Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
File:                     WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json)
Hash identifier:          N9eiOK81L/oLsYzergu707DAW7vDVhjgeE2pSu1SjIM=
Subject key identifier:   DD:7A:96:F3:25:A6:08:89:0A:EF:29:BC:30:00:3A:0C:C3:B1:10:C6
Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
Certificate issuer:       /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Certificate serial:       019EBF5A3A2754E18B141B0F7E2FD5BAE05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
Manifest number:          0445
Signing time:             Sat 13 Jun 2026 05:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:21 +0000
Files and hashes:         1: J_yn6Pm9vKNMDRcVwbyp133TknU.roa (hash: mliXlxJfksLfLE++jqaaumKeI12AEMNdDLjQ9GlOQ2M=)
                          2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: uJriVG4lSz/D/pAmc4zZwcYlauQrWctPFSNLKUiG3hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:3a:27:54:e1:8b:14:1b:0f:7e:2f:d5:ba:e0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
        Validity
            Not Before: Jun 13 05:00:21 2026 GMT
            Not After : Jun 14 05:00:21 2026 GMT
        Subject: CN=dd7a96f325a608890aef29bc30003a0cc3b110c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:af:32:82:c2:61:10:7b:48:b0:ce:bf:97:
                    6b:3f:80:5d:ea:55:c6:fb:ae:8e:97:2e:ac:70:aa:
                    26:8f:05:54:e2:e4:e6:b1:88:c5:39:e6:8d:75:77:
                    43:bb:60:b5:99:70:a4:1c:80:61:e0:33:2f:bf:8c:
                    ce:f9:ae:f4:d6:a7:00:a1:3b:e8:bf:f2:b8:21:d2:
                    8d:4b:39:c2:2c:36:c7:24:c2:bb:3a:bb:ea:fa:9a:
                    23:45:80:8a:59:f7:07:ce:6d:9c:c9:99:97:57:12:
                    ac:60:96:84:df:61:41:a3:79:11:64:92:6c:67:29:
                    36:77:fe:55:18:52:a5:01:81:ee:84:18:71:1b:39:
                    6d:04:f4:03:5e:f6:d1:88:ec:05:31:99:34:8d:7d:
                    21:33:72:d3:0d:b6:bc:33:93:59:e0:0b:bd:db:fd:
                    53:2f:60:65:d6:68:3c:30:20:36:e9:69:84:75:51:
                    c2:a8:15:c0:c5:9b:d3:a0:2a:3a:e6:51:27:23:d8:
                    24:84:5f:81:1f:73:3f:93:95:60:ea:1d:91:ec:dd:
                    e2:3f:af:55:c9:3f:92:27:d0:9d:6e:a0:e9:fc:96:
                    b8:2b:b0:18:55:b0:c1:da:d2:71:22:8e:d9:5c:88:
                    ca:da:a4:26:d5:36:86:d4:ea:f0:4f:a0:f6:79:fb:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7A:96:F3:25:A6:08:89:0A:EF:29:BC:30:00:3A:0C:C3:B1:10:C6
            X509v3 Authority Key Identifier:
                keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:98:83:6e:15:ce:93:6a:c7:ed:74:27:bc:59:c9:df:f3:
         ef:fb:fc:c5:3b:74:7d:59:b8:83:65:4b:66:4c:19:0a:61:4c:
         55:d0:08:8d:70:d2:a4:c3:73:14:9e:95:6a:64:93:ca:fe:4f:
         a1:5b:7f:6a:be:86:a0:92:88:98:bc:b5:d9:69:2e:ce:c9:75:
         14:34:b9:27:8b:6d:cf:3b:1f:19:6e:56:94:d7:d9:11:7e:02:
         a1:47:3e:27:9a:83:0a:11:a6:b9:0a:55:46:86:14:f8:d6:bd:
         5f:eb:b0:98:a4:06:03:e7:c5:06:d5:75:30:5a:f2:10:58:7b:
         c4:da:c0:b3:7c:51:66:b3:78:3e:1c:04:cd:7e:93:18:7a:d9:
         0c:70:58:11:51:fa:27:e3:d6:49:98:f4:4c:1e:34:e5:05:cd:
         40:c6:14:74:0f:db:b8:d6:f6:be:ef:93:3a:d6:7e:09:39:75:
         ba:28:24:88:d3:0e:23:90:98:10:1d:47:5a:f4:6f:8a:b5:73:
         bf:10:a5:e7:27:8e:ee:ce:1f:c8:f6:20:9f:3d:9a:dd:50:b0:
         60:c5:a0:be:c5:89:13:d7:4a:08:7d:05:81:9c:b6:5d:26:8c:
         c8:31:b3:86:84:a9:84:a9:5b:44:46:4a:46:a4:89:85:4c:da:
         fe:47:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:58 2026 by rpki-client