Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File:                     wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier:          StBrK1/dv0bQVIns/mdg8ZlShE0Jmg9PdUTe9b30yTY=
Subject key identifier:   83:D6:13:CC:C8:5E:74:44:CF:85:11:01:E7:04:85:5A:13:06:41:9F
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer:       /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial:       019EC224EA681E5E1A353A2BF3DA5CB71BB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number:          0C77
Signing time:             Sat 13 Jun 2026 18:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:59 +0000
Files and hashes:         1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=)
                          2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: ft5b34Rmeo+7ZIURmwAddhiaaCYZE1TeYKZMzheLM6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:ea:68:1e:5e:1a:35:3a:2b:f3:da:5c:b7:1b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
        Validity
            Not Before: Jun 13 18:00:59 2026 GMT
            Not After : Jun 14 18:00:59 2026 GMT
        Subject: CN=83d613ccc85e7444cf851101e704855a1306419f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:02:1a:b9:41:2e:75:7c:75:8d:de:bd:80:
                    f7:49:27:02:93:d0:10:ed:d6:d8:15:88:1a:fd:c3:
                    1f:bb:dc:29:32:7d:cd:09:44:a5:78:ed:07:38:8c:
                    43:ee:08:92:fc:51:0e:dd:dd:f5:fa:c8:00:4e:9f:
                    36:17:05:65:76:da:af:d9:be:f5:4f:67:83:e1:88:
                    98:14:8d:58:0b:db:d7:3d:1c:7a:09:49:40:68:17:
                    4d:9c:8d:1e:33:7b:73:f1:72:8b:ee:9e:b1:ca:9d:
                    3a:2a:29:6b:3f:96:4e:3e:ac:09:fc:f9:33:7e:cd:
                    87:df:fa:c3:fe:69:6b:8a:e2:01:03:3e:7a:df:12:
                    cf:d5:a5:a7:f2:fe:2e:4f:00:88:2a:5d:7e:6a:16:
                    16:00:0c:24:dd:e7:ea:08:af:18:00:86:1e:46:db:
                    8f:7e:4d:e2:c3:67:87:e7:dc:71:24:61:4f:02:67:
                    a0:d0:12:29:f5:55:10:b4:3f:c2:a6:78:bc:e8:0e:
                    8d:57:db:f2:08:d0:1b:12:6d:31:f4:8b:46:85:ec:
                    5d:39:75:c2:37:29:45:67:d2:48:6f:82:59:bf:ba:
                    3c:39:54:a2:bf:95:67:6c:d9:78:5d:a6:cb:b6:77:
                    c4:c3:16:28:6b:51:27:4a:9e:52:7d:26:06:a5:a3:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D6:13:CC:C8:5E:74:44:CF:85:11:01:E7:04:85:5A:13:06:41:9F
            X509v3 Authority Key Identifier:
                keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:7e:53:96:93:24:0b:a7:f9:1b:d0:b2:c7:92:bc:67:6b:
         68:a8:68:9f:b8:7d:48:db:3e:d5:cb:d9:b7:b7:24:c6:54:f9:
         1b:07:0b:36:36:e7:7f:cf:0f:3d:02:8a:d2:4c:fc:0c:a6:68:
         2a:a7:ff:31:65:1a:80:34:38:c5:a4:5f:60:2f:5c:00:4e:c8:
         ad:30:47:c5:01:e0:20:4c:f3:46:52:20:fc:fb:24:9f:80:2d:
         61:1e:d8:80:47:f8:a7:2b:58:6a:00:87:37:30:09:2b:d5:30:
         ee:57:4c:86:80:3a:1c:8a:67:69:f2:e7:e0:3f:6d:02:8e:3c:
         66:99:45:73:0e:13:98:ea:8a:d6:63:67:0f:5e:78:b9:a7:2d:
         bc:55:60:be:ee:16:ef:cc:91:92:95:f3:46:09:3f:c3:35:e9:
         27:64:be:ca:d7:68:d2:d4:e1:39:6f:ea:d6:c4:44:d6:03:64:
         ed:64:e8:ae:9b:25:85:1d:97:35:c6:ca:da:87:8e:b2:dd:6a:
         d3:97:c5:30:0d:69:c7:20:67:51:ba:a0:1a:b6:3a:68:ea:c0:
         be:a4:23:86:66:91:5b:99:34:a0:f9:57:49:27:6d:7a:53:a8:
         3e:c5:7f:89:54:c6:71:e0:7b:20:15:fe:8c:6c:e6:84:b1:d2:
         7d:bb:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:53 2026 by rpki-client