Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File:                     WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier:          A+RiDL7pOqPJA6UP85s8n9GbKcZtAmGyZcMkECoWsVU=
Subject key identifier:   DD:F0:AF:59:8E:4B:F8:CF:E9:6A:3A:43:2F:60:61:CD:22:DE:03:6B
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer:       /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial:       019EDB407C7B28A86E744E139463ED64C765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number:          04A3
Signing time:             Thu 18 Jun 2026 15:01:36 +0000
Manifest this update:     Thu 18 Jun 2026 15:01:36 +0000
Manifest next update:     Fri 19 Jun 2026 15:01:36 +0000
Files and hashes:         1: DrL-3puYiO1XcvOHU3z8CMJINeA.roa (hash: cuMSInirqa12rGsZAI3BCtXNacI0/0nGWC9/J3U/TsU=)
                          2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: dKPOTEK0msrfCpwosd15QfdzTNSFeIwNQccGUoGkfuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:db:40:7c:7b:28:a8:6e:74:4e:13:94:63:ed:64:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
        Validity
            Not Before: Jun 18 15:01:36 2026 GMT
            Not After : Jun 19 15:01:36 2026 GMT
        Subject: CN=ddf0af598e4bf8cfe96a3a432f6061cd22de036b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:e2:1c:42:ae:29:10:73:3c:68:8f:07:66:
                    f8:44:0f:4e:57:3f:39:f5:e6:38:fe:42:dc:67:47:
                    ce:90:f9:65:f6:c3:13:fd:6a:61:0c:f8:57:8f:59:
                    5b:18:8f:29:e0:c9:ae:6b:8a:5d:61:de:5e:6a:31:
                    7e:8d:1a:c6:ae:a7:5e:0f:13:82:e6:44:a8:28:bb:
                    77:b9:c0:61:30:1d:2a:84:ad:5b:98:2b:8e:c1:2b:
                    5f:56:04:e7:8d:47:63:d7:2b:f3:73:27:00:72:74:
                    8e:de:f6:8e:1e:3d:e1:35:cd:11:3d:2c:36:d6:d0:
                    b3:27:97:a1:d3:4f:a0:cb:20:c9:ad:d5:2d:08:82:
                    79:fe:fc:5b:a6:49:01:d3:62:4e:91:33:b0:f1:68:
                    d0:7a:a6:e1:af:fd:67:00:1b:fd:10:04:36:5c:08:
                    0c:70:d5:5c:12:e0:14:c7:03:57:f6:a0:b2:47:e5:
                    c8:86:68:a4:55:1d:e8:cc:d8:8c:bd:a8:e5:dd:c2:
                    8f:6f:37:15:5e:58:49:e9:db:4e:c7:27:4d:25:ce:
                    ec:c7:55:77:f6:c6:3b:d5:a9:fc:69:f8:cc:06:a1:
                    3d:df:52:d5:e6:29:f7:87:75:42:35:4d:ad:7f:eb:
                    36:61:0b:05:d6:63:66:27:40:34:54:44:ec:10:f8:
                    1e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:AF:59:8E:4B:F8:CF:E9:6A:3A:43:2F:60:61:CD:22:DE:03:6B
            X509v3 Authority Key Identifier:
                keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:e5:ec:de:b6:a9:55:08:da:33:55:a9:07:07:15:ae:be:
         a4:d4:3b:fb:2b:87:11:ab:61:4d:e0:89:f9:63:5d:a1:c5:ad:
         6b:71:44:ee:98:cb:a4:4e:73:b2:db:98:10:6c:65:b1:ca:98:
         1c:4b:f1:b1:2f:0e:8b:23:89:6f:05:dc:27:a4:35:85:bc:3b:
         53:0f:a5:31:7a:5e:83:d3:15:f9:ae:4d:85:23:f9:55:bb:34:
         34:44:9e:3c:b6:3b:e4:44:76:f6:f5:0c:9c:4e:9b:96:b8:47:
         19:1d:30:d6:52:fc:3d:fc:6b:d3:67:62:eb:75:a0:00:19:b1:
         70:86:fe:5e:c9:82:09:21:e4:9c:dd:2b:b4:f3:89:9e:bc:e6:
         6d:f7:33:04:fd:7a:15:48:a8:ec:65:16:e8:2d:7b:25:09:67:
         9c:75:90:21:0f:95:1f:86:70:22:11:3b:55:b5:8d:5e:3a:99:
         a9:e2:a9:e5:0b:21:2c:a5:2e:df:fb:bf:5e:0e:54:9a:3d:a8:
         9c:78:d0:15:69:0e:d6:b4:bd:f7:b6:52:0a:91:09:37:7e:d3:
         03:c8:d5:d8:e8:96:2d:cd:bd:64:37:bf:c9:ec:50:59:15:a1:
         14:44:79:fd:d1:07:da:50:11:9c:f9:30:6b:a9:c0:d8:84:e3:
         c7:b2:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:21:06 2026 by rpki-client