Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File:                     WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier:          /odxtFLeEjKe44UiqsODFZKxYmh9Wl0Oj03SCMcm88M=
Subject key identifier:   67:3C:D0:98:3E:BD:75:41:A3:67:9A:4B:7C:D0:E2:8D:73:CB:C4:24
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer:       /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial:       019ED5071696231CE630A70F32E812EBF869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number:          0F80
Signing time:             Wed 17 Jun 2026 10:01:11 +0000
Manifest this update:     Wed 17 Jun 2026 10:01:11 +0000
Manifest next update:     Thu 18 Jun 2026 10:01:11 +0000
Files and hashes:         1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: Df91tNY02b9TsLFIo7OphFQij7xWbVsvXe1H/JKjHi4=)
                          2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:07:16:96:23:1c:e6:30:a7:0f:32:e8:12:eb:f8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
        Validity
            Not Before: Jun 17 10:01:11 2026 GMT
            Not After : Jun 18 10:01:11 2026 GMT
        Subject: CN=673cd0983ebd7541a3679a4b7cd0e28d73cbc424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:48:87:ee:bf:17:c9:d2:e2:24:51:29:bd:
                    cb:2d:52:32:cc:99:3c:b3:ec:28:21:83:5a:b0:a7:
                    c3:d3:19:b0:67:5a:62:fb:dc:d7:76:67:3d:5e:9c:
                    57:8b:cc:71:24:4e:15:dc:89:4d:ff:1d:c7:2f:12:
                    2a:08:06:3a:ed:cd:db:22:51:cf:33:ce:55:c3:b6:
                    a1:8c:e9:aa:cb:c1:29:ad:27:30:22:0a:30:f9:c5:
                    86:be:fd:b8:8d:0e:37:b2:05:09:0b:73:98:7c:55:
                    8a:f9:85:3c:e6:00:8b:7c:a2:a1:b0:8b:ca:a0:71:
                    9c:2d:35:54:d5:e5:14:4a:fa:ac:c6:3d:60:5d:14:
                    f8:1f:e6:50:55:a3:07:81:e1:d2:68:ad:7b:85:a4:
                    a4:33:5e:de:f0:73:f7:9e:c4:b1:c2:31:fb:d3:a1:
                    44:44:47:2d:64:af:8a:a5:7d:fc:f8:fe:6d:0f:fa:
                    1d:3e:f5:08:26:0f:9b:08:c0:95:61:b7:24:6d:9b:
                    d0:97:b3:4a:fd:db:8f:8b:f1:0e:f7:9b:82:0c:de:
                    83:66:6c:cb:a4:ee:45:e8:59:45:17:a6:df:60:1d:
                    74:5b:6c:8c:cd:86:cc:6c:78:77:40:39:cb:45:55:
                    e3:4b:00:90:c8:a8:70:16:b3:9e:81:a6:f1:c9:66:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:D0:98:3E:BD:75:41:A3:67:9A:4B:7C:D0:E2:8D:73:CB:C4:24
            X509v3 Authority Key Identifier:
                keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:4e:fd:70:a3:da:dd:8a:84:c5:8e:96:b4:c5:9a:0f:bf:
         f0:a1:bc:2e:f3:db:17:b5:1d:ca:8f:e8:88:48:f4:66:47:05:
         66:2f:3b:fe:86:f3:d5:68:fe:bc:53:2f:48:79:b6:a6:bd:8f:
         82:15:83:37:e4:98:b1:b2:61:94:91:c8:56:b2:90:8c:4b:17:
         6a:73:67:dd:b7:b2:cc:ab:cd:4c:39:64:27:e1:10:b5:db:6b:
         9c:3a:67:72:89:64:bd:6f:44:77:96:03:5c:47:51:f0:04:b7:
         73:3c:23:b5:21:d9:09:53:9d:ce:b7:ee:0a:42:bc:e3:d4:fb:
         c2:31:3f:45:24:15:47:70:59:38:ee:b6:8c:3b:0e:87:32:8e:
         f0:91:1e:9e:85:83:78:eb:70:46:3e:63:1c:c7:0c:2a:7f:ba:
         8a:13:ae:27:50:2a:32:01:4d:0c:82:3f:ab:7e:78:c4:11:6d:
         43:62:cd:7d:02:13:16:f1:a6:0a:0d:db:c9:5b:85:b6:c6:19:
         7c:49:df:42:0a:01:c3:b3:24:a2:b5:5e:3b:1e:92:db:15:63:
         13:ee:67:f4:17:b7:7a:4e:92:6b:dc:b1:09:e3:06:53:b9:2c:
         9d:5d:84:2f:75:d1:af:31:ec:02:88:86:ae:c1:5f:99:fc:cc:
         eb:09:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 17:19:17 2026 by rpki-client