Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          zkD9Vur8u7B1J5nl6qwA/gTwfJ3TP6my6VUwYtgxcEM=
Subject key identifier:   CC:D9:13:18:A6:1C:03:7A:7E:B8:8D:0A:8F:71:BF:8E:78:9B:3C:8D
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019EB76A3C28186C7092E1EF5BBA7951E5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          02F0
Signing time:             Thu 11 Jun 2026 16:00:53 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:53 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:53 +0000
Files and hashes:         1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: tvg2KDitkXuTp8ew5JfpshhStOlPMW9ioZf4Y8USYhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:3c:28:18:6c:70:92:e1:ef:5b:ba:79:51:e5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Jun 11 16:00:53 2026 GMT
            Not After : Jun 12 16:00:53 2026 GMT
        Subject: CN=ccd91318a61c037a7eb88d0a8f71bf8e789b3c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:57:be:33:bd:78:ae:9f:17:4b:98:fa:cb:
                    d1:48:af:42:a7:c2:c3:3a:cc:a8:a5:70:54:56:90:
                    e1:5c:93:fa:c9:54:15:dd:07:e5:b9:0e:73:a2:2c:
                    ce:c7:4e:c8:cf:05:c7:83:31:6b:ec:7c:b5:14:75:
                    c5:2c:49:fc:cf:0a:2e:4f:fc:c7:ec:fc:87:a9:42:
                    70:f1:fd:d3:7d:ef:a8:9e:e6:51:88:8f:d4:74:21:
                    06:6b:58:20:da:00:a4:e1:76:17:57:92:83:d2:d9:
                    01:02:af:80:10:24:86:e0:0f:55:58:cc:22:87:f3:
                    3d:28:d1:92:b0:ee:43:dd:e9:a7:24:7e:4e:82:b8:
                    fe:24:6d:40:c9:b6:67:d0:c3:56:20:79:67:a9:ef:
                    0d:d2:b4:a9:e8:8b:c9:5b:11:c5:a5:73:ea:18:03:
                    17:1c:64:5a:cb:4a:42:35:2f:80:78:9d:41:16:a7:
                    4f:d6:c3:d0:aa:cc:81:50:b8:4b:f5:19:58:fe:1f:
                    fe:1f:c8:8b:40:78:2b:0f:ff:b0:d3:4a:1e:6f:c5:
                    e1:c7:8a:2b:67:9d:a6:88:63:14:63:79:3c:4c:09:
                    c6:74:20:ec:42:86:9f:b8:25:79:18:be:74:9e:ef:
                    61:16:57:d6:ac:7c:1c:3e:3a:3c:25:ef:7d:62:d3:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D9:13:18:A6:1C:03:7A:7E:B8:8D:0A:8F:71:BF:8E:78:9B:3C:8D
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c8:38:fc:66:c5:65:3e:d8:fc:d3:9e:14:3a:f6:a5:7d:81:
         0a:50:b3:bc:d0:9e:1f:65:3a:23:07:9b:d2:b7:9a:6c:96:23:
         38:ee:a0:c4:15:65:06:0d:3c:6d:38:78:0a:77:a8:15:a8:da:
         e5:b4:1d:40:81:3d:63:f5:4d:a6:ac:8d:98:9c:e8:c8:28:b6:
         95:2a:07:1c:3c:e6:a5:a7:fc:a8:82:14:0f:98:73:6c:a1:fc:
         d4:53:ea:32:d3:7a:36:62:6d:5c:8a:82:01:55:10:03:e6:c2:
         1d:63:c8:68:df:14:28:e8:60:63:ae:de:6b:f4:63:c2:c0:cd:
         bd:cd:f6:c9:33:91:10:a2:a9:90:e0:9b:b3:c2:09:78:2c:2d:
         88:fb:22:dc:4c:7a:72:2e:94:a0:3c:c1:15:98:19:7d:d8:35:
         bb:ef:c9:b2:81:cb:89:44:5a:3a:2f:1b:65:07:37:df:f3:46:
         ce:b3:49:fd:b8:1f:84:15:57:21:fb:c4:ad:25:c2:e0:43:83:
         74:8c:dd:9b:c0:13:6b:ec:7d:80:67:0a:a0:73:9f:c8:0d:e0:
         b9:01:b5:ba:6b:39:d0:57:82:0a:d0:f1:57:48:d7:95:d1:2a:
         1f:84:7f:ed:1b:69:0d:cb:ab:5a:41:bb:ab:27:f7:1b:72:25:
         5c:98:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:06 2026 by rpki-client