Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          NeMGJDWhukkC+Y+koCwmr+kz+P2TbzaM4lc2QU9BHIA=
Subject key identifier:   46:BA:D6:6D:DB:4D:77:C5:57:02:FB:F3:8F:2A:6F:64:DC:6D:43:47
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       019EC0DB690C9B0C2F7C712FB5A970B16E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 12:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:05 +0000
Files and hashes:         1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: INUmmxQcBA+Vlp/tUnQh+hgye6PXHL+vl68aKzpkeek=)
                          3: dZTs0EIjPnxi68tbTokfAbw6h7g.roa (hash: /Yw0GBij2t0h3+q9/KbDbCPzij5LVOg+e269LitDfx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:69:0c:9b:0c:2f:7c:71:2f:b5:a9:70:b1:6e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Jun 13 12:01:05 2026 GMT
            Not After : Jun 14 12:01:05 2026 GMT
        Subject: CN=46bad66ddb4d77c55702fbf38f2a6f64dc6d4347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:b0:29:6d:5f:d6:07:42:e0:52:a6:d4:01:
                    56:a5:8d:41:64:a8:7f:d8:ef:e3:c2:d4:ba:78:47:
                    ee:bd:e2:f2:c6:fd:57:51:7f:f6:b7:a5:8c:96:dd:
                    36:b4:d3:9b:0e:21:5f:5f:ac:40:9f:8c:92:d9:21:
                    ba:06:4b:9c:16:a5:10:8b:5b:d4:04:0e:fd:57:a4:
                    17:31:34:b7:67:0b:21:02:5d:d8:34:6d:4b:d1:6a:
                    91:11:ce:43:9a:fa:23:40:50:fa:b2:31:a0:4e:87:
                    7c:cf:be:08:ac:34:b4:8a:ee:68:57:62:2a:e0:b7:
                    57:cd:aa:89:7d:de:02:64:b9:6c:a3:80:97:58:de:
                    7d:6c:fc:e7:1a:70:e8:d1:df:3d:69:5d:86:0b:d1:
                    be:8f:9b:7d:3d:6a:ac:5a:17:df:3e:ae:b5:80:e4:
                    77:e3:f3:e2:b9:28:35:d5:8d:a0:9a:16:be:b8:fc:
                    c4:da:1d:56:5e:82:05:d2:55:8b:55:7b:8a:7c:0e:
                    17:bb:c0:e8:09:68:2c:df:e6:d5:97:22:5c:03:fb:
                    58:0c:bf:08:e0:3e:17:04:56:7a:45:92:e8:5f:16:
                    af:ff:5d:5e:16:3a:b2:c3:1a:35:93:57:03:c7:23:
                    12:55:be:e7:fc:20:1c:13:1c:d4:68:9b:dd:79:87:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:D6:6D:DB:4D:77:C5:57:02:FB:F3:8F:2A:6F:64:DC:6D:43:47
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:b7:74:39:af:e9:2b:18:3a:b4:c9:3f:fe:08:e2:cb:c5:
         6e:fb:97:f7:c0:21:c2:5a:99:51:23:f6:87:b1:b2:34:81:cf:
         f0:0e:a9:34:ad:25:70:99:70:a7:cd:10:91:c0:e3:97:1f:72:
         9b:46:08:2e:07:ec:bd:53:88:2e:37:fa:60:22:38:38:d0:b4:
         9e:2d:b4:86:cd:6d:3c:cf:ea:aa:96:89:ad:9d:45:78:b4:62:
         9b:9d:3a:2a:db:99:0c:9d:b8:9d:7b:51:0f:9d:8f:ab:56:ed:
         87:63:2d:3f:bd:97:ed:0c:a2:37:7c:4e:34:e6:6e:e0:12:c1:
         0b:c5:b2:c8:c7:ec:64:41:42:32:20:ba:4e:a7:62:1f:6b:ed:
         63:33:d7:c5:7c:0a:ce:d9:c9:53:e4:8c:05:00:ff:1b:3b:c1:
         f1:22:31:15:b8:75:7b:54:e4:7a:d0:1a:78:2a:ce:9a:a5:eb:
         5f:af:10:9e:97:a0:5d:2b:a4:70:d1:8d:ae:f8:bc:e7:f2:74:
         f1:40:ca:98:92:af:a0:d9:15:25:09:7e:12:c0:28:28:3f:ff:
         17:c7:db:e4:f3:b7:70:c4:5f:2e:ad:d6:8c:a9:e3:75:1d:81:
         b5:37:47:87:5c:9b:a9:75:14:18:43:78:b2:04:e9:74:1a:3a:
         d0:7b:f3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A22kMmwwvfHEvtalwsW5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw
YjUyZjQwHhcNMjYwNjEzMTIwMTA1WhcNMjYwNjE0MTIwMTA1WjAzMTEwLwYDVQQD
Eyg0NmJhZDY2ZGRiNGQ3N2M1NTcwMmZiZjM4ZjJhNmY2NGRjNmQ0MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG2wKW1f1gdC4FKm1AFWpY1BZKh/
2O/jwtS6eEfuveLyxv1XUX/2t6WMlt02tNObDiFfX6xAn4yS2SG6BkucFqUQi1vU
BA79V6QXMTS3ZwshAl3YNG1L0WqREc5DmvojQFD6sjGgTod8z74IrDS0iu5oV2Iq
4LdXzaqJfd4CZLlso4CXWN59bPznGnDo0d89aV2GC9G+j5t9PWqsWhffPq61gOR3
4/PiuSg11Y2gmha+uPzE2h1WXoIF0lWLVXuKfA4Xu8DoCWgs3+bVlyJcA/tYDL8I
4D4XBFZ6RZLoXxav/11eFjqywxo1k1cDxyMSVb7n/CAcExzUaJvdeYdeMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa61m3bTXfFVwL7848qb2TcbUNHMB8GA1UdIwQY
MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt
NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk
LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3y3dDmv
6SsYOrTJP/4I4svFbvuX98AhwlqZUSP2h7GyNIHP8A6pNK0lcJlwp80QkcDjlx9y
m0YILgfsvVOILjf6YCI4ONC0ni20hs1tPM/qqpaJrZ1FeLRim506KtuZDJ24nXtR
D52Pq1bth2MtP72X7QyiN3xONOZu4BLBC8WyyMfsZEFCMiC6TqdiH2vtYzPXxXwK
ztnJU+SMBQD/GzvB8SIxFbh1e1TketAaeCrOmqXrX68QnpegXSukcNGNrvi85/J0
8UDKmJKvoNkVJQl+EsAoKD//F8fb5PO3cMRfLq3WjKnjdR2BtTdHh1ybqXUUGEN4
sgTpdBo60HvzcA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:03 2026 by rpki-client