Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          WlTpoT5mD/cVRXuYVoH7AUlZ1mP2QhoS5OjukLexw7E=
Subject key identifier:   93:72:E2:27:AA:7D:35:4D:D6:2A:47:FF:89:DF:25:47:B1:7F:59:C8
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       019EBEB6602A50F5EAEA17BD86B8C1665153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          0B3B
Signing time:             Sat 13 Jun 2026 02:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:23 +0000
Files and hashes:         1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=)
                          2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=)
                          3: PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa (hash: upIljczPhg0qz3Pzpmtl5kRlJn9GZ5N1pBXA6jY4G1g=)
                          4: Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa (hash: f+vgH/8lCAyoaopM+ARWem0PqsHCRHeZDcYhmCyBUow=)
                          5: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: Tyo2wf3n/VL3397mR3T/nrAStuIvw5m3R++Bh10QdU8=)
                          6: beCqMYhwCg21aSUTwrhNMW4LcEY.asa (hash: 1lmykIh7IPZhs4mpEd/DgaG6yCKrGTPv5ZzBaPKUw4c=)
                          7: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:60:2a:50:f5:ea:ea:17:bd:86:b8:c1:66:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Jun 13 02:01:23 2026 GMT
            Not After : Jun 14 02:01:23 2026 GMT
        Subject: CN=9372e227aa7d354dd62a47ff89df2547b17f59c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:a3:1d:aa:34:4f:38:22:fb:70:ca:d1:22:
                    0c:dd:25:31:04:ba:65:5d:05:50:55:15:7c:59:53:
                    1f:01:93:ec:df:f9:56:4e:31:57:6a:0a:d0:ec:68:
                    c4:b9:31:1b:b4:e3:40:79:a6:5d:0e:a7:f5:04:be:
                    f7:37:04:9f:14:17:92:fc:13:ba:e4:ed:fb:62:3f:
                    d1:98:14:10:26:95:ce:18:09:2b:e2:81:bb:5a:29:
                    6e:56:86:29:92:1f:d0:7b:c9:2c:5a:81:ce:42:73:
                    60:96:42:02:d0:78:f0:1b:94:fe:87:4d:9d:7f:c5:
                    b7:8c:4e:5c:77:6f:4a:83:61:ad:e0:0b:47:58:b9:
                    d4:cb:11:b1:fa:40:cb:80:d6:bd:22:35:49:36:ff:
                    25:12:56:5f:d6:31:bb:31:2c:34:61:2f:64:ff:07:
                    22:4f:0c:32:c4:2e:cc:ce:27:4c:82:3a:40:cc:83:
                    df:ca:40:62:57:aa:be:3b:c4:4d:b6:f5:27:f6:98:
                    56:cf:25:a9:b0:ae:75:a4:02:d0:93:22:5b:5a:53:
                    02:ff:0d:c3:dc:26:e5:bb:83:72:4e:49:9b:04:8a:
                    8b:b3:69:dd:d3:55:ab:a8:40:3b:9b:4e:08:07:28:
                    a0:1f:1d:0c:96:f6:11:db:cd:3e:a3:c6:9c:a4:49:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:72:E2:27:AA:7D:35:4D:D6:2A:47:FF:89:DF:25:47:B1:7F:59:C8
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:94:09:6e:18:db:f1:77:48:32:8f:c1:37:4a:04:d0:9e:
         1b:eb:b4:e6:d3:a3:1b:a6:6c:9d:83:1d:92:8c:6d:7b:3b:47:
         9c:81:96:03:df:3b:88:21:82:9f:9a:d8:2a:a2:e1:b8:3e:97:
         32:f3:b9:22:eb:e4:28:12:1a:69:a8:15:cb:5c:c9:1c:cb:39:
         c1:8f:d9:f0:93:1c:d9:97:0f:ef:c4:9b:06:8d:04:88:0a:98:
         22:dc:e7:f5:77:36:ea:74:0c:65:0a:ba:18:c5:72:b4:3f:3d:
         95:e2:64:76:64:06:06:c3:ac:a0:95:6b:51:82:5c:c4:9c:66:
         ed:e4:da:95:1a:f5:84:5d:e3:93:98:56:57:12:4c:ad:cf:c4:
         15:c0:09:47:82:ea:e0:65:64:13:81:73:e2:2d:1b:53:98:46:
         a9:28:6a:f4:84:34:e8:31:65:4b:bd:a7:f2:b3:38:15:5c:67:
         9b:88:94:9d:1f:0b:34:25:18:08:6e:6f:f7:58:49:1c:10:c6:
         e6:81:2d:c8:33:b8:ca:5e:b3:e5:6a:5b:a1:c0:1c:71:1a:de:
         d6:d9:37:99:f3:53:5b:77:ed:b8:10:3e:0e:d9:69:96:dd:53:
         d3:e2:16:b7:39:69:6c:d9:0a:04:c9:11:d0:cb:e9:4e:b7:70:
         e1:e8:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:49 2026 by rpki-client