Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File:                     WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier:          QtmDt3QSpyp/q2ODjGhj3l+59nCeb9mRLfgKxtatHGQ=
Subject key identifier:   B7:D7:0A:84:94:1F:8E:32:B6:FA:05:A6:83:4A:A4:85:10:69:66:0C
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       019EC148E487D4734EEB1065F25B947DE955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number:          06BE
Signing time:             Sat 13 Jun 2026 14:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:40 +0000
Files and hashes:         1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
                          2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: cEgfVnhrQmO/f7nqG3XWiz8bQxoCwCViUAHud+3l0ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:e4:87:d4:73:4e:eb:10:65:f2:5b:94:7d:e9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: Jun 13 14:00:40 2026 GMT
            Not After : Jun 14 14:00:40 2026 GMT
        Subject: CN=b7d70a84941f8e32b6fa05a6834aa4851069660c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:e0:c0:33:f7:43:d4:26:f3:b0:59:6f:f8:
                    93:d1:4d:93:d0:ec:95:9e:54:0a:81:b1:29:5b:ed:
                    42:13:f9:6e:a4:a9:fe:39:b4:1c:b6:7c:96:b5:8b:
                    3b:89:52:9d:a7:07:5f:2a:e6:35:80:6a:47:c4:27:
                    1c:33:95:80:46:bb:bd:87:9b:66:00:19:32:be:0e:
                    43:03:f8:ca:e5:94:da:48:87:fb:a0:f0:84:a3:d0:
                    df:04:f9:68:66:5e:ca:28:e4:6f:95:45:49:9e:70:
                    0f:53:bb:02:df:59:bb:4c:a0:db:2b:59:7a:0b:23:
                    d5:0c:8a:ac:6f:6b:8a:0d:35:93:27:de:b2:95:1b:
                    c6:68:58:d6:30:b4:ac:26:ca:b3:0d:3a:63:65:1d:
                    4e:6f:eb:6d:2f:1e:83:2e:97:de:05:07:da:f6:b6:
                    0b:7e:64:9f:a1:fc:16:3d:b8:d9:e8:53:fb:fb:2b:
                    a9:a6:29:05:bf:8c:52:26:21:b6:33:8e:73:c3:d0:
                    fd:1f:24:4c:6f:f8:42:bd:dd:b2:01:cf:0e:d3:49:
                    d4:d3:6f:c3:7f:cf:cb:47:54:bb:bb:33:66:75:bf:
                    9c:1e:a4:06:ce:a8:a0:3d:5d:2a:c7:bf:ee:c9:e6:
                    d9:07:ba:c0:5c:85:47:89:7b:29:bc:6c:09:50:c7:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D7:0A:84:94:1F:8E:32:B6:FA:05:A6:83:4A:A4:85:10:69:66:0C
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:f8:72:77:6a:03:e7:c4:91:ee:2d:e3:10:90:91:97:29:
         a3:17:8f:52:d8:71:69:84:bd:f1:b5:75:ee:54:bf:71:6b:4b:
         7e:85:8d:7d:a2:c5:46:37:ce:4e:d7:24:e3:a2:7e:9b:7d:72:
         0b:78:5b:42:86:5e:3f:6f:2a:90:10:47:25:d0:15:fc:59:27:
         53:54:b3:ee:e8:99:23:6f:87:41:23:4f:04:47:29:aa:1c:56:
         21:de:e4:d0:36:b0:83:ee:d6:14:8e:fd:37:24:7b:19:a0:8b:
         b8:8d:54:e6:11:82:31:c8:b4:6e:7e:d2:d4:51:a5:9f:03:ad:
         8c:3d:b1:ba:73:c0:ee:65:fb:d2:dd:f9:52:bd:d6:0b:61:56:
         31:d7:9c:51:b6:f5:39:d5:e6:39:d8:04:db:d6:97:99:be:78:
         a3:c9:df:26:e7:dd:c7:86:a5:65:d8:aa:04:4f:a7:75:3d:fb:
         90:cb:ac:90:ca:a9:a8:c2:9e:15:68:76:46:39:ca:39:09:8b:
         f8:bb:b7:a5:c9:17:18:f7:7d:ee:da:f6:c9:60:7c:f2:42:f9:
         98:22:c4:ef:28:c3:6e:44:13:87:e9:cb:b6:4b:61:82:b1:e3:
         4c:2d:02:bb:67:2e:b6:81:10:29:54:45:4a:ec:4a:d9:65:fb:
         1f:a2:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:05 2026 by rpki-client