Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          vFjozB2oDCflhAaQ+yWV2mUmvuI5rae4PX89N+0YrpE=
Subject key identifier:   CD:FA:94:33:D5:83:A6:75:79:87:B8:CB:24:9A:F8:C5:51:8C:FF:45
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       019EF9837ABF5E22B3A63108456CB62C1146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          04D1
Signing time:             Wed 24 Jun 2026 12:03:23 +0000
Manifest this update:     Wed 24 Jun 2026 12:03:23 +0000
Manifest next update:     Thu 25 Jun 2026 12:03:23 +0000
Files and hashes:         1: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (hash: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0=)
                          2: 3lscwPyVq0HwpYOhe1qOH376GbY.roa (hash: ABURxSq0W7iaabEt0YGRwE5xtvDmIVi3eCKYaDM6tzo=)
                          3: AnOV32OnLS7vzP0Ic_vNsSbH3VU.roa (hash: 2+tbTXLyonVPPU5Qc4ONeo44MFYnrVJPmBUJMwxiq4M=)
                          4: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: fGv1Gfj7xgml+qe6sxe5j493w3RulscQySiogDxPcBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 12:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:83:7a:bf:5e:22:b3:a6:31:08:45:6c:b6:2c:11:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: Jun 24 12:03:23 2026 GMT
            Not After : Jun 25 12:03:23 2026 GMT
        Subject: CN=cdfa9433d583a6757987b8cb249af8c5518cff45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:a6:9a:3c:db:21:7f:bb:86:3d:1b:03:36:
                    a7:2f:11:35:40:56:f2:eb:f9:1b:6d:27:38:b1:3b:
                    b7:f2:64:c3:f0:35:0b:f1:96:69:47:74:f5:95:73:
                    e2:46:e7:f0:3e:30:19:63:ca:8a:32:67:42:a1:56:
                    fb:5d:dc:67:92:92:30:af:31:3f:9b:77:f6:4d:1b:
                    ab:91:65:8f:f1:cd:5c:49:4c:32:17:0b:c0:4d:e5:
                    e7:0b:08:68:ef:bf:88:83:66:a2:d0:c5:ab:dd:75:
                    9b:6f:f9:06:d7:e2:4c:fb:9b:4d:f8:21:5c:04:c0:
                    66:3b:48:34:98:f0:1e:24:7b:04:85:73:ac:c1:31:
                    68:d0:60:79:eb:d1:6c:f1:17:e4:51:fc:32:3e:5e:
                    72:fc:e9:cc:3a:15:d0:9e:dc:f6:02:09:55:5b:19:
                    9e:44:84:2d:b2:43:e5:74:01:96:98:6b:3a:36:e7:
                    b0:e7:37:57:7b:cd:33:30:bd:e2:83:62:91:6f:f7:
                    67:02:41:7f:46:ef:87:2d:3a:85:8e:9d:0d:f2:27:
                    77:67:8e:25:65:17:7f:89:1c:2b:ad:be:cc:b8:40:
                    2b:44:78:69:55:c1:ff:54:98:59:17:de:43:ea:c7:
                    5a:7e:05:29:bb:a6:f8:6e:6e:d3:d0:7e:1a:5b:8e:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FA:94:33:D5:83:A6:75:79:87:B8:CB:24:9A:F8:C5:51:8C:FF:45
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:8e:a5:04:3c:af:0f:ff:83:00:98:2a:4c:14:be:b7:01:
         29:e0:53:38:3a:45:fe:cf:b5:75:de:49:5a:81:c8:75:49:7b:
         68:ad:49:2e:df:b2:8a:18:54:9f:61:d1:28:5d:13:69:c7:8b:
         49:40:d8:fa:a7:01:96:70:7a:8c:14:44:b0:09:00:01:c0:ae:
         6a:39:4c:03:90:8c:2d:21:4d:1f:21:82:a8:16:1f:44:46:ef:
         85:0f:b5:79:e5:a3:a3:99:32:23:07:f4:a4:e9:3b:47:50:a2:
         94:85:c0:dc:4e:17:aa:8d:46:99:74:d5:e7:f4:ff:6d:3a:ac:
         7c:d3:83:c2:34:99:2d:9a:a1:79:45:e4:fa:da:e5:9e:c4:d7:
         d2:8f:c7:b4:31:17:a5:8b:e9:10:fb:d5:0b:b9:4c:05:6c:d1:
         f4:d4:fc:39:7f:06:00:89:32:e0:d0:ab:6f:a5:47:2f:da:75:
         bb:ea:39:e1:20:98:99:b2:92:f8:96:99:e7:6e:f8:8e:fa:58:
         50:fb:32:9c:f8:86:e7:37:44:1a:61:e4:9b:ad:e6:3a:0b:d2:
         01:7f:69:86:54:48:e8:91:91:8a:0b:91:e5:55:ba:b0:84:9a:
         f7:92:94:22:2a:ae:95:21:1d:68:f5:bc:9b:3a:7b:f1:9c:0f:
         22:d1:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:16:59 2026 by rpki-client