Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File:                     wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier:          5Xt+lTLxPBUTOXyKFdbtako/V2uUQ4oJVlbsTNqvZ9E=
Subject key identifier:   01:B9:A5:4C:20:62:51:A4:77:AE:71:F5:59:C7:86:29:06:30:DE:ED
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer:       /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial:       019EB8EAC8CCBD0954F92B90C141B62E7308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 23:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:54 +0000
Files and hashes:         1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
                          2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: EJe+/au/hjJwWKOZKvDGjuSN7w5n0UZu+BWoeapvPiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:c8:cc:bd:09:54:f9:2b:90:c1:41:b6:2e:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
        Validity
            Not Before: Jun 11 23:00:54 2026 GMT
            Not After : Jun 12 23:00:54 2026 GMT
        Subject: CN=01b9a54c206251a477ae71f559c786290630deed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:4d:5c:c2:85:c4:45:6a:4b:42:a8:65:d9:
                    4a:da:41:62:23:0b:04:da:75:a0:58:d8:72:4d:80:
                    89:c0:8d:2c:b7:a0:83:46:71:db:5e:19:03:83:90:
                    cb:bf:e7:ab:e4:13:9a:8e:3e:2a:58:3e:43:a5:7f:
                    d4:6c:94:6b:f4:41:df:60:0a:73:58:7b:69:61:85:
                    2e:f8:a2:37:05:34:0a:0c:7c:cb:96:cd:47:15:c1:
                    9d:b1:ac:b3:09:01:da:27:5e:b1:9a:16:28:9f:4a:
                    56:d7:1f:a4:d4:2c:11:2b:55:57:00:45:29:75:70:
                    70:48:43:60:02:18:f6:e2:87:ca:f1:82:d6:81:0c:
                    2a:53:ba:b9:f1:9f:26:f3:da:e8:4b:03:e9:55:a3:
                    1f:f3:ec:63:d2:3b:30:51:1c:fe:ea:25:99:40:b6:
                    1d:2d:d7:68:1d:c3:35:5d:4a:0f:a0:d6:09:dc:ef:
                    01:dd:dd:9f:66:cf:7b:ce:bb:d4:fa:d0:b3:92:01:
                    19:e8:a4:09:d1:c7:73:8d:f5:3e:5c:c4:2d:26:69:
                    45:9f:9b:a1:fd:32:c2:75:ef:7b:60:2a:09:ca:f5:
                    df:de:84:12:d7:ad:6e:60:6b:8a:e9:0b:36:16:2c:
                    f2:4c:34:22:9f:1a:fc:1c:8f:ab:1c:1a:72:6d:ac:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:A5:4C:20:62:51:A4:77:AE:71:F5:59:C7:86:29:06:30:DE:ED
            X509v3 Authority Key Identifier:
                keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:3a:38:36:5e:a2:96:c4:c4:c7:83:33:60:57:b7:85:8d:
         e0:18:fd:ff:d3:76:87:cf:b4:93:65:80:84:8f:f6:d1:6b:75:
         b0:c2:a9:42:b5:be:5a:0a:0e:b2:81:4e:b1:f0:49:20:bb:2c:
         37:28:c6:3e:93:07:b4:5f:c7:13:d4:66:0c:3d:79:97:72:9d:
         5e:9f:e3:00:3a:6d:75:ce:af:5e:41:f4:58:61:2b:a8:8d:41:
         5b:d3:93:04:79:49:32:e1:f2:28:94:23:96:4c:64:9d:2a:af:
         e8:6c:1d:a4:c7:b7:b5:73:84:12:53:6f:4b:16:fb:16:cd:d7:
         cd:c7:c9:d9:cf:01:de:54:60:93:45:12:d0:3f:bf:ac:d8:f3:
         1c:56:ce:85:c1:44:24:83:51:f2:07:82:38:81:32:bd:d6:1a:
         ca:ed:fc:38:ee:65:75:99:e4:38:2f:87:85:48:85:1f:38:80:
         cd:0a:82:f4:c1:97:50:e4:6b:a6:b9:d6:65:4f:98:f4:05:27:
         78:73:c9:90:13:b7:c5:64:09:af:15:35:9e:25:c3:7e:f1:4b:
         5d:7e:7c:37:ff:46:52:ca:bf:9a:f6:9c:de:10:18:01:89:97:
         7b:3a:ad:1b:d0:ae:b0:a4:c7:00:de:06:5f:84:be:4b:12:af:
         ae:61:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:48:43 2026 by rpki-client