Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          ThmoGlW4fopYzsHW9nirfZtMbVw2kDxi+MDL+xbfoNY=
Subject key identifier:   EE:49:3C:DE:8A:53:97:AB:0D:30:ED:BA:15:BE:91:ED:93:88:5E:BA
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       019EC3A54F2EFBD5EC521CD53F82C1156680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          06D1
Signing time:             Sun 14 Jun 2026 01:00:51 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:51 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:51 +0000
Files and hashes:         1: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: DLPm7SocqLI41IuwpASfc1dZ2E5VzPAiZNuXoalJQlc=)
                          2: m0yOtQ4zzaWwbkLA2mct7O9eAl8.roa (hash: TTt4vBq0ts1GuSUcOF2cVVxmQbeDaFKzFBYDNYxTze8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:4f:2e:fb:d5:ec:52:1c:d5:3f:82:c1:15:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Jun 14 01:00:51 2026 GMT
            Not After : Jun 15 01:00:51 2026 GMT
        Subject: CN=ee493cde8a5397ab0d30edba15be91ed93885eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:7a:8c:8c:83:f4:09:7b:b0:0a:8e:2a:7e:
                    8f:62:ba:c5:9a:ad:cf:f9:88:4d:08:0f:e2:c4:b6:
                    38:c7:af:53:7a:b9:54:49:71:29:c1:ad:92:70:ae:
                    f6:98:d0:59:0f:ea:9f:b9:70:42:f6:4e:36:c8:f6:
                    a0:0c:17:9c:5f:4a:1c:74:8a:32:8b:60:a9:54:6b:
                    72:70:f5:3a:cb:4c:8e:e4:b8:28:3c:5c:e2:b9:c2:
                    e8:34:33:91:48:b4:df:c1:57:c6:bf:7e:f2:70:21:
                    84:98:c9:5f:92:08:53:3d:35:53:cc:31:d9:87:4f:
                    b5:46:2a:9d:bd:5a:9e:7b:e5:2a:62:5b:b0:b0:c7:
                    a1:80:d9:b2:fb:0c:a1:52:fd:2f:68:08:4c:42:c1:
                    e8:62:f8:7d:e3:b3:bc:1a:67:0d:d1:00:e6:0e:3b:
                    a2:c6:80:1d:9e:db:2d:7b:77:dd:66:c1:b8:1f:e2:
                    cf:8b:61:1e:74:da:88:f7:95:93:5d:a1:e2:f3:61:
                    92:a6:0a:d6:9a:9a:1c:e6:40:49:e3:a5:e8:46:55:
                    e3:55:cf:21:86:71:8e:b6:0d:ea:ff:f7:6e:c6:41:
                    97:fb:2d:cd:7a:4c:2d:6e:a4:d2:f0:29:7a:59:a6:
                    ad:de:6b:01:8d:de:39:0e:53:e4:92:da:86:76:cc:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:49:3C:DE:8A:53:97:AB:0D:30:ED:BA:15:BE:91:ED:93:88:5E:BA
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:58:58:7c:5d:82:4b:a5:b5:20:bf:11:7e:c5:f4:de:96:
         a8:d3:bf:20:ca:06:93:8f:39:0c:88:a0:21:2c:14:82:aa:07:
         d6:73:b8:22:5d:97:87:23:fc:e6:fd:1c:21:9c:19:e8:6c:b3:
         d7:7b:2c:7e:2f:03:97:e1:6c:27:43:ab:8d:e8:b7:e4:5f:8a:
         0d:63:80:77:fd:57:7b:82:f3:06:8d:c5:43:e7:1c:bf:94:d2:
         29:4b:31:fa:f7:97:38:02:19:31:d1:7f:9e:f8:bc:ee:0a:05:
         59:12:2b:de:8e:9f:54:fb:87:2b:f1:40:f1:11:9c:d5:3e:fb:
         fb:64:b8:52:be:e2:a6:c6:a0:6c:9c:47:be:b4:4a:66:28:db:
         1c:af:b0:ca:28:05:d6:31:e7:f0:05:1c:0d:ff:a4:12:c0:3c:
         4f:c3:12:58:f5:7b:ed:2b:7e:5f:9c:81:91:f1:cd:03:bd:78:
         1b:43:5a:19:60:ab:dc:ed:40:bf:40:81:dd:b1:60:21:32:87:
         21:22:01:ee:ab:a1:e8:79:27:a0:b5:43:81:e9:58:f8:f3:42:
         5a:f9:db:f2:a4:93:4c:ec:44:1d:ac:1f:21:35:33:bd:a4:9d:
         39:3e:f4:cf:cd:ec:2b:c1:1f:06:e1:07:6b:9c:99:01:e0:bc:
         52:e8:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:19:10 2026 by rpki-client