Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          5EbzTTkEAW+4tPOcJlK/OAuW5wXcmXhWaRCPrbsWYF8=
Subject key identifier:   9A:1A:FA:77:E4:84:EB:9C:93:8F:50:5C:CC:26:8E:63:DE:C7:94:B9
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       019EC17FC1B76E8E32F8791211AE9444311C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          0AF4
Signing time:             Sat 13 Jun 2026 15:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:35 +0000
Files and hashes:         1: B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (hash: mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: 03EGl6QED14MHKqpzWwpFuqPd7s6Hunu8Ddk6fqO8hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:c1:b7:6e:8e:32:f8:79:12:11:ae:94:44:31:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Jun 13 15:00:35 2026 GMT
            Not After : Jun 14 15:00:35 2026 GMT
        Subject: CN=9a1afa77e484eb9c938f505ccc268e63dec794b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:08:33:3d:d7:cf:3d:e1:db:88:ec:f5:d3:
                    02:0f:ba:95:5b:3f:f0:26:c2:13:1a:4f:0b:6c:a2:
                    97:71:79:7d:b2:46:20:e8:b7:ff:30:8d:97:8f:69:
                    df:a8:21:bf:65:61:dc:9c:ae:f3:6c:fe:18:e6:6f:
                    1b:06:77:79:71:1c:52:69:e7:bf:d9:b3:7c:8c:28:
                    c3:e2:a4:9e:ec:43:ef:01:20:ef:2e:db:98:f8:94:
                    14:0b:af:dc:99:5d:c9:f5:20:14:09:5f:34:4d:9a:
                    93:33:d6:78:b3:84:43:bd:18:29:f4:2e:e0:0e:06:
                    9f:47:71:e1:07:df:66:94:4a:43:3b:be:d7:70:86:
                    4b:a7:dd:8f:cb:83:48:65:3f:e9:b6:22:e6:c8:89:
                    3f:8a:40:78:5f:c9:e4:2f:af:11:6a:e2:24:2e:70:
                    32:a9:5a:c5:44:b7:f6:5c:2c:fe:a1:9a:30:cf:a7:
                    54:9c:57:30:ef:12:c6:03:8a:21:b5:53:80:83:f5:
                    8f:3b:e8:0b:29:48:c6:a7:b0:bb:c0:39:7d:b4:11:
                    e2:27:c2:8e:76:95:b4:ad:ef:ce:00:85:bf:6c:d1:
                    70:ae:e8:48:e8:20:45:b0:eb:a5:f2:4f:d9:ee:5d:
                    b8:17:83:e6:fb:f6:b1:fb:eb:d2:46:5b:d9:2a:cc:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:FA:77:E4:84:EB:9C:93:8F:50:5C:CC:26:8E:63:DE:C7:94:B9
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:50:fb:7e:85:01:d3:0a:37:88:98:3a:d3:6e:81:40:13:
         ad:33:b3:3e:b9:ee:1c:06:fa:68:3a:a4:90:42:20:93:bd:36:
         9c:f1:f0:e6:f6:41:90:94:02:7a:86:c6:ed:28:5d:3a:e6:64:
         23:18:3c:b9:7d:22:43:b7:97:66:37:fc:e0:bf:b9:01:03:28:
         c9:3e:69:9a:ee:12:3e:eb:36:60:bc:30:1b:e7:c8:25:98:cf:
         ba:16:56:ca:3b:b8:f7:f0:06:e4:e2:da:38:e1:0b:b9:f6:17:
         c8:30:4c:f1:3b:d1:ed:99:8d:42:8c:bd:a5:49:a3:4b:e2:6b:
         97:28:f4:b0:e0:42:c2:0e:7e:8a:a1:e4:15:eb:65:77:45:8b:
         74:c4:39:85:15:a9:e3:ae:9c:0d:5c:46:27:0b:ef:81:97:de:
         f5:4a:3c:7f:b0:b1:87:69:71:5b:8e:21:e2:1e:98:7a:8a:be:
         b5:66:fc:a1:2d:4d:e2:3d:23:0d:9e:51:ce:2a:e1:c2:6c:72:
         7a:4e:e9:80:ea:e8:78:69:45:f8:a3:b4:ce:77:7b:53:34:61:
         ff:41:4f:10:d5:9a:e3:52:7a:8f:30:24:fc:8e:50:7b:ad:44:
         b6:97:f4:c0:e0:85:7a:b7:19:50:73:de:20:8f:3f:88:f9:9e:
         32:b2:f7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf8G3bo4y+HkSEa6URDEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw
ODE3YTAwHhcNMjYwNjEzMTUwMDM1WhcNMjYwNjE0MTUwMDM1WjAzMTEwLwYDVQQD
Eyg5YTFhZmE3N2U0ODRlYjljOTM4ZjUwNWNjYzI2OGU2M2RlYzc5NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthEIMz3Xzz3h24js9dMCD7qVWz/w
JsITGk8LbKKXcXl9skYg6Lf/MI2Xj2nfqCG/ZWHcnK7zbP4Y5m8bBnd5cRxSaee/
2bN8jCjD4qSe7EPvASDvLtuY+JQUC6/cmV3J9SAUCV80TZqTM9Z4s4RDvRgp9C7g
DgafR3HhB99mlEpDO77XcIZLp92Py4NIZT/ptiLmyIk/ikB4X8nkL68RauIkLnAy
qVrFRLf2XCz+oZowz6dUnFcw7xLGA4ohtVOAg/WPO+gLKUjGp7C7wDl9tBHiJ8KO
dpW0re/OAIW/bNFwruhI6CBFsOul8k/Z7l24F4Pm+/ax++vSRlvZKswCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoa+nfkhOuck49QXMwmjmPex5S5MB8GA1UdIwQY
MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt
YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh
LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6RQ+36F
AdMKN4iYOtNugUATrTOzPrnuHAb6aDqkkEIgk702nPHw5vZBkJQCeobG7ShdOuZk
Ixg8uX0iQ7eXZjf84L+5AQMoyT5pmu4SPus2YLwwG+fIJZjPuhZWyju49/AG5OLa
OOELufYXyDBM8TvR7ZmNQoy9pUmjS+Jrlyj0sOBCwg5+iqHkFetld0WLdMQ5hRWp
466cDVxGJwvvgZfe9Uo8f7Cxh2lxW44h4h6Yeoq+tWb8oS1N4j0jDZ5Rzirhwmxy
ek7pgOroeGlF+KO0znd7UzRh/0FPENWa41J6jzAk/I5Qe61Etpf0wOCFercZUHPe
II8/iPmeMrL3QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:41 2026 by rpki-client