Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File:                     wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier:          W3GnojENMffMh8vdYZWBO6SVRlqvhpC6/mULt8M/UfU=
Subject key identifier:   34:3D:99:69:B1:F0:08:4F:EF:C3:57:BB:F4:C1:D2:38:18:38:90:3D
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer:       /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial:       019EB80F0E5A8CC51002C0254026C7C5A1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number:          073C
Signing time:             Thu 11 Jun 2026 19:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:54 +0000
Files and hashes:         1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=)
                          2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: 3ktNvLxd2HQR/6fV4Dh4uJvPQmskwHz11FUh3vOkFTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:0e:5a:8c:c5:10:02:c0:25:40:26:c7:c5:a1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
        Validity
            Not Before: Jun 11 19:00:54 2026 GMT
            Not After : Jun 12 19:00:54 2026 GMT
        Subject: CN=343d9969b1f0084fefc357bbf4c1d2381838903d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:16:b2:5c:72:f7:69:e8:07:fa:30:0f:71:
                    bf:39:4a:88:d8:58:cf:0d:ab:e7:a2:45:59:39:8b:
                    5b:74:67:35:f0:15:b3:a3:02:5b:33:fb:de:0a:e1:
                    9d:f9:c2:da:dc:5e:37:3a:db:af:fa:6f:3d:ce:92:
                    2d:9b:c8:1a:a3:a6:98:bb:32:59:5b:20:d1:cf:06:
                    58:7c:19:c2:e8:4e:5a:3f:24:6a:c3:2d:27:0b:1f:
                    03:f6:46:8f:07:78:e0:20:e3:4a:ff:df:10:b2:56:
                    05:5d:0d:70:3d:79:64:30:1b:96:8f:21:f0:b3:3d:
                    e0:c5:2a:85:da:6d:4a:67:00:eb:46:0b:67:fe:f0:
                    42:82:ce:a8:4c:06:de:82:ce:03:a4:15:a9:a1:8f:
                    2d:ad:a4:53:90:4e:30:86:29:27:9b:39:ee:bd:60:
                    92:53:02:64:60:37:4c:ee:4e:fa:56:59:10:88:d2:
                    52:37:fb:1e:52:a3:82:dc:11:5c:62:fc:7c:82:14:
                    e7:0f:3e:83:ca:02:e0:88:36:02:b8:c6:a7:28:99:
                    de:4a:a1:c6:93:0f:7b:7f:ef:ba:fd:81:a6:79:da:
                    29:54:22:bc:38:46:40:a1:af:69:c8:0a:87:c1:af:
                    33:f2:7e:f2:85:49:ac:4f:06:b1:a8:5f:60:9c:c8:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3D:99:69:B1:F0:08:4F:EF:C3:57:BB:F4:C1:D2:38:18:38:90:3D
            X509v3 Authority Key Identifier:
                keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:04:6b:54:43:21:35:af:84:5b:04:c8:3d:bc:31:0a:8e:af:
         e8:dd:e7:a3:af:7b:71:d0:79:6d:a4:d2:c5:59:8c:46:32:3e:
         e9:1f:1e:14:18:9a:64:df:a9:d5:c6:c0:47:16:76:9e:53:ea:
         1a:12:b6:ca:3b:1c:f1:fc:ea:87:4c:e0:7d:5d:db:64:3f:a7:
         d7:d8:b1:05:35:20:42:2b:d4:5d:63:32:5a:f1:85:1e:bc:df:
         f2:6b:f0:59:c0:b6:58:72:d6:6c:27:7a:43:4e:88:29:5b:a0:
         60:0c:f7:a1:c6:cb:03:a3:2e:7e:fb:3a:9a:87:4d:ca:19:3b:
         2a:b9:14:5c:aa:7f:eb:d3:00:1e:d0:f5:7a:4f:4f:cb:1b:10:
         c5:de:13:3f:16:fe:93:8e:dc:42:c3:e6:78:06:46:71:65:b0:
         6e:c8:d7:81:a5:4c:f7:d0:9b:b2:60:53:3b:c0:04:50:dd:e8:
         57:38:3a:70:5c:67:d2:91:dc:d6:1b:c0:e5:24:9c:7c:68:03:
         7a:da:88:ec:7b:b9:ec:a2:d4:aa:3c:2c:f1:20:77:73:f3:26:
         32:94:2c:5c:20:e4:48:0b:4e:d7:12:2a:04:cc:b3:8b:94:e7:
         9e:54:73:f5:38:68:55:63:1d:ca:7c:66:ff:c2:81:e2:06:a0:
         83:d6:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:55:53 2026 by rpki-client