Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          3KbVLyY8xdxjUrOQj71Gskgw6mzwpYgir/fbR6XwQXs=
Subject key identifier:   44:19:BD:A7:A4:21:5E:46:EB:8C:18:FA:95:66:16:91:4D:EC:84:C2
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       019EBE47CEEB241A437F2C196CB9CA57BD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          0D45
Signing time:             Sat 13 Jun 2026 00:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:37 +0000
Files and hashes:         1: 7r4lRPQc-QTSmeOcUsrSRcjkV4c.roa (hash: OocvrP+x2oNsYStihaud30OWGNdq9vGwzjAJqLEWJFg=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: QSNXpG84pyPgSeBaQD/7qjkTZ2rPdO/UokZ3NwLtUQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:ce:eb:24:1a:43:7f:2c:19:6c:b9:ca:57:bd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Jun 13 00:00:37 2026 GMT
            Not After : Jun 14 00:00:37 2026 GMT
        Subject: CN=4419bda7a4215e46eb8c18fa956616914dec84c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:e4:bc:5e:1b:1c:1d:42:45:34:aa:fe:e8:
                    d3:a4:97:e4:89:c0:1b:0b:66:fd:fe:a4:16:21:a3:
                    e2:dd:70:66:57:8d:ac:d2:b3:8c:ad:4a:20:4b:59:
                    45:91:ce:69:3e:1c:20:ce:f3:5e:87:a5:1c:44:44:
                    68:52:f1:be:ab:cc:e1:9a:0c:22:ce:08:09:85:20:
                    05:4b:a0:2d:08:e5:e6:4a:a7:7a:6d:54:8b:62:89:
                    fa:d8:81:a6:e1:8b:75:25:ac:5c:2f:67:fc:17:94:
                    e3:2c:a0:ca:d0:a1:25:5e:21:0b:ba:5d:62:c6:62:
                    21:f3:da:f6:5b:b6:f3:d8:78:98:86:42:5e:39:93:
                    5d:da:6b:c5:e8:df:d7:a6:ef:e9:28:07:66:b4:38:
                    9b:32:ed:78:52:63:89:12:9d:68:e9:18:e6:3b:ae:
                    54:1d:b1:71:6b:f2:c3:90:7e:be:e3:43:5e:fb:42:
                    36:bb:88:df:9d:88:cf:03:e6:7b:a6:86:d7:4d:c8:
                    32:8c:52:d7:1b:3b:2a:81:42:d4:8f:bd:ce:db:71:
                    20:3b:51:3f:97:c5:df:89:2f:7e:29:ec:02:2d:a3:
                    36:cd:c0:51:39:99:88:85:c3:fd:6c:b9:4e:20:40:
                    28:3b:e2:dc:82:ec:49:dc:4d:d7:9a:18:62:50:65:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:BD:A7:A4:21:5E:46:EB:8C:18:FA:95:66:16:91:4D:EC:84:C2
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:f8:c2:ea:e4:67:10:c6:ef:e6:28:ad:52:98:48:e9:d1:
         f4:6f:78:a4:db:a0:70:91:a1:7f:be:a3:05:cc:b3:d0:eb:e5:
         42:1b:8a:46:3e:fa:cf:48:ed:11:50:f2:c0:0f:72:42:18:44:
         97:45:cd:52:b3:5f:f9:9b:46:b8:93:99:95:46:00:63:8c:b8:
         06:cc:3f:f1:b9:f2:7a:98:a9:c0:08:ca:69:ee:7e:bc:db:18:
         90:a2:a0:07:76:41:89:67:b7:cd:5d:ed:f9:2b:dd:b3:c6:96:
         57:5c:69:c3:d3:56:9b:7e:86:e9:0f:b9:40:ae:a2:7e:d3:e1:
         e2:08:87:2e:0c:ec:79:d1:18:fb:c4:e2:6c:2a:20:05:4c:15:
         82:cd:aa:66:74:7d:de:74:c8:78:e5:45:f9:19:bb:07:40:4f:
         83:e7:fb:a9:e4:36:d4:eb:2c:2c:7f:46:5a:49:6e:26:3c:2c:
         3b:fc:9d:b1:4d:3a:e8:49:36:bf:50:d7:8f:42:6e:ef:10:1e:
         db:f7:68:a9:0f:c0:eb:f7:0a:24:ce:e4:b5:fd:1f:cf:d8:a0:
         04:0b:5b:4f:86:de:e4:a7:ec:1a:8c:34:c0:96:bf:d0:84:4d:
         3c:9f:80:94:69:be:f1:4b:f4:17:bb:46:b9:cf:97:c4:65:84:
         14:4b:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:11 2026 by rpki-client