Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File:                     wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier:          MPQEnL2BJKXY9evWMwPmDS5s1DfmNiA08h4TPi8/Pas=
Subject key identifier:   4E:FC:53:21:0C:B2:45:10:54:2E:58:C8:4E:D5:58:C8:E3:F2:78:09
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer:       /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial:       019E90932F5B6971970A9638D91C686A81A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number:          1951
Signing time:             Thu 04 Jun 2026 03:00:25 +0000
Manifest this update:     Thu 04 Jun 2026 03:00:25 +0000
Manifest next update:     Fri 05 Jun 2026 03:00:25 +0000
Files and hashes:         1: 3jqeLp31Ia72OLV8Vsb0DKq9fLg.roa (hash: 8CA6QC7AuB3Gqp1AExkzok06YhM4gdbvljn5N5Amqps=)
                          2: j56JgDQ7deItiz4SwN3u_sTMv1A.roa (hash: Sf7VCDy2DZYrfhfR8bd2YHx/KU03gMpcan4C+fydjnc=)
                          3: lBUVAt70R1-1BAR2vy4_xkP_gao.roa (hash: XL0AtgP0aRu8pzRocWYutB3KozJzOUh9bOk7zF939M8=)
                          4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: /i4kKDpyvJUxdaoIAMMMvknPDn/X39ZTdWCOLkRID4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:2f:5b:69:71:97:0a:96:38:d9:1c:68:6a:81:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
        Validity
            Not Before: Jun  4 03:00:25 2026 GMT
            Not After : Jun  5 03:00:25 2026 GMT
        Subject: CN=4efc53210cb24510542e58c84ed558c8e3f27809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:f6:bc:7d:f2:23:c1:71:1d:46:6d:f5:b4:
                    8a:40:02:1d:62:90:10:78:73:e2:4a:87:fb:f0:2e:
                    03:c7:fc:0d:6d:b3:c0:ef:9a:7b:8c:2b:51:dd:12:
                    f4:a3:6c:70:fc:58:fe:32:8e:fd:a3:72:7a:49:23:
                    67:b4:6c:06:a9:68:8e:ec:4b:d1:a4:8a:4f:63:fb:
                    f5:a8:7a:8f:99:5e:33:ef:88:4a:12:4e:e3:00:5e:
                    de:2e:88:2b:6b:17:5b:15:af:a4:46:3e:51:48:2d:
                    56:3e:23:02:89:45:d0:ed:23:a4:46:27:9d:06:33:
                    76:68:aa:b2:29:34:b9:20:f5:67:6f:87:4e:20:8e:
                    43:b2:13:d7:a1:17:63:da:9f:e9:f3:cb:89:06:c2:
                    3d:72:c5:0c:13:90:b3:76:39:2b:28:ae:27:36:be:
                    56:b4:00:f8:bd:1d:fc:37:4b:9a:84:a7:92:5a:2e:
                    e7:69:ed:d1:77:00:1b:c9:81:2a:c7:c5:cd:fa:d5:
                    a4:5c:bf:e3:62:f4:d5:f4:c3:91:b5:4a:59:3e:61:
                    e9:70:30:4a:63:7b:22:73:58:3f:18:de:90:9d:ca:
                    d4:cf:b1:fc:27:e0:8b:27:5f:0d:89:5e:71:a1:c6:
                    19:89:66:ac:40:49:de:c0:89:27:4b:fa:a1:b1:0b:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:53:21:0C:B2:45:10:54:2E:58:C8:4E:D5:58:C8:E3:F2:78:09
            X509v3 Authority Key Identifier:
                keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:73:21:56:7f:d3:b6:91:8a:90:d3:09:0a:c3:39:58:b2:e0:
         67:00:39:b7:1d:1c:bd:46:3a:9f:d8:59:89:6e:ba:f8:50:08:
         e3:a1:d4:39:ce:f5:37:de:db:06:aa:ca:80:f3:f5:32:74:e9:
         41:07:29:2d:1f:db:1a:2f:95:11:b0:1f:94:2b:7f:18:4c:a3:
         19:6d:31:08:dd:e0:63:f6:ea:a5:69:fa:71:0e:a4:8c:96:c0:
         e7:f7:91:4d:61:16:bf:77:a9:50:a9:01:23:51:7e:c4:c5:76:
         a0:d4:a4:c5:94:29:0b:06:48:46:25:7b:e4:af:06:8f:77:cc:
         48:1d:97:1b:04:c2:e2:0b:9f:9a:08:df:f9:4c:b8:8e:99:01:
         8a:0d:55:3c:e5:f6:f5:bc:e2:58:49:75:2b:66:d0:0a:dc:88:
         77:1a:ae:08:bb:2d:b8:3e:a6:00:f7:35:fe:c7:b6:a5:f4:de:
         05:dc:c8:6e:93:ec:03:95:91:3e:33:10:7f:c8:64:4c:07:44:
         5d:ce:e4:12:fe:c2:f2:a8:3b:1d:48:31:aa:c7:d4:38:eb:70:
         13:67:46:de:b3:e2:c0:6e:49:e9:3c:73:84:40:7d:e9:fd:e5:
         ec:de:d5:92:83:18:44:4d:97:88:3c:2e:63:4f:f9:b9:3c:76:
         11:5b:05:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Qky9baXGXCpY42RxoaoGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5
YjYwYmUwHhcNMjYwNjA0MDMwMDI1WhcNMjYwNjA1MDMwMDI1WjAzMTEwLwYDVQQD
Eyg0ZWZjNTMyMTBjYjI0NTEwNTQyZTU4Yzg0ZWQ1NThjOGUzZjI3ODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nD2vH3yI8FxHUZt9bSKQAIdYpAQ
eHPiSof78C4Dx/wNbbPA75p7jCtR3RL0o2xw/Fj+Mo79o3J6SSNntGwGqWiO7EvR
pIpPY/v1qHqPmV4z74hKEk7jAF7eLograxdbFa+kRj5RSC1WPiMCiUXQ7SOkRied
BjN2aKqyKTS5IPVnb4dOII5DshPXoRdj2p/p88uJBsI9csUME5CzdjkrKK4nNr5W
tAD4vR38N0uahKeSWi7nae3RdwAbyYEqx8XN+tWkXL/jYvTV9MORtUpZPmHpcDBK
Y3sic1g/GN6QncrUz7H8J+CLJ18NiV5xocYZiWasQEnewIknS/qhsQs2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE78UyEMskUQVC5YyE7VWMjj8ngJMB8GA1UdIwQY
MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt
ZmZkNjQ2ZDA1ZjY3LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3
LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXMhVn/T
tpGKkNMJCsM5WLLgZwA5tx0cvUY6n9hZiW66+FAI46HUOc71N97bBqrKgPP1MnTp
QQcpLR/bGi+VEbAflCt/GEyjGW0xCN3gY/bqpWn6cQ6kjJbA5/eRTWEWv3epUKkB
I1F+xMV2oNSkxZQpCwZIRiV75K8Gj3fMSB2XGwTC4gufmgjf+Uy4jpkBig1VPOX2
9bziWEl1K2bQCtyIdxquCLstuD6mAPc1/se2pfTeBdzIbpPsA5WRPjMQf8hkTAdE
Xc7kEv7C8qg7HUgxqsfUOOtwE2dG3rPiwG5J6TxzhEB96f3l7N7VkoMYRE2XiDwu
Y0/5uTx2EVsFSw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:21:03 2026 by rpki-client