Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File:                     wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier:          m8PMbU3J0jnik7osspxQ563Bztw+quGNg1zXYk1a5cQ=
Subject key identifier:   C2:97:FE:73:5F:D8:D7:A4:A4:23:F2:EC:AB:DF:40:DD:13:21:DD:7A
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer:       /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial:       019E9A3C4131CE210DC33A74D639CE568733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number:          0C4C
Signing time:             Sat 06 Jun 2026 00:01:40 +0000
Manifest this update:     Sat 06 Jun 2026 00:01:40 +0000
Manifest next update:     Sun 07 Jun 2026 00:01:40 +0000
Files and hashes:         1: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (hash: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM=)
                          2: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: XIS4rE+QrWIwYGnf8cA2DvomnsJkQYbYYjU7lwbBwUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:3c:41:31:ce:21:0d:c3:3a:74:d6:39:ce:56:87:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
        Validity
            Not Before: Jun  6 00:01:40 2026 GMT
            Not After : Jun  7 00:01:40 2026 GMT
        Subject: CN=c297fe735fd8d7a4a423f2ecabdf40dd1321dd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:a8:04:7e:e2:82:de:34:73:0d:cb:80:2c:
                    34:01:e4:5b:25:89:fd:c2:85:92:35:77:21:b1:92:
                    c3:ef:00:b0:5a:39:cd:a4:c6:a5:7a:b0:e2:c3:e2:
                    68:38:6d:be:15:da:34:f3:f6:7f:56:8f:ad:18:c0:
                    82:99:04:4e:64:b2:35:56:f9:f9:83:a6:bf:9d:dc:
                    e4:8a:45:b3:a8:8c:63:9b:6d:ea:c9:64:fd:a2:9a:
                    47:21:b4:a8:9c:59:e0:df:c5:18:5f:73:a5:25:09:
                    7b:47:d7:2a:ab:14:4a:89:f6:1f:9a:c8:a9:fd:56:
                    19:49:c9:63:2d:92:a7:11:37:23:a1:37:53:17:40:
                    98:9c:c7:bf:ed:ce:1a:1a:88:94:fd:51:96:91:e6:
                    06:bd:f0:05:6b:9a:13:61:ac:d8:3b:44:25:31:0f:
                    43:e5:fa:12:8c:45:c7:ac:10:4d:f3:95:a4:13:0d:
                    f8:39:36:f0:1c:40:61:ba:dc:e4:14:93:58:04:13:
                    35:ca:10:f7:e1:64:4e:34:89:2a:51:b5:12:e3:ff:
                    bc:f5:3e:ff:21:a7:08:8b:40:80:b8:94:30:8b:74:
                    64:e3:21:2c:5e:18:0f:95:8e:b0:fb:c2:53:9c:66:
                    97:3c:59:f2:ad:a1:d8:21:b6:78:76:d5:70:93:43:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:FE:73:5F:D8:D7:A4:A4:23:F2:EC:AB:DF:40:DD:13:21:DD:7A
            X509v3 Authority Key Identifier:
                keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:18:5c:6a:af:66:70:81:35:72:2c:b0:9a:cc:48:d6:51:76:
         1e:31:7f:d6:91:77:2a:d8:96:4d:32:8f:6e:8b:32:e4:fa:dd:
         83:5f:29:e4:ff:61:c6:59:0a:32:f5:b9:9f:57:c7:0c:aa:64:
         42:a4:ce:69:6a:be:e6:ec:e0:b6:0c:07:1e:2e:6c:6d:50:af:
         d3:46:61:3b:5d:9d:17:e3:1a:b7:01:6d:4e:99:de:eb:ef:4b:
         65:f1:b7:74:18:e3:35:19:51:59:6e:44:7e:8b:69:39:03:2c:
         08:5a:cc:76:6a:ea:f7:a2:7e:fa:76:66:c6:fd:29:fb:1a:e2:
         89:65:04:fa:25:a3:4b:92:75:c7:2a:c2:cc:c5:ea:11:cb:c3:
         3c:78:c0:92:87:f0:9c:b8:c7:ce:43:e6:b0:7c:dd:8d:13:e4:
         6f:e0:d6:06:00:60:3e:cc:df:d5:30:df:b5:cd:b4:4c:5a:40:
         03:7b:97:d0:b5:1c:c4:e6:7e:0d:a5:51:10:63:e3:d1:1e:92:
         b7:0c:fe:cd:45:93:1a:d3:df:ce:4a:7d:c8:4f:df:ca:66:a3:
         21:4a:a5:36:c6:86:9d:de:e2:fc:a5:88:1d:98:1e:0c:d6:a7:
         d6:2e:a0:31:b8:a3:7c:d6:83:71:f2:0f:9f:eb:e1:58:2e:f3:
         e8:68:3b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aPEExziENwzp01jnOVoczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZGQ0NzUyZDc5ZDQzODhjMWY2YjI4NTYwM2Q0MGI1YTRi
Njk1MzYwHhcNMjYwNjA2MDAwMTQwWhcNMjYwNjA3MDAwMTQwWjAzMTEwLwYDVQQD
EyhjMjk3ZmU3MzVmZDhkN2E0YTQyM2YyZWNhYmRmNDBkZDEzMjFkZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/CoBH7igt40cw3LgCw0AeRbJYn9
woWSNXchsZLD7wCwWjnNpMalerDiw+JoOG2+Fdo08/Z/Vo+tGMCCmQROZLI1Vvn5
g6a/ndzkikWzqIxjm23qyWT9oppHIbSonFng38UYX3OlJQl7R9cqqxRKifYfmsip
/VYZScljLZKnETcjoTdTF0CYnMe/7c4aGoiU/VGWkeYGvfAFa5oTYazYO0QlMQ9D
5foSjEXHrBBN85WkEw34OTbwHEBhutzkFJNYBBM1yhD34WRONIkqUbUS4/+89T7/
IacIi0CAuJQwi3Rk4yEsXhgPlY6w+8JTnGaXPFnyraHYIbZ4dtVwk0O8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKX/nNf2NekpCPy7KvfQN0TId16MB8GA1UdIwQY
MBaAFMLdR1LXnUOIwfayhWA9QLWktpU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAt
NGE1NzU2NjQ5ZTAxLzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAtNGE1NzU2NjQ5ZTAx
LzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRhcaq9m
cIE1ciywmsxI1lF2HjF/1pF3KtiWTTKPbosy5Prdg18p5P9hxlkKMvW5n1fHDKpk
QqTOaWq+5uzgtgwHHi5sbVCv00ZhO12dF+MatwFtTpne6+9LZfG3dBjjNRlRWW5E
fotpOQMsCFrMdmrq96J++nZmxv0p+xriiWUE+iWjS5J1xyrCzMXqEcvDPHjAkofw
nLjHzkPmsHzdjRPkb+DWBgBgPszf1TDftc20TFpAA3uX0LUcxOZ+DaVREGPj0R6S
twz+zUWTGtPfzkp9yE/fymajIUqlNsaGnd7i/KWIHZgeDNan1i6gMbijfNaDcfIP
n+vhWC7z6Gg7hA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 01:22:05 2026 by rpki-client