Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File:                     W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier:          /WaRMwxXZkpauLubLkaeHFo+PPKunSF98/I8wBoeh6o=
Subject key identifier:   E4:3A:9E:98:D3:5B:97:73:2C:03:99:DE:CC:6B:A4:98:C2:3D:22:5F
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer:       /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial:       019EC148C81D6E14B1F9C9CC3C4D3E98C8FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number:          1189
Signing time:             Sat 13 Jun 2026 14:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:32 +0000
Files and hashes:         1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: hoZ5sdHl0+AaF6XEjJG/XgQrXJa73feaY6neVAss01E=)
                          2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:c8:1d:6e:14:b1:f9:c9:cc:3c:4d:3e:98:c8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
        Validity
            Not Before: Jun 13 14:00:32 2026 GMT
            Not After : Jun 14 14:00:32 2026 GMT
        Subject: CN=e43a9e98d35b97732c0399decc6ba498c23d225f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:2c:a7:74:f3:7d:22:03:71:d1:ce:f0:aa:
                    10:a4:1f:53:bd:16:e3:f5:d8:da:f7:4a:e0:9a:cf:
                    05:d3:11:fb:07:21:50:1a:05:f6:d5:93:10:6b:b0:
                    04:94:30:39:b9:41:a7:e7:b1:62:40:7b:ad:ab:f3:
                    9f:70:3e:0b:d8:3b:f5:f9:75:99:2a:87:a2:d9:82:
                    81:59:07:4c:94:f5:51:25:4d:d5:63:ff:3a:cf:c2:
                    c6:49:32:57:1e:95:1d:7e:ae:e8:ba:51:3a:0c:5b:
                    aa:60:7d:f7:78:36:aa:18:b6:af:37:26:bb:80:20:
                    8e:3c:bf:e9:51:88:59:d4:7e:20:e2:52:36:9b:9b:
                    90:13:8c:0e:8d:a4:b7:9c:37:6b:2c:2d:ef:3f:7d:
                    11:bb:cb:2f:b7:f4:a4:51:c1:ab:ce:15:e6:36:8e:
                    a8:22:1f:a9:63:6b:06:0a:e9:78:b2:34:f2:a1:eb:
                    fb:41:56:99:60:e6:6c:64:9f:2d:12:05:35:21:b0:
                    bb:50:90:a4:07:e4:30:f7:31:20:b9:6c:e0:5a:11:
                    42:e3:c4:70:c6:3a:f4:c5:00:9d:05:3f:12:4c:69:
                    f3:5f:f9:ea:4b:7c:f8:72:8e:8f:7f:8b:c6:2c:47:
                    e2:db:d4:27:01:7e:62:8e:1c:05:00:c0:44:4d:e7:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:9E:98:D3:5B:97:73:2C:03:99:DE:CC:6B:A4:98:C2:3D:22:5F
            X509v3 Authority Key Identifier:
                keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:ab:bb:27:72:87:14:35:7e:05:95:c8:a6:48:c5:8c:e8:
         00:b7:82:69:44:22:87:db:90:4c:26:99:d1:3e:ff:3a:e0:99:
         39:05:b1:ac:d0:06:fa:f0:04:dc:2c:df:50:09:06:08:65:50:
         05:a2:e0:93:7c:c3:9e:8c:81:d7:41:ec:72:da:43:6d:85:65:
         10:8f:4c:9b:24:89:66:ee:3b:02:cb:4f:5c:53:c9:58:0a:3a:
         a0:87:4a:17:3e:eb:0d:91:1e:63:c5:49:7e:46:38:ef:c1:59:
         35:46:71:9e:98:6d:30:f5:28:24:19:55:38:21:c1:d7:71:94:
         a1:b5:b4:6e:bf:bb:41:9c:f9:33:21:72:e6:83:4d:b8:33:6c:
         56:53:0b:48:29:2b:57:9b:de:d7:ef:a1:47:10:03:49:b0:f0:
         81:98:63:6b:39:d9:bd:28:b0:13:61:d2:27:39:64:9f:09:4a:
         9f:5c:2a:13:02:ac:d2:dc:03:89:00:bb:49:a9:a3:f8:49:5f:
         b5:bb:90:ad:86:76:25:85:3d:75:49:26:bb:90:7a:11:f7:3a:
         64:ce:5a:3c:a4:69:db:97:3a:f6:b1:55:ac:b9:1f:44:4b:d9:
         03:33:ca:6a:bc:1e:af:13:5b:e0:6c:ff:07:b1:26:52:fa:51:
         c5:7e:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:56 2026 by rpki-client