Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          YdvS4uUDCAtc3j0b39GT8/D9ta/QeFJYWY2t7JU3oYA=
Subject key identifier:   25:CA:48:25:A7:C9:CA:C8:75:70:D2:A7:24:1A:BB:A6:92:8B:00:EB
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       019EC0A42D2B4B173184FB28EFD5557A1D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          0A0A
Signing time:             Sat 13 Jun 2026 11:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:45 +0000
Files and hashes:         1: 4CeETaDbMmlemWxGvvx0_WuaR08.roa (hash: Ihn6EFoGwfYZmijHSSAZ4/aOa56nJlt5ht+N8FXjtEs=)
                          2: 8ojHQg-5gn_Du7oteDU3y4gT3eo.roa (hash: i3m9CQuoZX6ywBrI0Ffbx9GRfJOG6PI2xg9iGzfKe/A=)
                          3: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=)
                          4: UhhULK4VhHUpXbHrquJFK5XwzTM.roa (hash: cTOGj51BZIsKfKZvp1Y6kCOw9tCtCwH0h8hrKoSZm2w=)
                          5: UqpRL__Efeid9a8cIN4aVjD7btc.roa (hash: Jo0BVJIAZaCqo9aHwqKM5mX9gen1oqBNsGDUzTFR458=)
                          6: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: Qd2vK+FwE0SpDwC2WtiOkrdmkyWaxSVe6ejpJ3LLGgY=)
                          7: _d1c_IHHvO6uDgtUgM8v6NT-Glw.roa (hash: kRKEDuodtt5EkFPvSVIB0r4OcamCM+hlEDHgUbHAC8A=)
                          8: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=)
                          9: eiNx0hyWr9_GPT53IvxQM9d7nQM.roa (hash: 24M5NJX5qdMlDv9jNkA+N6M6xg4k0uj4d4NoagskJ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:2d:2b:4b:17:31:84:fb:28:ef:d5:55:7a:1d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: Jun 13 11:00:45 2026 GMT
            Not After : Jun 14 11:00:45 2026 GMT
        Subject: CN=25ca4825a7c9cac87570d2a7241abba6928b00eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:2a:1e:9c:3e:34:86:a7:7b:b6:43:51:0d:
                    cd:00:1e:89:df:00:6e:d4:36:cd:7f:44:98:cc:bb:
                    cb:10:9b:c0:9a:3f:04:19:4b:94:6c:45:d2:38:17:
                    4d:44:0e:58:e9:2b:d9:ca:eb:84:d1:8b:ff:ce:19:
                    ea:bd:40:5a:f8:c5:52:66:d6:3f:ba:b6:77:a6:f1:
                    d5:77:df:c1:c6:43:2c:71:b4:17:26:11:01:a3:f4:
                    9c:49:cb:fd:4f:95:39:41:1a:49:01:62:56:89:2e:
                    9c:01:9f:e3:54:f8:12:1c:9f:b9:02:f6:21:02:71:
                    30:30:10:bd:ed:55:4f:91:de:8e:27:b2:2f:8c:57:
                    5f:46:a6:e4:3e:5b:94:c2:43:dc:3b:ba:07:6c:69:
                    0c:6c:3d:92:19:21:f3:ff:62:ac:6d:c0:3d:97:38:
                    95:06:e6:e5:f8:cc:d1:94:82:34:ca:40:1a:97:b4:
                    ea:a6:0d:16:50:7e:7b:44:af:22:02:0c:69:f0:51:
                    5f:dd:04:94:ba:86:63:87:00:67:28:1b:9e:0d:56:
                    aa:48:b1:c3:f8:05:99:32:96:f5:04:cd:ad:ae:78:
                    2d:dc:81:60:cf:fb:14:62:e7:4e:ae:21:54:ae:c6:
                    86:13:1f:93:21:d4:2a:41:f3:b8:fa:6d:a0:5f:43:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:48:25:A7:C9:CA:C8:75:70:D2:A7:24:1A:BB:A6:92:8B:00:EB
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2b:d1:43:0b:bf:2f:7c:64:61:a0:81:a0:57:f2:36:a2:12:
         6c:46:b6:15:58:d8:51:d5:46:b5:55:11:9a:30:4e:0c:db:12:
         e9:f1:9a:c2:59:80:ab:c2:dd:9f:7a:08:2c:db:fe:3e:ef:80:
         8b:d1:1b:72:82:d0:3a:03:27:1f:70:ab:64:53:f3:e0:7d:c7:
         24:78:25:6a:cc:e5:03:05:5d:db:74:7d:20:b9:4b:aa:ee:f2:
         72:87:30:31:49:22:a8:64:86:4a:f7:ea:b3:5b:72:0a:8c:d9:
         b8:14:8d:b2:1f:01:e4:49:3a:3a:f0:b7:a8:91:10:ea:a9:68:
         0a:6c:26:3b:13:8d:54:90:76:4b:fd:0a:93:c6:e4:cc:4a:b6:
         d3:21:f6:02:10:c5:1a:ad:e1:c0:a3:8f:d8:e6:0d:b4:ea:a8:
         c0:74:42:d5:b3:3f:05:e8:42:b5:12:39:eb:d4:f8:8e:c1:8e:
         d1:b3:89:45:23:4c:59:94:0c:99:d2:12:6e:4c:7d:e0:27:c2:
         44:b2:72:21:de:39:52:dd:93:cb:2f:a9:62:a4:9a:4b:47:47:
         cb:62:23:6a:0d:74:ef:79:a9:46:49:9f:d9:8e:47:b1:5e:e3:
         c2:1c:e9:fb:6a:20:17:53:9e:2f:5c:71:d3:a8:87:15:9f:f4:
         f0:91:ab:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:23 2026 by rpki-client