Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          OTvXyIP33fZpEWmdYMRuO9MWo1QHxnzXJpuvzK1eCKs=
Subject key identifier:   92:D0:E6:B9:DD:30:B6:1F:A6:D9:82:CF:58:07:A4:C6:20:61:D9:17
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       019E4E46372C13A85A26B2801E9CB6A19B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          1928
Signing time:             Fri 22 May 2026 06:01:24 +0000
Manifest this update:     Fri 22 May 2026 06:01:24 +0000
Manifest next update:     Sat 23 May 2026 06:01:24 +0000
Files and hashes:         1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=)
                          2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=)
                          3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=)
                          4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=)
                          5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: SzkbHLEtocwz9ZcnYPWsXLqcgMOi3SA6g5njwMUZ220=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:46:37:2c:13:a8:5a:26:b2:80:1e:9c:b6:a1:9b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: May 22 06:01:24 2026 GMT
            Not After : May 23 06:01:24 2026 GMT
        Subject: CN=92d0e6b9dd30b61fa6d982cf5807a4c62061d917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:20:1e:51:fc:91:a1:0f:70:c6:ce:fa:99:
                    46:3b:27:a9:2e:93:e0:08:38:83:49:6e:4b:61:22:
                    39:22:48:15:10:76:69:5f:b3:2d:b7:cf:10:75:76:
                    8a:63:c4:f3:4b:8b:d4:68:a6:4e:47:88:09:7d:c7:
                    58:03:fc:c1:21:f2:42:1d:21:67:3b:b5:bd:6e:7c:
                    7e:4f:1d:de:86:cf:fa:70:07:87:7d:07:59:86:6a:
                    84:52:8c:04:dc:06:80:f3:47:3e:d9:6a:78:22:8a:
                    97:d9:a8:f8:c3:b5:6c:57:ae:92:25:d7:48:01:d4:
                    a5:61:1a:2d:7b:8c:66:5c:64:a8:89:0f:51:0b:a7:
                    be:82:00:cf:44:d3:63:d2:e3:87:27:7f:cf:72:61:
                    0f:77:c3:ce:91:56:b9:7f:89:2c:a9:7a:ba:13:76:
                    39:53:5e:42:ec:84:ec:ab:48:b2:93:1b:a3:9b:dd:
                    b1:1e:8f:4f:bf:f4:e5:20:3b:5e:e0:62:d9:29:df:
                    d7:2b:cf:d9:03:9a:44:06:e5:42:ac:99:a9:61:b5:
                    aa:16:81:6a:98:02:04:2e:2e:47:a0:ec:f4:7b:3c:
                    69:28:1f:53:56:17:14:1a:bb:b6:a0:e1:15:0b:1d:
                    0d:d0:ff:4a:91:9d:9b:d2:b6:d8:c5:78:e7:5d:8e:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D0:E6:B9:DD:30:B6:1F:A6:D9:82:CF:58:07:A4:C6:20:61:D9:17
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:89:22:3a:54:9f:7f:de:bc:8c:fe:a2:06:1e:72:df:4a:
         2a:14:b7:2e:7e:28:cc:4f:fb:25:0d:f2:a7:b8:91:c5:28:fa:
         06:2d:68:6c:69:3c:3f:c8:f3:72:21:2d:da:7e:99:37:1a:cc:
         00:de:b8:94:7e:fe:c2:e3:c4:e8:62:ec:2b:d2:aa:8d:71:76:
         5d:d5:ba:1c:21:96:d6:07:fe:36:40:b1:46:8f:dc:96:10:dd:
         19:f6:05:9f:78:46:19:07:a5:31:38:15:0a:fa:ff:c4:88:f8:
         aa:2e:88:63:dc:37:08:7b:b3:72:67:dd:39:49:6a:a9:f6:a5:
         3a:6e:c5:7c:3e:ff:13:45:f5:2d:04:01:ce:3e:b7:29:9a:42:
         1c:4d:12:54:cd:50:b5:5a:f6:96:ae:0c:21:d1:d5:d0:1e:cb:
         a7:41:46:ce:41:60:d5:55:80:50:89:b6:c3:da:30:c1:28:e8:
         a9:a7:d8:4c:e6:5d:55:bb:c6:d9:2d:83:d1:39:8f:7b:47:b0:
         15:2a:29:13:71:0c:43:d2:b3:68:5b:cc:7d:d5:3c:9a:f8:54:
         bb:aa:89:12:f5:4a:48:37:90:e2:bf:36:b2:11:d0:0b:99:a7:
         ad:ac:a9:80:02:c1:ea:37:97:57:b1:b4:75:5f:c5:d3:81:22:
         74:b5:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:05:10 2026 by rpki-client