Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          2/eedjf+Y6yqIExsWWGuSw7Qs/PJqHuju3RmPUipi9g=
Subject key identifier:   20:13:09:97:46:CA:EA:EC:17:14:66:27:F1:EE:A2:D4:6F:B4:BA:99
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       019E910229748B59F0F0AE45290D6104EE7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          0DBA
Signing time:             Thu 04 Jun 2026 05:01:38 +0000
Manifest this update:     Thu 04 Jun 2026 05:01:38 +0000
Manifest next update:     Fri 05 Jun 2026 05:01:38 +0000
Files and hashes:         1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: rPoNKfYb5tW7wugX+9abSZeLZqv6TL5rrYHdJAIyIAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:02:29:74:8b:59:f0:f0:ae:45:29:0d:61:04:ee:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: Jun  4 05:01:38 2026 GMT
            Not After : Jun  5 05:01:38 2026 GMT
        Subject: CN=2013099746caeaec17146627f1eea2d46fb4ba99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:bb:e8:e1:13:c2:75:1b:5f:65:35:94:f2:
                    08:77:06:78:13:55:60:d5:8c:b8:15:35:0f:47:a6:
                    86:8b:fd:bb:c6:37:c3:00:da:0e:fa:8b:87:e9:2a:
                    cb:5e:a5:51:83:25:5f:f7:1e:53:c7:df:d1:57:e7:
                    80:ca:ac:38:26:ac:87:d2:ec:fc:50:88:e3:7e:6f:
                    cc:8a:9e:6c:f2:09:ac:f7:50:7c:1f:03:c0:4c:51:
                    92:70:b8:7f:ae:39:97:c6:25:fc:ec:30:44:85:52:
                    00:ee:64:c0:11:03:df:e2:9d:82:1f:67:4f:59:78:
                    ba:0c:31:03:3e:92:a8:73:3e:4d:9c:0e:19:9c:fe:
                    c6:29:db:3f:79:1a:a9:7c:60:e4:7f:91:ae:27:ce:
                    33:43:02:eb:61:47:04:0a:d1:51:90:3d:49:40:e3:
                    8f:ad:1d:26:99:9c:8c:ba:cf:d8:d7:72:5b:7f:02:
                    39:42:fa:76:b8:27:38:40:d1:18:6f:1f:8d:ed:75:
                    21:fa:0a:41:cb:9c:f7:b9:71:79:43:7d:8e:9a:92:
                    1a:2e:80:4e:cb:78:f5:32:b0:d8:14:d7:b9:06:e4:
                    91:fd:4a:36:ff:73:7b:72:03:8e:ff:8b:5d:15:b3:
                    9e:ba:13:b6:f5:95:1c:01:51:4e:eb:b6:1a:20:51:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:09:97:46:CA:EA:EC:17:14:66:27:F1:EE:A2:D4:6F:B4:BA:99
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:41:36:78:04:03:33:a5:cb:63:cc:78:80:66:9a:07:80:77:
         18:43:7b:94:95:fd:da:b0:1c:9d:9d:a8:c7:cc:98:71:33:de:
         99:77:d7:07:1f:7e:b2:55:9a:e9:b7:2a:41:e4:12:1b:b0:db:
         89:59:38:7a:3e:6d:00:7a:1b:cb:df:1d:28:fb:f6:7f:94:c1:
         6b:77:36:dc:ad:49:7a:d5:5e:d4:61:a1:cc:98:f8:0e:cf:7b:
         d5:9e:26:51:50:d8:cc:b5:7b:fc:42:a2:96:25:73:a3:ff:39:
         40:98:08:42:b8:f8:77:30:43:65:8a:b2:27:b7:95:a9:5b:01:
         42:1a:c8:63:98:9a:09:ef:8e:31:ff:e9:34:4f:03:8c:3e:0e:
         17:49:f8:0c:fe:11:83:fa:e4:56:ac:d2:2d:bb:73:00:aa:3c:
         86:f8:32:07:8d:40:23:dd:ed:83:8d:85:97:e1:a0:fa:10:7e:
         4c:3c:9e:24:ce:1e:16:39:2c:5c:30:59:19:a2:95:63:42:04:
         b8:23:99:da:61:73:66:7a:1c:d5:fd:a0:a2:91:c9:2a:a0:79:
         2c:1b:f7:e2:bd:d1:5d:fd:75:13:95:3c:54:7f:0a:d3:fd:56:
         3d:9b:46:bb:2f:58:70:b8:1d:a6:52:bc:c4:0e:0f:f5:57:6c:
         16:d1:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:17:13 2026 by rpki-client