Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          NDGBHEwXlYrh34qEeU0ycWJEuhyaTact45WYRwccx9Q=
Subject key identifier:   E4:7B:37:52:FB:40:E1:3A:37:03:DE:DD:E5:BD:2D:61:6E:88:32:6B
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       019E1E35E1EBBF2644D94B9BE4F37D6D295D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          0441
Signing time:             Tue 12 May 2026 22:01:48 +0000
Manifest this update:     Tue 12 May 2026 22:01:48 +0000
Manifest next update:     Wed 13 May 2026 22:01:48 +0000
Files and hashes:         1: 4mtxApph_9MS77mo7dnRYHNzv98.roa (hash: PhPkJXgdPNKURqwnzEUMiajtjEnbJmXFdFqDd1kopb0=)
                          2: 9EYbQcuokiQ3PLXtCGAIwFewXeo.roa (hash: jLNXeOrl0Rii7w4wiHiLKivUNt1cz5L0GNNK/0vRrvI=)
                          3: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: tA2f9Kex5W0K350iomV+J8b2B22Jm2hPkCtZSp9B1R0=)
                          4: aZTkPbXNRsPD1lOUCeaDegTWgE8.roa (hash: JFUxMjofzQwR3Oc2ar9w9EVMpvVMJoznshzwwTzRBIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:e1:eb:bf:26:44:d9:4b:9b:e4:f3:7d:6d:29:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: May 12 22:01:48 2026 GMT
            Not After : May 13 22:01:48 2026 GMT
        Subject: CN=e47b3752fb40e13a3703dedde5bd2d616e88326b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:1b:c7:0d:57:9a:7a:58:59:f2:87:bf:68:
                    00:5b:30:18:2e:fb:1b:0c:b9:5d:dc:b4:33:42:38:
                    1b:12:68:5c:14:fc:6f:72:ea:97:9d:67:bc:ab:f8:
                    b9:07:8b:fc:22:26:62:ce:7f:c4:02:65:5c:98:19:
                    04:ed:fa:fd:73:db:7b:f9:d0:53:bd:28:81:2c:68:
                    22:28:1f:57:55:a6:73:5f:07:9a:66:ef:48:2b:42:
                    53:f3:1c:a0:a8:ca:48:de:1c:0f:4d:39:2b:5b:8b:
                    58:cc:39:19:8d:ca:25:99:b2:7e:9e:c7:e7:24:43:
                    05:4e:ea:60:1e:af:f8:06:3b:32:ad:f6:04:d8:dc:
                    2b:80:5a:b4:42:4a:2e:31:24:11:e9:ff:dc:e6:32:
                    a8:91:4c:08:de:97:5e:12:41:15:e1:d8:9a:8c:a9:
                    46:3f:f9:6b:9a:da:c7:0c:00:fc:ee:8e:00:8b:5e:
                    4b:58:7a:27:bf:5a:9d:08:4c:85:d6:2f:18:34:73:
                    a8:aa:85:58:24:d0:e0:28:bf:23:90:05:ee:e8:5d:
                    39:db:b5:d0:a9:11:d6:af:0f:51:0a:c8:28:42:73:
                    1e:7b:2b:95:82:02:6e:fd:6c:78:30:99:3e:2d:53:
                    3d:95:f8:ed:9f:40:e4:5e:fb:97:47:16:b4:33:a4:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:37:52:FB:40:E1:3A:37:03:DE:DD:E5:BD:2D:61:6E:88:32:6B
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:ea:8a:44:4a:48:76:76:f9:e0:41:5b:40:4e:57:2f:a8:
         6f:6e:7c:80:ef:cf:4a:23:bb:43:e3:a7:dd:79:3d:03:3f:88:
         4f:19:a3:84:50:a0:6a:5a:08:ad:c6:8c:c5:3b:0b:f4:76:10:
         56:93:e8:50:9a:95:f7:d1:04:e8:2a:56:62:75:53:a2:79:58:
         b4:f3:d2:d6:88:98:70:15:da:8b:15:45:b0:fb:fb:84:50:ba:
         1a:9e:e3:1f:18:2d:3c:0f:81:50:0b:66:45:b3:58:65:5c:4b:
         fe:e3:d5:dd:2b:df:41:46:64:19:bb:71:55:09:34:97:75:ab:
         9e:ac:b1:37:d7:94:6f:e2:ea:b6:d7:3e:26:39:7b:9e:bc:dd:
         67:72:44:73:82:f3:54:7b:ea:c2:13:86:a5:a8:a6:b8:85:c3:
         ee:b9:98:19:1a:df:31:2b:ce:b2:66:3c:20:5a:07:ba:27:de:
         52:6f:d9:fe:dc:43:1c:7d:1f:dd:11:ba:14:d4:a6:3c:5c:14:
         7e:9b:03:ec:7c:f1:82:85:66:b8:60:15:2c:3d:01:e9:f6:df:
         76:34:88:97:dd:22:5d:cb:24:38:d2:17:61:de:30:a9:da:81:
         aa:21:ba:b5:1b:da:c8:2c:c3:82:b9:e1:0b:65:8f:69:68:5d:
         21:ec:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:15 2026 by rpki-client