Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          nTNsCx0uDRiQck9BEiPb9J5gRsfN6OatikEJWYfLvWg=
Subject key identifier:   7F:90:57:9D:0F:4C:F1:01:29:4A:03:86:37:F1:FC:E1:BB:0A:10:71
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       019EBFFFB4DE6DAACBD4B254474E7720E81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          0460
Signing time:             Sat 13 Jun 2026 08:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 08:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 08:01:06 +0000
Files and hashes:         1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=)
                          2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: pz8N4g37zfsBB+bMIdu47in383QXE5aQwwrLlH48+xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:b4:de:6d:aa:cb:d4:b2:54:47:4e:77:20:e8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Jun 13 08:01:06 2026 GMT
            Not After : Jun 14 08:01:06 2026 GMT
        Subject: CN=7f90579d0f4cf101294a038637f1fce1bb0a1071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:42:b3:84:46:7c:6a:93:26:46:b0:c5:6f:
                    63:1b:f2:72:d7:a9:75:b5:ed:b1:48:57:01:46:e7:
                    5f:e9:d8:fb:35:2c:1c:18:45:33:33:15:b3:67:2d:
                    79:e1:53:41:d0:50:d9:5b:77:a7:9f:92:89:71:9c:
                    e5:7d:1c:ee:14:4a:b2:19:ef:34:26:27:05:81:ff:
                    0b:a9:ec:30:81:d8:39:0c:a2:16:11:04:06:95:23:
                    35:ec:bb:be:05:13:d2:4a:61:84:8e:d6:28:48:52:
                    84:01:12:d6:26:c3:23:67:5d:ba:91:0d:2e:92:71:
                    bd:3e:57:b0:46:f9:bd:50:77:0b:00:6f:e2:74:d3:
                    d8:16:f6:e9:5a:75:a3:ae:47:d0:a1:82:f7:7f:d4:
                    76:95:4c:b9:f8:75:79:10:36:6e:80:98:25:a0:8f:
                    de:3c:d2:d5:11:26:ff:2a:26:78:d7:97:9c:fb:1b:
                    64:19:a9:4b:63:55:3f:f0:6e:ed:8c:1f:6b:12:83:
                    85:f1:b8:88:71:e7:18:a2:96:e5:28:5a:b4:e6:4d:
                    6d:75:2c:fb:61:68:3a:38:72:9d:b2:0a:1c:66:30:
                    39:48:e4:7a:6d:33:b5:b1:cb:dd:61:2e:db:2c:e7:
                    ea:88:24:f0:7b:e8:4e:6c:ca:cb:06:c5:b1:60:f8:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:90:57:9D:0F:4C:F1:01:29:4A:03:86:37:F1:FC:E1:BB:0A:10:71
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:33:b3:42:36:2c:87:5b:ae:60:8f:67:4b:9e:c7:56:7d:
         c5:89:9d:fd:fa:60:d9:fc:96:cd:af:d9:0a:c0:da:8b:17:bc:
         0f:89:99:ca:ad:f6:ed:a5:eb:64:65:23:6d:52:ac:fc:89:c0:
         68:23:04:c4:3a:b8:85:f6:89:e7:e5:25:75:f2:8c:7e:63:8f:
         d7:a8:b8:a9:aa:f5:1d:67:4e:0d:ff:fc:90:21:ee:d3:52:4c:
         95:f0:40:45:3c:ea:5e:6e:d5:bf:58:80:a4:9b:63:fd:3c:70:
         22:be:46:1c:42:2d:44:6a:ea:bd:74:3b:42:a3:e8:36:79:0b:
         a5:86:f2:c3:4c:4c:e6:09:c5:b8:42:11:38:da:56:f1:b8:18:
         c5:ec:cb:0d:fe:5a:b5:48:f6:f7:4b:45:03:1c:03:6d:75:02:
         c1:7c:45:7f:2f:47:e2:cd:65:3a:0d:82:54:f9:9b:2d:b4:49:
         39:23:c5:37:1f:00:2f:9f:c3:b3:27:83:cb:3d:50:de:69:ab:
         80:52:a4:45:23:5d:64:c6:8f:32:cc:43:83:6a:59:f5:f6:e9:
         6a:42:0e:7e:e2:2b:f8:b3:59:3d:13:1a:24:8c:9d:87:4a:a0:
         40:60:f2:e9:ae:8d:17:fe:c8:40:1a:c0:64:6e:c1:ae:bf:02:
         da:32:54:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//7TebarL1LJUR053IOgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjUyOGRjMDc1ZDUxZTczZWUwZDA5MGUxZDJhMWY1Y2Zh
ZThmZmIwHhcNMjYwNjEzMDgwMTA2WhcNMjYwNjE0MDgwMTA2WjAzMTEwLwYDVQQD
Eyg3ZjkwNTc5ZDBmNGNmMTAxMjk0YTAzODYzN2YxZmNlMWJiMGExMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpFCs4RGfGqTJkawxW9jG/Jy16l1
te2xSFcBRudf6dj7NSwcGEUzMxWzZy154VNB0FDZW3enn5KJcZzlfRzuFEqyGe80
JicFgf8Lqewwgdg5DKIWEQQGlSM17Lu+BRPSSmGEjtYoSFKEARLWJsMjZ126kQ0u
knG9PlewRvm9UHcLAG/idNPYFvbpWnWjrkfQoYL3f9R2lUy5+HV5EDZugJgloI/e
PNLVESb/KiZ415ec+xtkGalLY1U/8G7tjB9rEoOF8biIcecYopblKFq05k1tdSz7
YWg6OHKdsgocZjA5SOR6bTO1scvdYS7bLOfqiCTwe+hObMrLBsWxYPj1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+QV50PTPEBKUoDhjfx/OG7ChBxMB8GA1UdIwQY
MBaAFFslKNwHXVHnPuDQkOHSofXPro/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYt
YzI5NDEyMTRjYjk2LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYtYzI5NDEyMTRjYjk2
LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqozs0I2
LIdbrmCPZ0uex1Z9xYmd/fpg2fyWza/ZCsDaixe8D4mZyq327aXrZGUjbVKs/InA
aCMExDq4hfaJ5+UldfKMfmOP16i4qar1HWdODf/8kCHu01JMlfBARTzqXm7Vv1iA
pJtj/TxwIr5GHEItRGrqvXQ7QqPoNnkLpYbyw0xM5gnFuEIRONpW8bgYxezLDf5a
tUj290tFAxwDbXUCwXxFfy9H4s1lOg2CVPmbLbRJOSPFNx8AL5/DsyeDyz1Q3mmr
gFKkRSNdZMaPMsxDg2pZ9fbpakIOfuIr+LNZPRMaJIydh0qgQGDy6a6NF/7IQBrA
ZG7Brr8C2jJU2g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:14:25 2026 by rpki-client