Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File:                     wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier:          pAS4cjhiNAwOOc155JS1MOKPlXX03LwdrILjSWKARmg=
Subject key identifier:   E0:E8:27:F9:63:89:A0:92:53:C4:AB:8A:5F:D3:54:B9:72:CE:26:87
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer:       /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial:       019ED5070D9257B4758D882B1971A4386BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number:          0783
Signing time:             Wed 17 Jun 2026 10:01:09 +0000
Manifest this update:     Wed 17 Jun 2026 10:01:09 +0000
Manifest next update:     Thu 18 Jun 2026 10:01:09 +0000
Files and hashes:         1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
                          2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: n3b515A1u9sj9J+/dQnMDRi1wVhF262B4inhBJnf63o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:07:0d:92:57:b4:75:8d:88:2b:19:71:a4:38:6b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
        Validity
            Not Before: Jun 17 10:01:09 2026 GMT
            Not After : Jun 18 10:01:09 2026 GMT
        Subject: CN=e0e827f96389a09253c4ab8a5fd354b972ce2687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:88:bc:b8:14:13:13:43:47:d3:13:41:e4:c4:
                    1d:e3:58:22:47:59:cb:7a:9e:4a:53:f7:a2:36:b0:
                    74:06:91:e6:cb:51:f2:9b:67:67:88:d2:aa:a5:c1:
                    11:9d:1b:28:2a:85:d7:03:7e:5b:37:7d:68:67:cb:
                    6c:7f:b4:58:0c:87:9f:88:6f:cb:2c:4e:dc:34:89:
                    18:0c:75:c2:c6:56:64:ca:a6:af:fd:79:10:a0:09:
                    6b:dd:ab:74:21:e1:1a:9a:fe:5d:74:80:dd:5d:55:
                    e6:0b:2c:34:a8:d1:67:35:41:2f:7f:3f:1f:4b:24:
                    7c:96:ec:31:43:4d:f1:f2:90:d6:b1:8b:37:91:98:
                    3a:51:ba:57:b9:a2:21:42:75:f7:43:ed:a6:86:fb:
                    88:13:91:73:46:be:82:ac:e7:82:66:3a:b1:34:c8:
                    16:d7:6a:b0:f9:e0:43:73:db:45:54:9f:8b:bc:2e:
                    99:7f:f4:2f:70:bd:84:1b:fe:7a:5f:3e:c6:ed:20:
                    9d:a5:5e:94:44:a8:9a:e1:56:80:8a:6d:01:a0:0e:
                    7a:6a:df:a0:59:81:ba:7c:0b:f9:9a:d1:7e:3f:d7:
                    0a:4e:45:60:a0:29:14:08:04:ae:3c:93:c5:7b:20:
                    bb:d7:c7:53:05:ab:51:7e:77:a6:46:29:0e:72:c9:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E8:27:F9:63:89:A0:92:53:C4:AB:8A:5F:D3:54:B9:72:CE:26:87
            X509v3 Authority Key Identifier:
                keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e4:06:b3:49:86:57:a9:2a:2b:ad:52:c9:1d:de:62:e9:c8:
         1b:55:d9:35:80:e9:49:d0:11:e0:5a:00:f6:ee:d4:03:ac:e1:
         ef:63:d0:78:9a:42:d6:05:4b:a1:e6:79:8a:98:a8:57:72:75:
         5e:0e:a0:e9:c0:e5:34:14:dc:3a:3e:a0:31:6f:8a:24:64:19:
         cf:a1:2b:56:32:88:72:c6:be:84:bf:59:05:16:fb:f2:65:f8:
         5a:e1:6a:1a:12:86:fd:8a:37:52:c7:86:cc:98:31:63:e6:a2:
         9f:77:65:b4:da:8c:23:e9:41:37:f5:da:83:3e:dc:fb:c8:1e:
         f3:25:fc:e8:fd:bc:dd:6c:d5:dc:94:27:3a:c9:11:e4:93:5c:
         3c:15:61:34:69:d6:6c:98:37:eb:c3:dc:23:cf:25:80:4e:da:
         36:cd:78:a4:17:23:38:07:23:04:86:0a:a4:ea:c9:9b:7b:b9:
         08:3c:af:3d:c5:a6:92:a0:5a:b8:bd:e3:3d:8f:19:e5:a6:3b:
         1e:f6:b7:54:eb:1b:0c:96:57:20:4b:33:e4:b1:b6:6c:59:f6:
         96:a2:d1:82:7a:a1:f3:c9:85:a4:40:ad:75:ac:d0:a6:bb:46:
         3b:e5:59:8d:fd:29:18:54:f7:60:eb:b9:89:03:84:d6:ec:f6:
         2b:b9:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:38:11 2026 by rpki-client