Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          H/7eRyKGuD87dNg1O+jtCeiReW5caSKyJmOn5MpXnto=
Subject key identifier:   AA:33:31:FF:99:67:3B:63:2D:52:E5:F1:F1:03:13:5E:1B:5B:59:66
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019EC1EDF99D7E37EE3CCD81D19676302069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          13DB
Signing time:             Sat 13 Jun 2026 17:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:59 +0000
Files and hashes:         1: 9DlZGfzkGJH9pt3tlUtwbDIgZmE.roa (hash: BgtptWZDSzp28tC4nLvBq9ONf2sr0vsAGvBczOwVSY4=)
                          2: JAxnFs2GIkjxS_4clYKu3zhr_9I.roa (hash: vQBrdhLTznptKumMW9F/udGw5r/yM5Rk5yVyQpu0W8g=)
                          3: La12rr_K1ZSbuhi7wlgaOCIF5ZA.roa (hash: Z2Rpf1e0zKOJjF1IX+pQ5F4oluN25ApbSFfygu3hh5I=)
                          4: id2BlqzstTY2zcF89y0tqtXsAAg.roa (hash: YUgnEyxwSsXkOSDh0+NOmEVHAoUbYwAOfZybL6l7VVs=)
                          5: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          6: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: 9/wVp4Uw6WB5GXd6l75tMruWu6RiqbgV2fHgm+q3LN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:f9:9d:7e:37:ee:3c:cd:81:d1:96:76:30:20:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Jun 13 17:00:59 2026 GMT
            Not After : Jun 14 17:00:59 2026 GMT
        Subject: CN=aa3331ff99673b632d52e5f1f103135e1b5b5966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:2e:03:72:27:63:ff:2c:d9:c6:9a:96:cc:
                    2e:02:dd:94:2a:54:22:74:aa:e0:66:31:89:23:21:
                    9c:c1:1b:5c:8f:a6:87:c9:29:f6:50:39:03:83:80:
                    e6:01:40:4c:91:8e:70:b4:97:e4:5a:cf:df:bb:33:
                    3b:05:33:9a:45:90:ff:b8:d8:96:eb:8b:d0:29:23:
                    be:da:a7:be:47:39:d4:b7:24:29:a9:3f:c3:db:67:
                    4a:10:2b:95:87:e1:2a:2a:52:f7:63:89:36:33:f8:
                    1d:df:66:17:91:8a:22:89:4a:07:7c:6d:4b:4d:6a:
                    3a:cc:05:2f:e8:54:55:c3:6d:58:7d:e7:50:b0:cd:
                    6e:da:c4:81:ab:78:f7:9f:33:6d:23:c2:76:e4:99:
                    3d:bc:b3:72:e0:16:03:e3:68:a1:54:f0:72:7d:a8:
                    da:df:24:7b:0f:ea:19:6a:94:28:91:47:99:85:d5:
                    05:af:20:d8:2a:73:54:78:04:3b:fd:3a:fc:4d:c7:
                    b5:b3:e9:e7:5c:5a:38:66:e9:58:0f:a3:a9:ad:b7:
                    96:28:8c:e9:63:25:d0:f5:06:5f:5a:66:7d:ba:30:
                    28:b1:5d:51:9e:d9:3c:3f:d6:a5:a2:e0:a2:39:f4:
                    d4:0e:b0:e7:b5:b3:13:0c:81:87:a1:a6:ce:82:43:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:31:FF:99:67:3B:63:2D:52:E5:F1:F1:03:13:5E:1B:5B:59:66
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:85:d2:ff:ac:d4:81:69:90:6a:5d:f7:24:85:86:8d:57:
         90:5f:81:2b:c3:00:9d:f7:96:4c:97:d8:40:53:5b:26:33:13:
         3d:24:31:51:b0:4e:ac:0e:99:1a:8d:e4:64:5c:1f:c8:92:9d:
         06:ca:0e:63:1d:d9:5c:94:f3:df:57:05:c6:57:25:5c:a5:d8:
         d6:d8:8e:b3:9a:db:f0:b9:9a:dd:bd:5c:17:98:0b:a5:86:17:
         50:a1:c7:8c:d4:76:e5:3d:3a:7a:ae:2f:cf:ca:cd:06:3a:01:
         e8:75:ad:5a:ea:23:00:81:eb:09:68:af:ab:da:45:47:d8:ee:
         72:e6:57:f2:10:34:74:77:52:e7:40:2e:af:0f:3c:80:f6:a1:
         41:9c:e7:ae:76:3d:4a:49:6b:8a:80:17:41:8d:be:69:d7:5a:
         79:0b:b2:31:c9:b5:55:3a:94:89:54:a1:8b:d2:01:a2:0d:17:
         cd:e6:b7:91:cf:a0:45:e7:59:58:09:3e:b2:36:dc:de:1e:d6:
         6d:9c:78:5a:57:b2:76:0a:f5:cf:34:f6:f2:46:c8:e2:03:1d:
         b4:f2:e5:cd:e8:fd:47:cb:ac:13:44:ae:8e:20:d6:09:56:61:
         57:2f:2f:45:d7:95:fb:00:9d:31:9f:45:93:37:40:9b:49:40:
         38:2c:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:03 2026 by rpki-client