e:88:61:
                    08:99:70:2d:77:84:87:73:31:37:f2:60:1c:93:05:
                    0b:38:84:a6:f0:69:9a:2e:ff:3e:f0:fd:5d:55:5b:
                    9d:9a:7f:a5:87:96:ec:83:7b:20:e0:23:e5:17:f0:
                    6c:97:67:d9:9b:cf:a0:2c:3b:1d:99:41:07:59:29:
                    2e:f8:dc:52:bf:0a:4f:1f:e9:94:a9:89:20:66:91:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:77:F0:BA:4D:FB:55:EC:8E:E1:2A:87:2E:FE:BC:A2:DF:EC:02
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:fa:5c:fa:de:8c:1a:14:9e:6b:d2:cd:18:03:67:27:80:
         0e:2d:8a:ce:3e:30:27:e6:49:c0:f8:83:c0:3e:4f:04:3d:37:
         fc:84:2d:af:ce:b0:fe:0f:83:07:d3:e5:c8:96:3b:96:98:67:
         06:46:db:e1:81:61:24:72:00:e2:95:a1:15:24:47:13:94:7b:
         eb:6c:ff:96:6b:0b:f3:d9:7c:c6:ec:e2:07:60:ae:45:e5:1f:
         6d:b8:ac:65:fa:4f:b4:00:d5:de:f1:f6:ab:4f:67:35:c0:af:
         98:b7:5b:e7:60:52:3e:d0:a3:4d:3a:4a:40:a0:28:da:c8:0c:
         72:96:31:ba:d9:f9:05:63:cc:a8:82:87:3a:d5:34:6a:aa:71:
         c4:e6:05:80:c7:17:b9:b1:3a:89:59:ba:45:c2:aa:3f:5e:2f:
         8e:21:43:7f:cd:0b:f9:7e:4e:bb:82:6b:ce:c2:e5:77:e4:89:
         2f:41:7b:9a:08:87:fa:ba:84:88:f7:4f:cb:3c:70:8f:91:2a:
         13:43:e3:6e:9f:e4:6a:d6:e6:1d:47:10:bc:fd:3e:c7:1b:7a:
         c1:4a:7f:9a:aa:66:c6:44:34:2e:fa:ec:0e:b1:11:9a:93:ac:
         1f:2b:68:cc:f3:7a:09:f2:cb:ff:28:f9:46:c4:b7:b8:72:7d:
         78:6c:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:38:01 2026 by rpki-client