Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          KOmIeeAe8TlWDpWRztR1n5R5QnsJ78JIQem4CQydOY4=
Subject key identifier:   52:CF:54:F8:87:32:74:FA:ED:9E:E1:F5:87:7D:EF:0F:D5:C4:09:A4
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       019EDD2F288DF97906FBFAA4F2B5B59A9882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          104A
Signing time:             Fri 19 Jun 2026 00:01:55 +0000
Manifest this update:     Fri 19 Jun 2026 00:01:55 +0000
Manifest next update:     Sat 20 Jun 2026 00:01:55 +0000
Files and hashes:         1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=)
                          2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: /Q1Gr8vP9j5fSlfHtyrPslcuPXQqzUzHbzmYK6Jp7uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:2f:28:8d:f9:79:06:fb:fa:a4:f2:b5:b5:9a:98:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: Jun 19 00:01:55 2026 GMT
            Not After : Jun 20 00:01:55 2026 GMT
        Subject: CN=52cf54f8873274faed9ee1f5877def0fd5c409a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:33:9b:69:18:1d:36:ff:ac:6e:61:06:e0:
                    e6:b4:bf:bd:38:70:bb:ce:55:50:10:91:f4:c6:9e:
                    87:2e:51:f5:33:5b:ce:76:ed:3f:9a:63:66:f2:35:
                    b3:43:ac:1c:5e:ad:2f:b0:c0:9d:82:7a:1b:76:f2:
                    c3:9f:cf:aa:5c:27:62:12:de:22:7a:4f:34:a6:56:
                    e9:f8:6b:f0:84:c8:da:5d:38:b4:38:cf:03:bd:07:
                    be:8d:dc:81:6e:6a:74:b3:95:83:fd:ca:d4:3c:d8:
                    36:27:02:f5:b4:5c:64:89:94:05:ec:33:45:ff:fd:
                    4a:8d:ad:8e:30:68:07:32:77:e6:f7:70:8e:b6:57:
                    0c:28:e7:6c:da:1e:d1:7c:3a:cb:83:f3:59:de:66:
                    28:20:0e:2a:88:e2:db:0c:6b:89:d0:42:37:7b:be:
                    ef:4e:4f:6c:19:72:33:54:ec:2b:26:52:b0:7b:f2:
                    ba:db:ed:11:eb:08:12:fd:a3:72:31:ab:02:71:e6:
                    c4:95:0e:24:6b:fd:77:df:12:d3:3c:eb:22:1a:6e:
                    b7:2a:1a:98:8b:c2:10:ea:93:e4:6a:ec:49:61:9e:
                    a4:2c:9e:7b:5d:75:f0:37:81:35:ad:aa:9d:0e:b7:
                    30:73:38:17:79:dd:a6:ba:c3:3d:05:34:9e:66:fc:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CF:54:F8:87:32:74:FA:ED:9E:E1:F5:87:7D:EF:0F:D5:C4:09:A4
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e7:2f:52:3c:3a:76:62:1b:68:fc:24:e7:bc:11:60:a9:56:
         39:19:5e:e6:08:90:2d:e6:16:25:e7:e3:8e:e0:74:64:8e:0c:
         54:16:c7:95:e8:93:2d:6f:bc:2c:ca:92:bf:12:8f:61:5b:41:
         79:ba:3a:d7:8d:14:61:d6:0e:fa:e3:3f:c2:08:37:f8:5e:e9:
         f9:31:ac:95:d3:6f:d9:f7:be:67:74:61:e3:8c:2b:ee:5f:b6:
         e2:e3:51:eb:da:c5:d5:4c:68:d3:fd:4e:49:ad:c2:c8:52:38:
         35:2c:cd:fc:b2:12:e6:79:c8:e0:e3:da:89:77:61:55:a8:d2:
         fe:d7:9e:90:e4:9c:f9:3e:1f:ef:fa:3b:f6:dd:4a:1d:c2:9b:
         e7:4a:a3:92:70:b5:88:0b:07:81:bd:06:2e:85:e9:37:63:87:
         67:52:3c:b6:b8:10:2e:d0:42:91:2e:54:f0:1e:8c:fc:46:a7:
         c2:b3:59:e4:f7:73:5e:0a:70:39:77:7a:bd:f6:b9:cf:8c:90:
         80:cd:d8:41:85:f9:47:d3:ca:33:fe:da:0f:fb:5f:86:4a:43:
         5d:b8:d4:cb:e4:7f:71:3b:2b:d6:83:b7:f3:1a:3d:aa:e0:97:
         92:65:bd:27:a5:3c:00:e1:b5:d8:6a:8c:3a:c9:ca:30:c1:4b:
         87:a3:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:15:33 2026 by rpki-client