Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File:                     CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier:          yfKS9Eg56DMOJnpsZISDpkWpLgsn1YodSiyS4B5XVk8=
Subject key identifier:   01:18:88:ED:01:DF:45:5C:82:63:2F:D3:0A:30:50:66:F3:47:E6:BC
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer:       /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial:       019EBEB5C858719365CAC1CB2DA7F7541C63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 02:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:44 +0000
Files and hashes:         1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: J8zTCD/ap2u3YIwHk87MZ6DvpbkjKgUmJdsk3W/mAV0=)
                          2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
                          3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:c8:58:71:93:65:ca:c1:cb:2d:a7:f7:54:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
        Validity
            Not Before: Jun 13 02:00:44 2026 GMT
            Not After : Jun 14 02:00:44 2026 GMT
        Subject: CN=011888ed01df455c82632fd30a305066f347e6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:9b:37:f5:ba:53:5d:1c:e0:c6:5a:96:f5:
                    7a:4f:65:59:21:5f:5d:da:f9:e4:13:90:13:57:f1:
                    15:2c:64:aa:cc:1c:d9:d9:a2:01:ae:b2:26:2a:cc:
                    52:9d:9e:59:53:3c:26:df:d2:87:09:b7:99:0e:34:
                    09:44:45:ec:6b:4b:d9:c3:84:92:a1:a0:dc:45:3c:
                    a4:f6:ec:cd:81:88:fe:df:b2:7a:e6:e3:5d:96:4b:
                    09:ff:2e:a9:45:c7:09:8c:e1:b5:b3:4f:59:ba:4b:
                    b2:60:2b:50:3a:41:34:c5:8d:45:b1:bd:9d:96:08:
                    03:78:10:40:96:36:c6:bf:e4:53:84:92:b7:8a:57:
                    bf:e4:76:93:c1:df:bd:ed:37:14:85:d7:b2:2f:0d:
                    a5:7c:7c:13:2a:b9:86:85:69:9d:d9:3f:cc:10:ed:
                    dd:1d:65:6c:6b:e4:84:28:48:c6:d3:da:79:25:c0:
                    03:e9:7c:57:fb:9f:aa:4d:45:5b:37:51:55:99:c8:
                    37:8d:c8:24:00:56:76:d8:77:ec:4d:d2:a9:91:1e:
                    eb:6e:1c:f2:f2:ad:ca:57:4f:e7:19:16:3d:13:c9:
                    ca:d5:09:81:d7:b9:2d:b0:58:ee:a8:93:15:52:12:
                    21:84:43:26:f2:f3:cb:13:c8:d6:8e:67:25:1c:35:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:18:88:ED:01:DF:45:5C:82:63:2F:D3:0A:30:50:66:F3:47:E6:BC
            X509v3 Authority Key Identifier:
                keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:8d:23:ad:8a:40:34:5b:5a:9b:a0:cf:50:db:6e:06:46:
         eb:0a:08:6d:e6:4d:9b:cf:59:cf:db:a0:c7:9f:92:37:14:fe:
         35:d7:af:e0:da:26:03:af:ec:ed:2d:b9:07:0e:a9:52:53:e0:
         a3:da:a5:28:a1:f3:31:74:5b:9f:bb:1e:53:40:3d:21:0b:15:
         cc:5b:03:d6:68:03:45:8a:9f:3d:3e:b3:0a:df:72:81:9b:00:
         88:42:9a:35:bc:97:1d:2b:27:3e:4c:bd:55:b7:0b:fd:24:37:
         a6:be:e8:f1:37:06:7f:f3:41:af:db:9f:f5:da:b7:86:4d:0d:
         27:67:35:76:82:8a:a9:de:cf:f4:d9:43:8f:e6:ef:93:99:26:
         d7:25:9e:0c:0d:40:5b:6e:6e:95:1c:13:a7:50:73:6d:81:6a:
         de:6e:db:e5:36:b3:83:f9:95:79:e5:ab:89:5f:a1:49:84:21:
         07:80:98:df:d1:cf:b5:3b:47:3c:9d:ff:02:0e:73:81:ea:52:
         ec:68:d0:54:ca:9d:22:1b:36:a7:a9:97:ba:19:44:34:29:16:
         b7:30:47:f7:dc:91:76:12:70:0b:6d:cb:fe:ca:83:b1:59:9d:
         da:0a:66:50:c4:65:58:79:41:ad:c1:f3:ac:94:1a:1b:a9:ea:
         09:e9:3b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:18 2026 by rpki-client