Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          37BGhNJwsvdbC+ECO6Dl+eAwg2Fou1r2tt/spzIGGoI=
Subject key identifier:   66:85:2C:15:79:A5:C3:3C:E6:69:ED:84:EB:DF:6C:87:AA:00:3D:59
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       019EBE7F6ECDDEE69CF2ABCABEAFF4856E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          0A29
Signing time:             Sat 13 Jun 2026 01:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:22 +0000
Files and hashes:         1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
                          2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: rHsLcoioI+68hO+mxCBD2oQgNLFCK2Dsj1BlAr/2lN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:6e:cd:de:e6:9c:f2:ab:ca:be:af:f4:85:6e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Jun 13 01:01:22 2026 GMT
            Not After : Jun 14 01:01:22 2026 GMT
        Subject: CN=66852c1579a5c33ce669ed84ebdf6c87aa003d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:fd:a1:f3:e9:08:de:c5:5d:ac:db:4e:6b:
                    b0:b5:d4:ef:07:5c:ad:37:aa:22:aa:aa:b4:01:90:
                    8b:af:ff:71:97:72:eb:89:fb:ad:1b:9e:57:44:11:
                    bf:72:95:fc:90:1b:42:84:73:2b:d0:37:3e:79:1b:
                    70:3a:71:e7:d0:78:94:e8:3b:cd:c1:56:99:88:e4:
                    de:e6:98:2b:f8:a1:f1:95:f1:dc:04:c3:5f:0f:b2:
                    9e:a0:8e:f8:ed:76:42:0a:58:7f:b2:6d:da:72:5a:
                    ad:64:65:0e:8c:b5:b8:95:42:3c:6a:09:69:07:51:
                    f6:bc:20:91:d3:e9:ca:54:53:97:ce:bc:de:85:5a:
                    43:10:6d:49:05:46:00:34:74:b4:3a:1c:b1:24:5e:
                    b1:b1:5b:47:35:0d:a3:cf:18:df:16:75:01:24:8b:
                    33:f1:2f:b5:00:62:5e:0c:c5:44:cb:6f:1d:e5:c8:
                    6b:2a:0f:26:e4:11:12:bc:0a:95:53:ef:51:f1:b4:
                    9b:36:b7:69:28:11:9b:03:a3:2e:99:e9:14:53:c7:
                    79:49:4e:8d:ce:d7:44:f5:ad:ac:d8:24:f0:2e:d7:
                    ec:02:fa:6a:03:35:ea:c9:97:72:33:8a:0b:44:2b:
                    e1:e9:fa:16:a1:6c:5f:b8:8f:0b:db:45:53:56:51:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:2C:15:79:A5:C3:3C:E6:69:ED:84:EB:DF:6C:87:AA:00:3D:59
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:03:db:3b:79:52:15:5e:73:8e:70:3f:e4:bf:45:47:fa:
         38:14:20:79:67:93:88:a2:87:7f:f7:5d:62:c3:18:84:03:36:
         c6:d0:8c:8d:32:32:26:bc:59:ab:c0:fd:8c:4e:c6:34:0f:25:
         bf:4c:fa:f8:1e:5c:af:0e:90:85:f8:d6:d3:a2:25:b4:22:f5:
         8e:70:0b:51:b5:47:4c:a2:24:8d:c3:e0:37:ee:69:c0:f6:f0:
         7b:c1:94:07:69:cb:dc:17:33:61:68:5a:02:f3:a2:63:ad:7e:
         c8:52:20:ee:09:56:ea:dd:c1:a6:9d:f4:02:8c:10:34:c3:35:
         dc:a9:87:13:0a:29:01:b5:a5:84:49:72:35:41:52:a3:f8:85:
         72:e6:45:0d:92:fd:55:1b:0a:80:07:0c:b3:83:b4:1b:d3:14:
         4a:a1:a8:81:74:e3:fb:f8:ee:15:da:6e:b3:46:2f:00:3d:19:
         6f:4c:e2:d0:77:4d:e5:4e:3e:fe:e4:c5:70:1f:06:59:3c:ac:
         6b:80:1a:47:d9:fc:bb:86:26:2d:fc:bd:b9:29:4f:83:5a:ba:
         18:be:87:51:c1:0a:11:40:7b:f1:8a:04:7b:9b:74:ef:ac:d9:
         39:fe:45:68:71:d8:20:27:79:e6:ed:08:71:d5:34:e0:53:ad:
         91:ad:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:25:51 2026 by rpki-client