Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          8ZXJGXr+U3Snc75056e0SV2kaRX3z9a5tWO3kN2pmzQ=
Subject key identifier:   F9:B3:36:94:15:2A:79:B1:63:40:78:7C:4C:5A:15:6F:5E:6E:B5:B8
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       019E1DFEA56FE24C9E09D0D00203BCD28E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          0CF2
Signing time:             Tue 12 May 2026 21:01:28 +0000
Manifest this update:     Tue 12 May 2026 21:01:28 +0000
Manifest next update:     Wed 13 May 2026 21:01:28 +0000
Files and hashes:         1: 7r4lRPQc-QTSmeOcUsrSRcjkV4c.roa (hash: OocvrP+x2oNsYStihaud30OWGNdq9vGwzjAJqLEWJFg=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: 874Wm1RzI8UgYdcoUCN1x7YVI2HS9nhqmXXWZS5TvC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:a5:6f:e2:4c:9e:09:d0:d0:02:03:bc:d2:8e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: May 12 21:01:28 2026 GMT
            Not After : May 13 21:01:28 2026 GMT
        Subject: CN=f9b33694152a79b16340787c4c5a156f5e6eb5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:2d:5c:fd:1b:0a:9f:ac:80:8d:7f:4f:65:
                    90:34:1b:c1:f3:91:73:56:48:8e:08:9c:ca:46:f9:
                    57:0e:f9:28:e8:d5:d3:5f:48:a0:bc:e2:66:05:a0:
                    54:e4:76:c6:36:ed:2c:26:ee:c0:e6:7d:b3:72:c8:
                    9e:46:81:ca:be:02:dc:7e:85:f6:64:66:e4:f6:c5:
                    00:24:60:b5:fc:30:b6:a7:be:05:74:fd:d6:00:f0:
                    ee:c3:92:fd:97:12:33:30:e5:12:89:56:72:cd:a5:
                    7b:75:5f:65:37:d8:d0:18:7b:c9:69:81:09:5f:df:
                    7c:f2:a7:2d:f3:74:81:82:c9:b4:f1:b3:63:32:d6:
                    53:78:b3:4b:2e:f2:20:b9:eb:84:b9:d9:57:83:6e:
                    47:e7:eb:5d:58:da:8f:e0:12:5c:db:ea:01:51:ef:
                    58:66:e6:df:6c:6b:3f:20:99:b0:c1:5d:14:8f:9d:
                    f2:86:d6:35:1f:e3:1b:7d:d0:f1:80:10:4b:33:8f:
                    af:f4:a4:90:2d:42:be:65:23:e2:86:86:c2:dc:04:
                    2f:1d:b7:4d:91:c6:d7:e7:87:af:5c:df:15:50:e1:
                    f3:c0:0a:6e:42:a0:a6:2a:a3:53:49:10:3c:c0:94:
                    bd:9f:03:7b:e8:54:1c:b4:7c:67:ab:cc:0d:55:5c:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:36:94:15:2A:79:B1:63:40:78:7C:4C:5A:15:6F:5E:6E:B5:B8
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:d8:a8:f3:c6:4f:40:89:9e:bd:2a:64:6b:23:54:fe:0d:
         64:45:bb:ef:7e:4f:1f:02:fc:e0:5f:c0:a8:f3:70:ef:2d:5d:
         6e:e4:a7:2f:c1:cb:c2:2e:ba:08:98:53:45:01:61:39:ff:dc:
         34:ce:39:bf:dd:a1:ae:8b:bd:a6:76:bc:39:0c:c9:3d:0d:ba:
         71:cc:fb:63:32:09:09:03:5c:0d:56:f0:a7:f3:f6:5f:04:74:
         c5:b8:f1:4f:82:0e:6e:f8:65:69:fa:65:65:77:e0:5e:62:ed:
         e0:d7:a9:e1:1f:f4:6f:32:a1:1d:14:00:48:78:e9:5f:a5:8e:
         04:ba:fe:7a:3a:45:9a:27:fc:84:ab:68:3a:ae:6b:61:11:23:
         80:d2:2f:12:34:c9:9d:04:d3:42:60:1a:2f:1d:e2:63:a3:de:
         5a:d5:50:c8:2d:55:bb:f8:32:0e:9d:4d:15:b3:f1:2a:38:9c:
         7b:b6:44:b4:b4:f4:4c:94:5d:1b:fc:7e:e6:b6:6c:7d:c9:12:
         c8:6f:1b:59:20:a0:a0:2c:ef:f6:dd:5e:ee:1a:33:83:f2:49:
         9e:5b:ae:11:5d:be:3a:cb:ae:3e:32:7f:22:b5:03:1f:59:a2:
         3f:27:e4:42:5f:43:99:20:bc:bc:e4:1b:9c:00:c9:63:06:f5:
         f6:be:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:44 2026 by rpki-client