Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File:                     W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier:          o3lhATzjKTEF5zrsHDZRLz0tDCKrL1vyl14Zaq8wUJs=
Subject key identifier:   BC:80:E5:34:31:F7:AC:1E:51:50:B8:28:9F:56:11:4A:C9:93:98:20
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer:       /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial:       019EC1488777A860384CE76F27429B573A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number:          1845
Signing time:             Sat 13 Jun 2026 14:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:16 +0000
Files and hashes:         1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: rsm4IDp1ZLL6S2eM3QjB0mvzOjHdzrgtg/3nTSSzE/M=)
                          2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:87:77:a8:60:38:4c:e7:6f:27:42:9b:57:3a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
        Validity
            Not Before: Jun 13 14:00:16 2026 GMT
            Not After : Jun 14 14:00:16 2026 GMT
        Subject: CN=bc80e53431f7ac1e5150b8289f56114ac9939820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:a3:64:af:21:d3:bd:e1:31:d2:40:4f:d6:
                    da:a9:c7:4e:ac:c8:42:10:9e:2c:b8:6f:d1:06:b8:
                    98:d1:c0:ad:bd:a4:6c:1f:8c:4c:d9:ee:2e:d2:bf:
                    4c:4d:fc:9b:39:e6:3e:98:dc:39:96:af:5d:80:62:
                    02:1b:41:8a:5b:55:a8:79:09:fd:5d:ec:bb:aa:a4:
                    b0:c9:b5:56:c8:48:1b:80:3d:eb:b9:39:5a:03:e5:
                    f4:07:d7:d4:41:99:58:2b:4f:2c:b9:74:7e:c9:0b:
                    c5:69:32:99:66:c8:15:c0:10:17:fa:df:01:2b:d4:
                    27:b7:7c:14:8f:d7:83:a7:b0:56:d6:35:f0:1f:30:
                    6b:22:9d:38:18:db:c9:34:46:8f:24:cf:c1:c7:a4:
                    d6:f2:68:57:8b:59:7d:7e:e2:91:30:53:27:91:bc:
                    d0:4e:0a:87:f0:58:7b:24:02:c0:12:a9:0c:0d:00:
                    20:cd:f6:b2:35:38:7b:84:8f:aa:da:2c:ae:4d:43:
                    c1:0b:52:e2:31:db:03:40:93:83:8a:15:03:04:f3:
                    a1:ab:ee:12:a6:a1:c3:e6:f7:6c:d4:90:88:3b:fb:
                    68:fd:4d:f0:b7:10:1f:43:b5:5b:db:9c:cf:bb:06:
                    2e:01:83:35:7c:c5:ef:44:c2:41:2a:81:25:d5:62:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:E5:34:31:F7:AC:1E:51:50:B8:28:9F:56:11:4A:C9:93:98:20
            X509v3 Authority Key Identifier:
                keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:70:67:a1:8f:2e:2d:28:bd:b3:63:fb:1e:ae:3d:73:50:31:
         8d:75:fe:62:26:8d:23:41:fd:7a:51:06:6a:21:e0:59:7d:9b:
         77:1c:05:2b:69:a6:a4:7a:23:9b:ed:ff:c9:42:79:de:6e:63:
         39:e1:c2:25:87:23:dc:54:3c:ba:83:b3:53:53:2e:a1:2e:f5:
         81:7d:d9:14:34:a1:c0:21:2d:0a:8e:8a:15:cf:8f:dd:1f:d6:
         b8:14:6b:5d:c6:4b:c7:d5:e0:57:d2:70:6c:51:4b:9b:b2:54:
         c4:27:1c:2e:4f:69:48:ca:46:32:f1:67:dc:52:d0:08:33:6a:
         87:d8:8b:2c:3a:07:79:9a:c8:d8:ff:58:ea:48:12:e7:31:76:
         c5:99:c3:2a:b3:45:58:52:21:13:d2:58:75:0c:18:65:87:05:
         d8:11:78:9d:d3:60:74:9b:56:db:c0:04:71:2e:2f:a5:43:77:
         1d:e1:df:aa:27:f6:eb:fa:be:e6:0e:ab:b5:53:ce:5d:78:49:
         35:0d:dd:21:d7:9f:81:dc:3a:5a:ff:75:47:fe:89:e6:af:4d:
         8f:53:60:1c:79:54:ec:f1:ac:d9:73:ad:f3:85:2b:80:07:10:
         79:e7:38:cd:ab:2c:7a:4a:d2:e3:36:da:59:da:58:4b:7b:a7:
         38:a6:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:19 2026 by rpki-client