Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File:                     wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier:          r243IJ8+WEcMC7km88t2egYbn1pVAn/kNQ8vx6VRMF0=
Subject key identifier:   AD:57:A7:D5:55:08:10:6D:C5:B0:B1:67:47:9F:CF:51:43:B5:7A:C2
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer:       /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial:       019EB921E8E41DB88F5B104F21AA7E2878A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number:          18AD
Signing time:             Fri 12 Jun 2026 00:01:07 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:07 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:07 +0000
Files and hashes:         1: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (hash: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g=)
                          2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: Y6k7r2AtAsP51vCgcIHnjzy8PeU2rPxC6xq2KR5Ju5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:e8:e4:1d:b8:8f:5b:10:4f:21:aa:7e:28:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
        Validity
            Not Before: Jun 12 00:01:07 2026 GMT
            Not After : Jun 13 00:01:07 2026 GMT
        Subject: CN=ad57a7d55508106dc5b0b167479fcf5143b57ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:b2:89:79:c3:f7:ed:58:3f:5e:cd:54:65:
                    36:8f:ac:84:cb:ab:6e:14:54:25:05:8c:79:7e:e9:
                    13:3d:7f:8e:db:af:22:0a:21:78:b4:68:31:df:0c:
                    e6:43:0e:a9:64:26:3c:a4:31:91:68:61:37:54:5e:
                    fd:3d:d1:ad:64:1e:c6:34:6c:16:82:b6:c9:3e:21:
                    c3:af:ce:e2:65:77:8e:04:37:11:6c:ca:fb:cc:63:
                    50:a0:86:51:c0:7d:02:c2:bb:17:e6:e2:29:b4:47:
                    ca:be:cc:e4:7f:aa:ac:09:b1:38:13:11:5d:88:e8:
                    21:7c:a2:2e:cd:3d:63:d6:e3:ac:af:84:ae:21:93:
                    ab:7d:31:65:cf:ac:0b:90:a0:c8:79:24:bf:23:23:
                    f0:e7:ce:15:b2:49:f0:d3:95:70:c1:06:93:d7:95:
                    c0:10:f3:c6:15:6b:39:57:6e:ea:5d:58:6c:ec:5e:
                    53:37:a8:28:9e:15:12:38:97:63:39:9f:bb:e3:44:
                    1d:c9:e8:77:c8:59:31:8d:79:52:d4:01:45:c7:3f:
                    98:40:ae:4f:89:c8:2b:95:fd:95:da:6f:2e:ac:59:
                    6d:e7:15:cb:bf:d8:2c:9c:9b:0c:27:66:1b:3b:86:
                    36:f4:dc:c0:99:26:25:d1:c9:20:22:60:d0:c0:6e:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:A7:D5:55:08:10:6D:C5:B0:B1:67:47:9F:CF:51:43:B5:7A:C2
            X509v3 Authority Key Identifier:
                keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:44:1b:c8:9a:b2:33:eb:28:43:59:85:cf:4c:f4:ab:87:ef:
         ae:95:90:ae:17:50:89:c6:fb:6f:76:fb:55:78:4c:04:2d:5f:
         70:54:b8:19:7f:1c:2e:83:dc:da:45:b7:18:8c:67:ba:73:3d:
         24:3f:e8:ac:1a:8f:49:83:8a:0b:de:30:f1:3b:12:32:66:44:
         85:1a:f8:f9:b5:2d:34:3b:c8:fa:45:7b:f5:b7:8b:c3:90:43:
         5d:cd:bf:f3:ef:74:56:73:dd:0c:0a:38:c2:f7:e5:a1:38:c4:
         f3:b5:a8:5b:9f:e5:38:01:08:a5:2a:c7:66:f2:78:c6:e6:59:
         4d:71:74:19:aa:39:fd:17:16:8b:25:9e:d1:34:82:0a:fc:79:
         bc:06:4f:a8:89:34:6f:99:54:2d:e2:52:28:80:27:a6:69:84:
         ef:ff:12:48:bc:da:f8:ce:3a:18:e1:dc:be:04:35:70:e8:49:
         5c:d5:ae:e8:c2:fb:05:a2:90:b7:6a:51:9f:f1:13:0c:3a:cb:
         8f:c2:bc:b9:da:7e:ac:dc:60:bf:1d:71:6e:51:b4:6e:34:a2:
         ad:57:00:20:d3:60:dc:41:93:3f:f6:77:ee:ff:d6:2a:b4:13:
         bc:a9:f1:c7:c5:10:a6:e2:06:02:51:6b:35:da:65:38:00:0d:
         f2:12:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:43 2026 by rpki-client