Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File:                     WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier:          OntSRmFm18/gD0U72od2MQm1ZlTe/fjHe8n1fjet2CM=
Subject key identifier:   06:43:42:89:62:03:7D:4F:B8:28:E7:9F:C2:E8:0E:6C:23:85:D8:BF
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer:       /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial:       019EC149401311CE13F58502940AA6F91C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number:          131D
Signing time:             Sat 13 Jun 2026 14:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:03 +0000
Files and hashes:         1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: /doEeliU5YhGfzzCQ/pEA5pbGpbPe7i52mH35LWzsvE=)
                          2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:40:13:11:ce:13:f5:85:02:94:0a:a6:f9:1c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
        Validity
            Not Before: Jun 13 14:01:03 2026 GMT
            Not After : Jun 14 14:01:03 2026 GMT
        Subject: CN=0643428962037d4fb828e79fc2e80e6c2385d8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:7f:34:a2:e1:bf:2e:43:82:e6:6d:72:1f:
                    9a:da:ec:7c:69:f7:f8:70:78:08:d0:2d:14:35:11:
                    86:91:3c:e6:d5:13:c5:81:31:36:09:50:1c:f3:0a:
                    99:15:eb:81:93:e2:4a:5e:0e:fa:0f:ce:ae:d1:8a:
                    1f:e3:ee:a1:1d:0a:57:1c:56:c4:3e:b3:50:36:3c:
                    37:a2:2b:87:61:c6:6c:ff:73:ea:f9:03:91:68:28:
                    7a:8a:38:0b:92:a7:a6:6c:dd:67:89:2d:5d:30:ce:
                    61:3b:34:0f:fc:31:62:a5:69:55:8b:90:45:54:6e:
                    3c:d5:0d:bf:fc:4c:33:bf:ed:f6:d5:22:b7:f0:00:
                    cf:a8:71:29:5e:ac:76:9c:2f:e6:68:48:99:34:f6:
                    85:1e:51:4a:bd:1c:08:ce:00:eb:d1:22:86:0e:15:
                    b6:71:86:51:d6:0e:90:10:83:39:92:8b:d0:dd:f3:
                    0d:e6:0f:d6:80:f2:7f:5f:f9:8b:64:31:a7:19:c8:
                    ed:bc:d0:4f:d0:82:de:b9:9f:ea:36:a6:7a:93:b0:
                    09:22:28:c0:d5:c9:47:86:4e:eb:8f:1f:9e:5d:6b:
                    1e:d2:ec:cd:67:53:0e:2b:fa:1e:a8:49:21:d4:17:
                    c1:96:79:b6:4f:d5:42:81:20:a3:8b:b8:2e:8d:aa:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:42:89:62:03:7D:4F:B8:28:E7:9F:C2:E8:0E:6C:23:85:D8:BF
            X509v3 Authority Key Identifier:
                keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:9a:d3:57:85:9d:58:cc:bd:d8:f0:9f:7b:71:dc:6d:47:
         8d:15:a3:3b:b8:b4:ba:11:b5:a1:8b:ec:b7:69:6c:f6:ce:f5:
         c3:b7:2d:8c:cd:62:dc:01:81:8a:1a:da:69:8d:92:2e:ef:dd:
         5a:7b:bd:55:b6:a5:5b:f1:57:07:cd:87:ca:8e:e4:be:05:e0:
         fc:f0:fd:18:46:3b:7f:7e:ec:0c:ad:68:39:19:d8:17:98:4e:
         3e:20:e3:a3:f0:62:ed:cd:9b:28:e5:a1:f9:3b:19:1b:22:94:
         95:b3:0c:b1:1d:b2:75:3b:7d:36:6e:b3:2a:43:51:53:60:b0:
         ec:f1:6d:19:aa:2b:54:aa:3e:82:12:f6:a5:2f:f4:7b:4c:59:
         75:c6:63:87:0f:5f:4a:64:3e:4e:a3:f6:15:07:40:63:cf:aa:
         48:db:ab:74:9d:0d:e2:2d:97:9d:dd:44:4f:65:54:2a:38:b1:
         39:52:b6:ce:69:02:60:00:7c:38:b7:6d:6e:d6:9d:3e:39:bc:
         54:ef:c6:73:fa:66:75:53:b7:6a:0b:9f:f3:5e:b7:78:87:de:
         1e:2f:57:99:42:38:65:11:cd:28:1b:96:73:ce:09:81:bb:c9:
         5f:fc:99:e4:b1:d1:35:c9:3d:7f:3f:32:65:a7:de:3d:7a:f3:
         b9:ce:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:01 2026 by rpki-client