Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File:                     WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier:          9tqK8yQqTGZNnEjhDwrKNQSbedkx2MeSFhlX5QwZAks=
Subject key identifier:   93:E4:33:1D:32:1A:34:F4:B9:63:1C:9A:97:75:66:B5:FA:B6:24:42
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer:       /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial:       019EC29298987EF11DAB62C11D24594BA70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number:          11CA
Signing time:             Sat 13 Jun 2026 20:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:47 +0000
Files and hashes:         1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
                          2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: URgwKcdlkYLKIFdKFjECihZ8oGhitItEQblCebQjKWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:98:98:7e:f1:1d:ab:62:c1:1d:24:59:4b:a7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
        Validity
            Not Before: Jun 13 20:00:47 2026 GMT
            Not After : Jun 14 20:00:47 2026 GMT
        Subject: CN=93e4331d321a34f4b9631c9a977566b5fab62442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:c4:7d:cb:22:b7:a9:f8:08:52:a5:13:6e:
                    c9:66:49:0b:e7:58:97:39:6f:ed:ce:bd:e0:51:9d:
                    1e:f6:c2:02:83:71:50:0c:0d:9b:4e:7f:7f:1d:75:
                    71:0f:b7:9f:28:a3:7b:39:74:31:e2:4f:9f:b7:b8:
                    1f:05:d4:6d:0c:49:81:e5:92:3e:04:a5:22:31:d7:
                    4f:6b:63:ea:9d:26:9c:79:29:16:76:28:1e:52:7f:
                    5a:40:2b:59:8c:bb:91:80:6f:46:fe:50:8d:e8:9f:
                    14:a4:4a:c4:28:10:2d:6f:cd:cb:9a:93:61:5d:87:
                    ee:9e:86:dc:e6:40:08:4d:d5:f8:c4:5b:0d:0b:b0:
                    99:a3:14:0c:14:a6:6d:57:23:9d:cd:fb:76:4b:3c:
                    de:45:3e:03:55:16:cf:9b:5a:01:da:ad:3d:ab:93:
                    6f:18:22:7e:a0:6a:3f:f7:82:29:54:75:b9:99:86:
                    db:f1:9d:3b:aa:c0:1a:99:b4:65:3c:f5:69:e8:48:
                    2e:4f:c5:46:db:cf:84:c1:81:d0:0c:5f:51:ad:e7:
                    82:4c:2f:a8:66:27:7e:4a:fd:74:b1:b3:dc:5b:4f:
                    1e:7a:c4:48:7c:38:11:40:5b:0a:4d:e6:86:f9:01:
                    28:6c:6e:2d:43:52:04:d1:56:8d:f7:06:0d:82:ab:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E4:33:1D:32:1A:34:F4:B9:63:1C:9A:97:75:66:B5:FA:B6:24:42
            X509v3 Authority Key Identifier:
                keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:f1:00:4c:d7:29:bd:18:82:d4:67:47:c9:05:a5:df:39:
         c9:8e:ba:28:5a:7e:a5:b1:1b:29:91:a1:5f:d7:93:69:88:6b:
         a6:b4:42:37:dd:80:11:7b:4c:ef:a7:9b:41:be:4f:e6:7e:63:
         bf:a3:8f:c1:1b:ba:02:04:1e:f2:04:ab:15:89:31:ef:6f:b1:
         af:55:72:99:3d:25:11:d8:99:d3:82:21:1e:8f:66:15:95:d2:
         a4:3c:eb:13:72:29:da:b9:d7:78:83:4c:fd:98:06:88:34:70:
         dd:9b:55:b5:1d:49:86:da:53:c0:9c:fe:75:55:0d:ab:2e:c1:
         a6:a6:d4:86:2f:91:12:7d:c4:12:6e:ea:24:3e:c6:10:da:0b:
         8d:6f:b5:3c:0e:25:1c:50:5b:21:4c:34:35:a7:a3:b5:dc:ea:
         21:d0:a7:47:25:29:cb:db:ce:4c:64:0d:24:f0:d6:f5:eb:68:
         0e:53:65:1b:71:61:3d:7b:7e:d8:c2:66:7a:8d:29:02:10:e0:
         5b:14:9d:7f:eb:8a:d0:98:ad:d3:ac:b3:38:c8:83:e3:0a:39:
         e3:64:62:a5:77:da:fc:e3:f3:2e:9c:37:e1:85:e9:b8:3e:7c:
         9b:7d:17:d6:1f:65:45:08:6b:85:cf:1b:5b:5f:67:f9:c2:ad:
         69:f5:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:46:01 2026 by rpki-client