Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          +H2LZGvWr2xmS8BhgCNaHBD5dYWATF08+WvlO9MjWws=
Subject key identifier:   4C:3D:D4:D2:97:6B:E0:E0:56:40:F9:E4:17:7A:12:89:FA:42:AC:3A
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       019EB769F032BA7AE15CE94AB20C249F75C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          0DF3
Signing time:             Thu 11 Jun 2026 16:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:33 +0000
Files and hashes:         1: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
                          2: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
                          3: NjHKuubvlyQaDe6G06rOD1BcaRY.roa (hash: PZZctgeIeCE44qT9n7ZGgk3AP9NOWa0WxX8jRLoy034=)
                          4: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
                          5: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
                          6: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
                          7: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: 7Y8rN/XrJ8wUT0Ze2oTwjVkEZd9BhjfT17NYo7YkAa4=)
                          8: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:69:f0:32:ba:7a:e1:5c:e9:4a:b2:0c:24:9f:75:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Jun 11 16:00:33 2026 GMT
            Not After : Jun 12 16:00:33 2026 GMT
        Subject: CN=4c3dd4d2976be0e05640f9e4177a1289fa42ac3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:c4:c1:e9:12:5d:91:5b:f2:4f:3f:2e:de:
                    e9:3c:b8:d5:56:34:bf:18:e2:86:3e:74:3e:83:27:
                    21:f0:d9:31:96:90:63:3f:41:a9:ab:b1:3e:ed:b0:
                    b1:b2:ff:39:be:00:93:be:f2:b2:d3:be:8d:b9:81:
                    85:bb:97:17:96:f3:60:f5:f4:e7:bb:45:fe:e7:74:
                    87:2b:6f:54:42:e9:ed:fa:5a:d1:1f:3a:15:60:1d:
                    24:4a:3c:ac:1c:68:f7:28:d7:7e:99:cd:d7:00:d5:
                    86:c2:05:5a:ef:fd:05:d0:22:e5:fd:94:f2:74:b4:
                    f0:f3:4c:94:86:ef:43:a3:51:9c:a0:29:5b:97:16:
                    a4:6a:ba:f0:f5:fd:d5:27:9d:55:07:17:36:b2:a9:
                    36:cc:42:f0:be:ad:54:6f:f9:12:97:19:89:7b:84:
                    aa:50:0a:7d:dc:fc:1a:10:b2:93:e6:bf:f0:fb:24:
                    cf:29:fa:0d:48:0d:78:95:95:68:f1:88:ad:ab:41:
                    10:c2:cc:4d:75:df:31:64:53:11:a1:2c:68:2b:33:
                    33:ca:31:8b:bd:ea:ab:2b:55:9b:2d:47:c9:c3:d9:
                    c5:1b:d6:e3:95:f7:bf:4d:80:37:fe:11:ac:3f:1b:
                    11:b6:c7:c3:00:9f:eb:9c:0f:7c:19:6e:fd:ac:4b:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3D:D4:D2:97:6B:E0:E0:56:40:F9:E4:17:7A:12:89:FA:42:AC:3A
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:55:91:b3:e5:62:64:59:70:6f:9c:57:8b:ff:9c:6d:1a:2b:
         c0:c3:f7:d3:a3:ac:98:ce:fc:d3:ac:a0:39:d0:aa:30:78:64:
         96:6a:66:9b:ee:7e:52:1b:5c:c3:e2:f4:d7:2c:5e:43:9a:4d:
         69:b0:be:5b:1a:f6:6f:62:b5:4b:88:22:a3:17:e6:d3:75:c1:
         50:ed:c7:a3:2f:7d:7a:aa:35:b2:e7:a4:36:b3:c6:bd:65:18:
         38:0a:8b:b9:ff:e4:7b:c8:31:af:a5:88:92:30:be:c6:ea:60:
         34:ec:df:a3:99:12:27:e5:d1:36:e9:25:15:09:e6:23:56:50:
         e9:1e:d8:78:d8:e0:97:91:54:a1:cf:70:fd:4e:95:16:a5:62:
         27:2e:c7:07:32:88:10:a7:b2:27:d4:bc:4f:d2:73:22:ea:e4:
         9b:a3:0b:57:a7:18:82:87:75:5a:08:b8:cf:f6:48:b3:2e:01:
         65:19:98:8b:ca:5a:c1:4c:6e:66:aa:67:9c:88:54:75:df:ed:
         0a:40:ec:47:54:48:6d:98:9f:a9:c5:21:c7:10:be:2c:3e:17:
         c8:fd:d7:cc:a7:77:81:aa:05:c7:91:e6:fe:5b:ef:d7:0d:f9:
         41:8f:14:10:de:f5:ed:53:69:6b:83:85:72:f5:dc:8f:32:68:
         b1:7b:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:31 2026 by rpki-client