Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File:                     wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier:          t+kEZZYhOP50K6v/c34hjDpTxeb/0rfUP9CTjKZAcL4=
Subject key identifier:   C0:0F:EF:6A:9A:DC:D6:A2:DB:F3:72:2B:20:E3:7F:B0:F2:3B:EB:E8
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer:       /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial:       019E3305F6F820A1419F5F1E90A41ADFCFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number:          0A0D
Signing time:             Sat 16 May 2026 23:01:29 +0000
Manifest this update:     Sat 16 May 2026 23:01:29 +0000
Manifest next update:     Sun 17 May 2026 23:01:29 +0000
Files and hashes:         1: VrmjHVAC_dTFireq6yrVrnJ1Qr8.roa (hash: 3FZStDcO/86XfV9ktKFi/0KRl54/2sqdqVE7Qc6xIko=)
                          2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: JgwDx5LvnMnr6mc3GPQGPbRyKEMBIFnsr2dSKLseUXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:05:f6:f8:20:a1:41:9f:5f:1e:90:a4:1a:df:cf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
        Validity
            Not Before: May 16 23:01:29 2026 GMT
            Not After : May 17 23:01:29 2026 GMT
        Subject: CN=c00fef6a9adcd6a2dbf3722b20e37fb0f23bebe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:1e:7b:2d:20:25:27:b9:20:e1:9c:be:4f:
                    88:a9:46:38:80:3c:74:0e:f3:45:d9:3d:a2:c9:58:
                    b8:5c:fa:c5:3d:8d:5d:1a:88:5d:e6:3f:f9:af:c8:
                    96:eb:ba:f2:aa:ec:fa:e6:f2:85:1c:19:0c:fa:a0:
                    fb:72:9d:47:db:8e:29:44:c4:70:50:e1:5e:71:9f:
                    bf:b4:ab:f3:8f:5a:a3:d9:5d:eb:53:48:73:a4:11:
                    b6:56:e5:71:cd:97:91:5e:d1:40:53:b0:33:ff:86:
                    31:3e:26:45:3a:42:21:3d:3e:d9:38:fe:5b:46:26:
                    e4:1e:bd:59:0f:4b:4d:63:49:be:b2:9e:a2:47:a4:
                    b9:30:3f:4b:a7:c9:3e:8a:95:0d:fb:76:a8:25:8c:
                    e2:c6:45:bf:04:c4:a5:bc:75:c6:29:f8:33:0c:6f:
                    cb:65:e3:e0:b3:f2:a3:48:28:17:07:0f:42:79:5d:
                    52:b7:a8:b4:f1:33:c5:32:d9:a5:99:97:50:a9:89:
                    f8:2f:6d:9a:5f:77:a5:1b:ae:35:f7:f7:5a:a7:a3:
                    76:b5:b4:14:bc:2f:36:e0:9c:c1:49:ab:3e:e0:3f:
                    9b:1a:40:b6:cd:db:78:45:e1:9d:23:a2:4e:62:13:
                    4c:e4:55:e0:bb:2e:eb:e2:31:f3:23:b1:41:93:61:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:EF:6A:9A:DC:D6:A2:DB:F3:72:2B:20:E3:7F:B0:F2:3B:EB:E8
            X509v3 Authority Key Identifier:
                keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:f4:e8:74:56:a6:d9:7f:9e:e8:dc:32:61:69:0d:d1:a9:
         16:01:ca:2c:e0:e1:be:fe:cc:1e:63:0c:46:5e:ee:af:31:3a:
         a0:1b:3d:9d:08:68:d5:f7:d4:fe:ee:3b:29:6e:c7:6e:f9:0d:
         c3:4b:1f:8c:10:5c:d8:6e:fb:8c:7e:3d:eb:1d:52:36:0e:8d:
         92:20:c1:ed:45:73:2a:de:57:79:f3:a5:53:ce:6b:df:2c:b2:
         54:fa:9c:49:f7:8d:5b:82:dd:3e:cf:39:d5:f5:51:34:6c:50:
         e2:6f:75:2e:27:d3:4e:a0:1a:a7:c4:c7:5e:55:f0:59:02:37:
         68:1e:5f:96:ca:fe:51:35:5e:6e:77:31:ce:8e:57:5c:7c:bc:
         1c:50:c0:da:ef:26:d5:5d:36:bf:9b:c0:cf:9f:1a:34:9c:35:
         6d:f0:f1:2a:52:55:68:c7:a0:06:f8:31:84:ad:31:32:35:48:
         34:23:8a:95:45:db:91:75:33:2f:6f:01:15:c7:b1:04:e7:64:
         4d:ec:a3:65:12:24:dc:27:0f:2e:59:7c:83:f1:59:09:f5:98:
         ff:80:f1:bd:53:7e:fd:bb:f8:5f:f0:ea:a8:24:c0:35:35:50:
         c8:d6:d2:f5:34:2f:aa:f6:dd:f6:21:e6:67:3f:57:c5:0e:bc:
         96:a0:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:24 2026 by rpki-client