Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File:                     WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier:          sWKBxsdQnc5ncjLlF+8vHXUa2tV0JNj8o1A7D02xtkQ=
Subject key identifier:   E4:9D:D1:08:D2:C6:93:96:4E:8B:3D:E7:D1:79:74:F2:D8:42:5B:D4
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer:       /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial:       019EC11189E05159013F3C2595D3852D8870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number:          04C4
Signing time:             Sat 13 Jun 2026 13:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:12 +0000
Files and hashes:         1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: CxHVz+GtbCzRadnGlNcUCI16/UwGKEB4Gge/5KdAS2Q=)
                          2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:89:e0:51:59:01:3f:3c:25:95:d3:85:2d:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
        Validity
            Not Before: Jun 13 13:00:12 2026 GMT
            Not After : Jun 14 13:00:12 2026 GMT
        Subject: CN=e49dd108d2c693964e8b3de7d17974f2d8425bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:be:52:67:3c:d1:51:d8:f5:51:6d:41:f0:
                    60:48:d6:9d:95:22:62:14:54:61:5e:54:c4:c5:ab:
                    6a:88:28:18:a0:46:a5:f1:99:4d:8e:4e:5c:80:5e:
                    57:29:82:3f:fe:91:dc:5a:5e:2c:08:0b:45:c2:87:
                    86:1d:b8:bd:29:71:8f:85:cc:66:91:ee:e5:9c:76:
                    11:d3:a9:02:00:3d:fb:b9:06:95:bc:3c:56:6b:af:
                    fb:bc:53:32:cf:03:fa:45:47:74:c9:0f:4a:89:b7:
                    f5:0c:ae:45:56:91:09:e2:82:30:bb:a6:5f:a9:6a:
                    2e:cf:27:19:95:5e:09:df:bb:1e:d8:6e:d2:95:4c:
                    d3:03:6f:fa:e5:e5:f9:af:e4:c8:c3:55:53:5e:6a:
                    22:1a:d2:94:5a:26:8c:6d:e4:ed:73:5d:8c:2b:c9:
                    e6:e5:09:13:b8:c2:d7:ad:0f:48:28:c5:c0:1d:53:
                    4c:b1:0f:be:08:8a:6b:50:a2:b8:6c:b0:09:fb:a6:
                    79:c0:1d:5d:63:6a:db:67:64:ad:05:9d:a9:57:15:
                    53:77:90:cd:c4:6e:64:d3:07:bf:fd:87:cd:fc:5d:
                    92:e0:c1:48:89:2a:49:6e:82:ce:d1:c0:ca:9a:7f:
                    49:ff:1e:b1:3c:7c:9b:d1:2d:fe:f0:e4:f0:44:9b:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:D1:08:D2:C6:93:96:4E:8B:3D:E7:D1:79:74:F2:D8:42:5B:D4
            X509v3 Authority Key Identifier:
                keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:57:88:01:f9:6c:f4:50:25:dd:4a:81:46:65:f3:51:53:a0:
         fd:4e:76:bb:64:91:88:42:bd:7a:10:33:f6:45:f8:75:65:0a:
         38:83:54:83:2f:85:a8:88:13:f7:42:03:f8:d3:65:a2:cd:e4:
         36:19:2b:c9:6e:ae:70:c3:6f:dd:fb:b0:05:fa:ce:66:90:40:
         5c:e9:22:c7:00:14:3d:30:50:03:31:23:ec:0e:20:18:dc:51:
         3b:ee:2a:44:98:e0:a6:83:27:49:cb:91:c9:0a:bb:dc:26:9c:
         7a:29:56:0b:c7:a1:d4:af:9b:14:78:23:d5:cb:3b:10:19:02:
         77:7f:51:b4:63:08:d9:e0:c8:b9:05:21:66:7f:94:5d:8a:05:
         07:b6:15:9e:cd:bc:ba:55:a4:c4:33:fc:b9:81:65:10:26:87:
         dc:ce:74:f0:e8:7d:3d:9d:d7:3e:46:5c:85:40:26:6a:00:a2:
         98:14:f3:cd:ac:4b:cc:61:4c:83:d9:6e:6f:20:9d:82:93:9b:
         a1:18:f6:52:ad:3a:d3:5d:81:be:68:cc:37:a2:c5:c1:0f:d8:
         f1:17:7f:51:36:c3:34:ae:7c:dd:a8:63:43:b1:17:6a:73:c8:
         d3:88:11:87:e5:fa:43:49:6e:cb:0b:41:14:7c:ef:ac:45:2c:
         c2:3c:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:00 2026 by rpki-client