Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File:                     wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier:          UyUlx/+19kel+FI+T6zxjwo/9wCvzJ38I4HLU0wzb2E=
Subject key identifier:   FB:35:A0:4B:F7:22:7D:1F:6F:80:F1:E1:C5:06:85:70:FD:5C:4B:79
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer:       /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial:       019EB87D20D07A95D938BC8A745EDCABC028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number:          063A
Signing time:             Thu 11 Jun 2026 21:01:08 +0000
Manifest this update:     Thu 11 Jun 2026 21:01:08 +0000
Manifest next update:     Fri 12 Jun 2026 21:01:08 +0000
Files and hashes:         1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
                          2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: AHLPZ+2YVSiLO4niGdxN5nvOKjH2BV3wRt3YKE0ilOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7d:20:d0:7a:95:d9:38:bc:8a:74:5e:dc:ab:c0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
        Validity
            Not Before: Jun 11 21:01:08 2026 GMT
            Not After : Jun 12 21:01:08 2026 GMT
        Subject: CN=fb35a04bf7227d1f6f80f1e1c5068570fd5c4b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:ce:37:e7:bb:b2:50:2e:c2:f2:dd:6b:4e:
                    b9:4e:7a:79:c0:a6:55:44:38:1c:e8:38:c5:2e:c0:
                    de:fb:19:b5:51:08:6d:0f:90:f5:86:65:ae:07:79:
                    08:c2:7c:b5:1e:19:20:f6:06:fe:8c:9c:c5:8d:a2:
                    6f:f8:3b:fa:f4:80:0f:5e:b7:ca:fe:4d:06:34:05:
                    7c:85:83:13:4d:a4:45:fe:6b:a4:72:82:fa:db:ec:
                    6b:6e:f5:e1:38:bd:dc:04:66:3d:72:10:41:fd:6a:
                    3d:85:03:0c:8d:46:ae:a9:62:b2:54:b2:7d:bd:08:
                    a5:e2:fe:b1:00:d7:40:e4:8a:56:10:c3:a1:47:65:
                    c3:0c:e3:a3:75:3d:89:6b:1b:1c:23:90:c3:6d:d5:
                    58:e3:ec:78:7e:9a:7f:65:6d:81:c4:85:cc:a1:b6:
                    19:a2:1a:fb:db:59:06:96:96:cf:70:db:ac:5a:b4:
                    fb:a2:85:8a:70:92:ae:6d:45:7b:f2:0a:97:58:6f:
                    b6:34:68:77:28:2d:5a:58:f2:28:2c:26:4b:a9:5b:
                    23:84:d3:99:98:e4:96:75:f6:7c:9e:9a:eb:cd:70:
                    0b:9f:48:4f:03:97:2a:5c:ee:f1:f0:80:ea:df:2e:
                    44:30:e1:1d:e7:6d:2d:55:7f:77:e0:88:0b:e5:da:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:A0:4B:F7:22:7D:1F:6F:80:F1:E1:C5:06:85:70:FD:5C:4B:79
            X509v3 Authority Key Identifier:
                keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:16:0a:4d:33:89:93:74:3e:4b:69:9b:9f:a7:c3:b7:25:
         3a:5e:1e:4a:6a:c8:78:7e:a9:11:9c:fc:3e:ba:4a:ae:43:34:
         1c:64:67:3d:30:13:98:60:5e:45:40:ec:1d:d2:6f:02:12:34:
         e6:b7:61:89:9e:18:d8:da:68:da:44:d4:df:bc:da:2b:62:dd:
         9c:dc:57:0a:6f:d7:26:3f:bb:19:c1:25:1c:65:8c:a8:b1:18:
         4e:08:c0:bf:94:2d:4b:71:21:f0:d0:52:e3:ac:db:c4:0f:e9:
         c2:02:56:6f:c2:cb:f9:66:9a:c8:22:a6:01:7a:f1:15:a2:44:
         34:7a:2c:db:f7:ae:55:2b:98:94:52:3a:f1:54:21:1a:1a:8f:
         6e:90:a6:1d:ab:8e:a5:83:6f:88:fc:bd:a9:93:ad:91:d5:92:
         3f:67:92:01:05:bf:bb:3d:c2:af:88:69:dc:07:e4:49:41:50:
         5b:b7:fa:c5:17:a7:bf:77:c2:6d:42:6d:01:d6:8d:48:09:7c:
         b9:67:ff:cd:0e:fb:a5:db:3f:3d:56:cb:0e:1a:e2:7c:7f:df:
         86:41:65:ec:44:8d:d3:51:65:db:44:97:06:9a:85:74:75:d7:
         ea:33:c6:76:98:ea:63:91:c4:d2:ef:b0:8b:cc:d5:24:7a:27:
         31:41:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:25 2026 by rpki-client