Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          fGb8F7yP5ckYERMKCxnuFbr9IbK9+JtOYdAG/Sr233o=
Subject key identifier:   0E:B4:44:DD:4A:F0:AB:B8:6B:4E:F7:81:E4:9E:F8:87:23:93:E0:5A
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       019EC148E887F48F1B3319728DA01EE71955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          040E
Signing time:             Sat 13 Jun 2026 14:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:41 +0000
Files and hashes:         1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: MAolBwYnNPAL0a32ZCNBRhSL7r7HzA9AVwm6jNZVyPI=)
                          2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:e8:87:f4:8f:1b:33:19:72:8d:a0:1e:e7:19:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Jun 13 14:00:41 2026 GMT
            Not After : Jun 14 14:00:41 2026 GMT
        Subject: CN=0eb444dd4af0abb86b4ef781e49ef8872393e05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:9e:09:5b:bb:f1:af:34:80:7b:67:fe:7c:
                    95:6d:02:e6:05:15:f1:8d:ee:91:2b:92:27:ee:39:
                    40:1c:c1:26:16:f4:16:b3:ad:fe:78:29:7c:69:e5:
                    19:4e:f0:b3:1e:af:be:1f:e5:e0:98:c6:c4:13:b3:
                    f3:c2:a5:7c:15:aa:b5:2b:74:84:05:54:ce:b2:61:
                    06:89:d9:83:82:4b:dd:54:b1:1c:b2:2d:b7:2e:9a:
                    d4:d0:1c:b4:93:51:bd:c0:47:62:9b:9f:a3:a2:fb:
                    cc:e9:74:64:71:8e:d7:5a:06:fa:02:1a:f3:95:c0:
                    46:30:62:ad:90:27:7f:8e:a7:2b:bb:55:e6:98:5f:
                    d3:86:f7:37:6f:99:8b:5e:20:0e:61:3f:4c:a8:73:
                    8a:f3:46:17:6b:56:66:8c:c0:58:68:98:f3:65:38:
                    fa:51:7c:47:66:0f:27:ec:71:c2:92:c9:74:2c:f2:
                    5f:d0:3d:72:db:fd:ba:c7:1f:05:e4:4a:7a:57:2b:
                    64:8d:0b:bd:11:b9:d4:e4:b2:18:89:f7:b4:24:42:
                    92:4d:a8:76:f1:11:19:59:67:f1:dc:98:31:19:f9:
                    86:9a:49:0a:35:64:33:bd:50:fa:47:dd:69:f5:99:
                    7a:04:94:af:fa:1a:61:d7:58:2e:f2:1e:af:53:92:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B4:44:DD:4A:F0:AB:B8:6B:4E:F7:81:E4:9E:F8:87:23:93:E0:5A
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:07:49:e2:da:27:0b:01:ba:82:87:67:1d:4e:9b:a8:55:
         d8:49:4a:58:13:1e:8a:2e:e2:38:ae:67:f4:0d:91:18:45:ba:
         0f:2b:a3:ce:05:60:5d:a3:a0:f9:08:98:c0:25:72:9c:95:cd:
         3b:b5:6a:b0:11:5e:8b:43:49:24:23:37:f8:d7:85:b0:81:f1:
         4d:80:54:53:37:76:d4:af:ca:2d:8f:5e:bc:27:48:4e:98:36:
         65:21:44:1d:41:ae:43:7f:c5:f8:77:a0:13:d5:53:db:8e:1a:
         d7:f0:5d:3e:40:84:20:4b:bc:c1:b8:3e:22:d7:d3:bc:d5:df:
         e8:24:be:a6:47:9d:be:c3:ab:4b:1d:6c:c7:a7:e0:6c:da:20:
         24:61:9a:9c:00:38:07:da:59:78:1a:8d:cb:ec:a5:5d:ba:b5:
         35:bc:d1:92:6a:5f:cb:f5:fb:84:9d:6b:84:0f:ea:10:bd:c3:
         8b:3c:70:38:c1:8e:32:48:19:53:6c:09:6d:19:8f:33:b8:47:
         62:48:fe:c1:dd:61:65:79:2b:61:57:40:54:6e:ed:c7:ef:13:
         31:25:7d:e2:04:0d:23:8b:ff:f7:98:60:ef:bc:cb:4f:79:8e:
         f1:ba:09:9c:86:e7:09:95:58:f7:cf:c2:42:48:53:43:1b:80:
         94:d8:e0:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSOiH9I8bMxlyjaAe5xlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOGIyNmM1MzJmYmM1MmI1ZGU2NzJhYjM1NzYxZDFjN2Q5
N2ViMjYwHhcNMjYwNjEzMTQwMDQxWhcNMjYwNjE0MTQwMDQxWjAzMTEwLwYDVQQD
EygwZWI0NDRkZDRhZjBhYmI4NmI0ZWY3ODFlNDllZjg4NzIzOTNlMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfSeCVu78a80gHtn/nyVbQLmBRXx
je6RK5In7jlAHMEmFvQWs63+eCl8aeUZTvCzHq++H+XgmMbEE7PzwqV8Faq1K3SE
BVTOsmEGidmDgkvdVLEcsi23LprU0By0k1G9wEdim5+jovvM6XRkcY7XWgb6Ahrz
lcBGMGKtkCd/jqcru1XmmF/Thvc3b5mLXiAOYT9MqHOK80YXa1ZmjMBYaJjzZTj6
UXxHZg8n7HHCksl0LPJf0D1y2/26xx8F5Ep6VytkjQu9EbnU5LIYife0JEKSTah2
8REZWWfx3JgxGfmGmkkKNWQzvVD6R91p9Zl6BJSv+hph11gu8h6vU5Kf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA60RN1K8Ku4a073geSe+Icjk+BaMB8GA1UdIwQY
MBaAFFuLJsUy+8UrXeZyqzV2HRx9l+smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMt
ZTcyZTliNGI3NjU4LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMtZTcyZTliNGI3NjU4
LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPkHSeLa
JwsBuoKHZx1Om6hV2ElKWBMeii7iOK5n9A2RGEW6DyujzgVgXaOg+QiYwCVynJXN
O7VqsBFei0NJJCM3+NeFsIHxTYBUUzd21K/KLY9evCdITpg2ZSFEHUGuQ3/F+Heg
E9VT244a1/BdPkCEIEu8wbg+ItfTvNXf6CS+pkedvsOrSx1sx6fgbNogJGGanAA4
B9pZeBqNy+ylXbq1NbzRkmpfy/X7hJ1rhA/qEL3DizxwOMGOMkgZU2wJbRmPM7hH
Ykj+wd1hZXkrYVdAVG7tx+8TMSV94gQNI4v/95hg77zLT3mO8boJnIbnCZVY98/C
QkhTQxuAlNjgDA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:40:47 2026 by rpki-client