Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
File:                     W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json)
Hash identifier:          pXLUdTZjE5Ps0VhFehgVmhVeFwkhtBmRnS+dOyfHPnA=
Subject key identifier:   9B:E5:70:5C:18:4A:73:E5:F0:92:C3:12:58:0B:FD:C5:77:97:E1:3A
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Certificate issuer:       /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial:       019EC4B780ECD0A650C6719FAE9B3AF42067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
Manifest number:          18FD
Signing time:             Sun 14 Jun 2026 06:00:20 +0000
Manifest this update:     Sun 14 Jun 2026 06:00:20 +0000
Manifest next update:     Mon 15 Jun 2026 06:00:20 +0000
Files and hashes:         1: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: VrqD38ltxeV5SjHJpWYOBSxYL++mlWdRP2+kkOKyDg8=)
                          2: iWfVpt8qyWupkH9yoatFfGG_2CI.roa (hash: l0XaFspVIh+Z8KH4+tmuHJwuVwG7HsPB3cPIWpVhJAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:b7:80:ec:d0:a6:50:c6:71:9f:ae:9b:3a:f4:20:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
        Validity
            Not Before: Jun 14 06:00:20 2026 GMT
            Not After : Jun 15 06:00:20 2026 GMT
        Subject: CN=9be5705c184a73e5f092c312580bfdc57797e13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:b5:c5:0b:e1:92:10:71:76:61:b6:a4:29:
                    b0:9a:68:84:95:73:bd:65:35:b4:c7:7e:df:82:b0:
                    41:49:c6:62:38:7b:36:4c:b4:ab:f7:2a:aa:04:c0:
                    d4:6e:2e:82:7a:82:cb:23:2a:b7:1e:c5:30:f9:54:
                    5a:1c:97:9a:6b:38:5b:2e:ce:fc:9e:7d:c7:14:ba:
                    36:43:7a:39:59:e1:39:69:7a:5f:86:05:e1:27:74:
                    3b:72:fd:66:a1:1f:5d:d7:66:d3:f4:30:a9:3a:02:
                    78:da:4e:15:f5:42:55:f3:fa:50:59:c4:a8:2e:c4:
                    0e:b6:d4:00:8e:78:93:a9:d3:68:4c:15:23:2e:0a:
                    ca:2c:cd:78:70:f0:3e:18:64:30:40:70:c9:b9:66:
                    f2:09:a4:15:36:7d:86:2c:6d:a5:89:a5:ab:46:e0:
                    b9:d7:1b:6d:17:2c:d7:8e:5f:52:84:ee:99:78:3b:
                    80:c8:cf:a5:a4:68:ce:0f:15:70:6e:c3:bb:b1:dc:
                    a7:6d:6d:fb:49:a2:3f:3a:e1:1a:c3:7d:7e:82:a5:
                    7c:d9:c6:aa:c8:af:47:b2:10:6d:3d:f0:60:b2:6f:
                    1a:dd:85:8a:96:5d:54:10:1a:c9:2d:a0:e4:cc:de:
                    11:e6:ff:bb:29:65:ea:9a:af:be:ad:d8:84:bc:79:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:70:5C:18:4A:73:E5:F0:92:C3:12:58:0B:FD:C5:77:97:E1:3A
            X509v3 Authority Key Identifier:
                keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:05:eb:74:53:3e:b5:ad:f9:bb:07:04:35:f6:ed:d6:5f:0e:
         72:45:a9:28:f3:fe:a5:09:03:ae:33:ed:6a:b4:b1:05:83:c8:
         d1:0c:e0:13:b1:e1:da:f1:e8:84:d4:87:4f:f6:c7:4a:c9:c8:
         d4:28:a3:7b:3d:ef:60:af:a1:ed:55:5f:0d:57:f1:74:dd:62:
         25:89:91:8e:48:4f:fb:2c:27:03:a3:51:c8:3c:09:37:e3:db:
         c0:f7:1b:61:4d:ce:10:6c:af:d2:59:8b:47:e9:26:49:0b:59:
         8c:f4:b2:ef:bd:ac:9d:63:84:84:ab:27:c3:3c:46:70:0e:3e:
         a6:1d:2f:1d:8c:05:64:a6:08:fb:d5:91:fe:cd:3d:49:45:8e:
         95:03:6d:6d:86:bb:3e:10:0a:da:f2:ba:cc:f6:82:86:00:b7:
         76:0b:2d:17:5a:b9:a6:01:90:af:07:21:41:f2:45:7a:19:bc:
         b0:1c:7e:e4:83:43:be:8f:b1:22:7e:30:17:60:e1:80:a7:21:
         92:52:f9:77:dd:bf:2f:65:0f:8c:22:f6:e1:df:29:31:2f:33:
         80:c5:01:ca:b5:32:a3:c2:05:7e:20:1e:8e:fb:44:fb:3f:32:
         30:98:5c:65:59:88:5f:84:68:29:50:67:78:41:50:46:82:d5:
         81:53:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:10:35 2026 by rpki-client