Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          Qh60G1RnE9RKmaXsxTj6RL+LCFGKwM0QyTJKNt5Pn10=
Subject key identifier:   0F:6B:46:B2:B1:7B:F1:2A:F4:62:68:C4:EB:CB:4F:FC:7B:E7:86:E4
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       019E209237E8D73DB0CF45AF07FECFC45934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0D72
Signing time:             Wed 13 May 2026 09:01:53 +0000
Manifest this update:     Wed 13 May 2026 09:01:53 +0000
Manifest next update:     Thu 14 May 2026 09:01:53 +0000
Files and hashes:         1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: fi21GafTdKsN0klKoCbF+j4Eq1LvK4JeK2dINv3QDic=)
                          2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:37:e8:d7:3d:b0:cf:45:af:07:fe:cf:c4:59:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: May 13 09:01:53 2026 GMT
            Not After : May 14 09:01:53 2026 GMT
        Subject: CN=0f6b46b2b17bf12af46268c4ebcb4ffc7be786e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:1f:df:8e:70:8f:17:fb:26:a3:d2:47:38:
                    9f:69:ce:a9:43:ef:ff:a1:61:a8:c9:81:a8:2e:35:
                    40:0b:36:ba:7f:1c:50:d8:2d:84:77:12:f4:b2:20:
                    19:01:ce:37:9e:4f:1c:f0:f8:0b:fe:09:98:c1:5b:
                    39:9c:5e:ec:30:02:7e:f6:6f:fd:f1:4e:16:82:4f:
                    c5:b5:72:65:45:ee:a5:fd:04:d3:de:86:86:ad:68:
                    0b:9a:90:c7:3a:8a:30:f2:ef:08:79:60:18:45:9b:
                    1f:0e:5f:37:5e:1c:25:80:6f:c6:f7:0b:94:5a:65:
                    87:bc:3e:68:73:01:33:a4:09:e4:cd:17:94:b4:41:
                    36:9f:9c:a0:90:6c:5a:09:09:0a:94:e3:b4:f2:97:
                    5b:30:ae:fa:55:c5:68:01:db:60:31:3d:ff:d0:4d:
                    ed:f2:cf:48:79:f8:9c:31:a8:92:ae:05:01:cc:ef:
                    76:1a:e9:7a:c3:41:39:d7:a5:2a:0f:af:f2:59:ec:
                    3a:b2:b8:aa:0d:b7:e4:2b:61:4e:e7:28:ed:a5:34:
                    5e:9b:e6:16:9e:9e:31:b4:33:11:c1:cc:2b:a5:82:
                    1d:77:59:51:6d:6b:b3:bd:7e:46:f9:52:e0:05:95:
                    f9:a6:55:73:5b:eb:e1:fe:f8:00:c5:8b:1a:c4:32:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:46:B2:B1:7B:F1:2A:F4:62:68:C4:EB:CB:4F:FC:7B:E7:86:E4
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:b0:72:d5:b2:65:a7:c2:4e:e8:2d:12:27:43:64:51:c2:
         68:9e:fd:db:f2:c9:36:f6:38:9e:76:e1:5a:cf:a1:b4:ad:12:
         5b:dd:a2:a5:58:3a:b3:7e:5b:f9:f1:c6:d7:a0:46:16:45:67:
         64:9c:fc:f6:6a:26:24:c6:c8:50:0b:4a:e8:3b:04:aa:0d:4d:
         85:f4:d6:75:fc:9f:71:51:fa:d5:ae:02:c7:53:60:fe:24:c9:
         10:9e:7c:37:9c:29:64:26:ca:65:28:13:ea:ab:7f:92:79:f8:
         32:f9:40:60:f9:39:ad:cd:cd:a3:34:1e:bd:75:fe:a4:99:c3:
         42:78:aa:3d:41:38:2a:7b:e5:ad:9c:1a:a8:46:3e:7d:89:d1:
         4b:7c:05:85:9b:2f:8d:24:f8:af:ef:ed:3e:dd:c8:bc:c6:97:
         8d:96:ae:a5:ff:e5:38:1c:81:bb:7a:f8:e3:19:68:e5:05:b2:
         8e:17:71:6a:29:d7:ac:4f:a9:00:26:cb:1c:43:3f:f8:33:d3:
         2f:eb:3b:e8:6e:71:df:94:39:19:3d:9a:18:24:44:87:e7:67:
         b2:9a:56:e0:e7:4d:21:3c:bd:78:40:a7:02:72:9a:c8:5b:d0:
         9d:6b:21:23:a8:b3:02:e8:dc:d5:59:19:ab:a5:9a:48:b8:99:
         59:a5:fd:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkjfo1z2wz0WvB/7PxFk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWMxMDA3NzQ2OTgxZmNjNDA4ODM5OTY1YjE2NzFjMDM3
ZDEyMWIwHhcNMjYwNTEzMDkwMTUzWhcNMjYwNTE0MDkwMTUzWjAzMTEwLwYDVQQD
EygwZjZiNDZiMmIxN2JmMTJhZjQ2MjY4YzRlYmNiNGZmYzdiZTc4NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYwf345wjxf7JqPSRzifac6pQ+//
oWGoyYGoLjVACza6fxxQ2C2EdxL0siAZAc43nk8c8PgL/gmYwVs5nF7sMAJ+9m/9
8U4Wgk/FtXJlRe6l/QTT3oaGrWgLmpDHOoow8u8IeWAYRZsfDl83XhwlgG/G9wuU
WmWHvD5ocwEzpAnkzReUtEE2n5ygkGxaCQkKlOO08pdbMK76VcVoAdtgMT3/0E3t
8s9IeficMaiSrgUBzO92Gul6w0E516UqD6/yWew6sriqDbfkK2FO5yjtpTRem+YW
np4xtDMRwcwrpYIdd1lRbWuzvX5G+VLgBZX5plVzW+vh/vgAxYsaxDJjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9rRrKxe/Eq9GJoxOvLT/x754bkMB8GA1UdIwQY
MBaAFMKcEAd0aYH8xAiDmWWxZxwDfRIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDkt
OGZjOTMwZDg3MDJhLzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDktOGZjOTMwZDg3MDJh
LzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdViwctWy
ZafCTugtEidDZFHCaJ792/LJNvY4nnbhWs+htK0SW92ipVg6s35b+fHG16BGFkVn
ZJz89momJMbIUAtK6DsEqg1NhfTWdfyfcVH61a4Cx1Ng/iTJEJ58N5wpZCbKZSgT
6qt/knn4MvlAYPk5rc3NozQevXX+pJnDQniqPUE4KnvlrZwaqEY+fYnRS3wFhZsv
jST4r+/tPt3IvMaXjZaupf/lOByBu3r44xlo5QWyjhdxainXrE+pACbLHEM/+DPT
L+s76G5x35Q5GT2aGCREh+dnsppW4OdNITy9eECnAnKayFvQnWshI6izAujc1VkZ
q6WaSLiZWaX9vg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:20:30 2026 by rpki-client