Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          gWO/rrTPy4E/UYLAG0jnL6GG7UgkE8n/d7UxdVojLl0=
Subject key identifier:   D5:87:17:BB:35:FC:CC:A8:E5:0F:DE:4F:C7:C1:1F:9E:D9:1A:A7:73
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019EC481124D585F4C15ABD7CCEF302EEDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          0159
Signing time:             Sun 14 Jun 2026 05:00:53 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:53 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:53 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: wblDQpUH85UsClGhz/wDCOLaPyWWoNNyUNv5asA3SdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:81:12:4d:58:5f:4c:15:ab:d7:cc:ef:30:2e:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Jun 14 05:00:53 2026 GMT
            Not After : Jun 15 05:00:53 2026 GMT
        Subject: CN=d58717bb35fccca8e50fde4fc7c11f9ed91aa773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:ea:2f:83:17:19:b8:30:33:9b:00:ae:96:
                    b9:79:23:fd:ab:7c:8a:58:57:59:ad:e1:89:e6:a5:
                    ab:14:7a:1e:b7:09:89:60:d9:ab:ab:54:ce:f4:90:
                    49:d0:86:0c:50:91:87:9a:fa:3d:cb:9c:a7:1d:0a:
                    1a:9a:29:63:ef:09:f1:bb:ae:25:a4:2c:92:d2:5f:
                    56:ad:6d:7e:be:cd:fb:db:2c:9c:1f:38:88:9e:9f:
                    4c:07:49:d8:35:18:ca:ca:99:bc:9a:ac:88:d5:f0:
                    8c:f5:0f:59:09:68:15:3f:6f:55:91:9a:37:c4:c6:
                    4f:81:e3:6e:62:da:aa:2a:f8:7d:b2:39:42:21:83:
                    11:f7:2b:73:ee:f4:a5:6b:31:67:91:9c:5a:8a:e0:
                    21:83:e8:f9:3b:f4:45:60:10:42:f1:cd:cf:1b:72:
                    fd:7c:90:a1:14:0c:fd:50:08:59:6c:c6:6b:75:7a:
                    08:79:ba:10:fc:ee:8c:38:10:ee:8a:f7:eb:20:b9:
                    2c:8d:fe:c0:a1:37:9a:a5:46:96:7a:ea:30:86:70:
                    8d:62:28:5a:ed:29:5d:fa:6c:b6:c6:30:f1:a1:e4:
                    a8:c2:58:02:f5:8a:12:78:da:9f:12:17:1c:4a:d3:
                    44:f7:7e:9a:ff:6e:13:75:3a:92:7b:cf:d2:0c:0f:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:17:BB:35:FC:CC:A8:E5:0F:DE:4F:C7:C1:1F:9E:D9:1A:A7:73
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:23:a8:5f:12:f5:fd:a3:42:3e:49:f4:a8:49:0e:10:1c:
         0e:86:04:4f:e2:49:f6:b3:73:0a:f0:2a:28:6f:22:6c:c8:2b:
         2b:07:84:d4:0b:86:cb:e4:41:d2:29:5a:00:83:ab:a5:61:a9:
         1d:df:ff:25:50:6a:fc:1e:20:8a:b6:5f:e6:ff:83:3e:d6:ee:
         31:19:fd:18:21:7b:21:9d:22:5b:dd:ef:bf:9d:a7:29:05:27:
         6f:e3:10:51:05:33:bc:0b:10:fe:dd:48:96:4c:8e:03:eb:0f:
         12:95:fb:98:8e:85:5c:ce:6e:41:18:e8:d9:8f:0f:e0:5d:8b:
         6a:d7:53:29:d2:d8:e0:ef:72:fc:f4:aa:7a:dd:9e:87:84:d3:
         ab:be:f0:15:a9:14:39:0a:34:18:82:ff:e6:5e:73:af:be:7a:
         6d:8d:e2:0f:d7:85:63:80:7f:82:21:44:dd:f9:87:4c:8b:5c:
         a5:f8:53:fa:8a:78:cf:ea:f0:0c:1b:fa:66:d4:e5:05:b2:59:
         a9:88:9a:da:e5:b8:4e:66:37:bb:87:e0:0d:89:a2:0c:5d:15:
         0e:0b:5b:38:a9:e0:a6:fd:0c:71:93:7d:47:ea:2d:6f:f3:5b:
         f5:c0:f3:27:b6:40:31:fc:ca:2c:97:d9:d5:a6:34:04:51:50:
         35:d7:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:46 2026 by rpki-client