Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          dkeEKaPHut+YL5cLIMnbboEphHd+RrpbO1L/0svJPlk=
Subject key identifier:   B9:6E:F8:B9:C7:75:9A:AC:AD:35:84:CB:A9:05:57:F8:42:16:25:5D
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       019EC0A42AF7D62D60AB44DF78E87D322317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 11:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:44 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: 0xm30xFBjc4Uy4efY6aih/6JHdgNd+q2g/8wBeVQLwg=)
                          2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:2a:f7:d6:2d:60:ab:44:df:78:e8:7d:32:23:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Jun 13 11:00:44 2026 GMT
            Not After : Jun 14 11:00:44 2026 GMT
        Subject: CN=b96ef8b9c7759aacad3584cba90557f84216255d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:7b:a2:82:a2:93:0e:3f:de:53:48:ba:ff:
                    87:f1:73:47:b2:e4:7e:65:f7:73:03:9e:73:19:02:
                    6e:7d:e9:0b:82:d0:54:60:c4:aa:55:26:0f:65:67:
                    09:be:a4:7b:3d:82:53:fe:4a:7a:d5:25:0a:70:83:
                    38:93:be:3f:9f:14:1a:2b:2f:fd:88:50:bd:22:f9:
                    31:39:b2:fd:bf:fd:5e:11:f8:87:da:c0:18:da:a7:
                    d0:2f:64:da:53:e3:55:76:bb:0c:47:86:3f:20:66:
                    51:b2:bf:70:2c:66:00:7b:4a:0f:a8:05:55:18:dc:
                    2f:26:3b:68:01:a4:9f:42:60:37:e6:75:5f:71:c9:
                    9f:88:15:90:e4:af:2f:69:4d:ee:4e:56:92:74:2a:
                    a5:86:9f:8b:7b:71:9c:79:77:f5:97:9b:6c:b6:66:
                    a4:e3:53:64:b2:e5:65:07:d6:d5:2e:5e:92:78:31:
                    49:7c:9d:67:07:ee:5f:d9:ad:f8:7b:99:8a:42:23:
                    60:09:e4:d1:78:58:a7:78:a2:e4:6d:cb:54:df:43:
                    24:40:72:2e:5a:7a:3c:29:7a:93:2c:6e:bd:df:49:
                    b1:72:98:5c:e1:db:f3:cd:5f:20:ec:24:d6:7f:1f:
                    4a:67:0d:8b:e7:39:c9:80:74:23:92:4b:04:d5:72:
                    52:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:F8:B9:C7:75:9A:AC:AD:35:84:CB:A9:05:57:F8:42:16:25:5D
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ac:84:0f:b3:af:61:52:38:54:59:d3:40:4d:3e:eb:3c:27:
         15:b6:16:c8:6c:a0:b5:5e:db:36:fa:59:0f:bd:5a:ae:03:33:
         f3:79:99:21:4b:ff:6a:f4:6e:a6:19:6d:5c:6b:7b:ab:0b:06:
         5a:23:fc:3b:a8:c5:6a:17:3c:91:5e:a8:21:12:8d:52:a3:c6:
         a8:81:2b:1c:cb:99:3e:f0:0a:23:43:8c:2b:1f:45:f9:fc:7d:
         16:ce:79:0a:41:d3:06:c3:3d:d6:38:8a:1a:6f:77:e9:83:6e:
         7b:d5:7e:d7:e4:52:ab:21:63:04:fd:45:6e:01:dd:5d:fe:45:
         6e:44:d4:db:90:1e:49:3d:6e:0e:40:c4:d9:f3:b5:7e:ae:65:
         01:ef:b1:6d:36:91:73:43:f2:c6:2f:7c:b2:50:62:93:aa:65:
         e9:dd:43:e8:12:39:c9:c7:6b:3f:cf:ee:da:0d:56:ce:d5:cf:
         4a:4c:61:f9:61:9a:14:1d:63:23:0f:a2:9e:cb:cc:ea:2e:e4:
         47:9d:b1:aa:cc:ec:0d:3c:60:6a:7f:92:a8:ef:fa:64:56:4c:
         a5:e1:9b:1c:f0:18:ce:2e:dc:a5:ad:e0:dd:28:c9:97:01:c5:
         5e:d3:30:98:34:71:64:fb:75:8a:d9:f3:a5:57:4a:e1:08:b4:
         69:49:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:17 2026 by rpki-client