Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          BkrQ14hhH+CHkSObkO3KPHocKJ+TEqN5b9MRxHmSm8Q=
Subject key identifier:   C6:FE:FD:31:B7:5A:36:EB:DF:68:E3:70:8E:97:9D:CA:4C:39:51:DE
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       019E1D901E2B65815F67C7502FE7E01CE97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          1387
Signing time:             Tue 12 May 2026 19:00:44 +0000
Manifest this update:     Tue 12 May 2026 19:00:44 +0000
Manifest next update:     Wed 13 May 2026 19:00:44 +0000
Files and hashes:         1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: MaUygdJ9tqOVrrzJ9AZs9HBXRCTfhtL4VbhyfEQr8/c=)
                          2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
                          3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:1e:2b:65:81:5f:67:c7:50:2f:e7:e0:1c:e9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: May 12 19:00:44 2026 GMT
            Not After : May 13 19:00:44 2026 GMT
        Subject: CN=c6fefd31b75a36ebdf68e3708e979dca4c3951de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:3f:0c:e4:0d:0e:7c:1e:a6:3d:f0:3a:3d:
                    12:09:b2:60:03:84:2d:ea:18:1b:fe:ab:e3:a4:92:
                    76:91:89:81:95:3a:72:06:89:94:0f:2e:9e:86:52:
                    9e:97:ed:b2:79:6e:15:1e:72:33:fa:4d:4a:2d:fb:
                    3c:24:04:8b:e8:64:df:be:58:5e:d2:25:a9:45:b0:
                    a2:69:33:c8:cc:d9:8c:ac:1a:5d:a2:2c:b2:c9:d6:
                    f3:a8:79:0e:7b:21:dd:c1:da:f0:3e:29:48:64:93:
                    64:75:52:c9:6f:ce:08:81:85:e5:a8:0b:85:37:a0:
                    a6:01:89:4b:52:d0:1f:63:23:96:bc:d3:e8:61:3c:
                    89:7e:2b:68:04:a6:e9:04:6d:66:ab:95:9f:f8:10:
                    0e:fe:31:30:42:d4:71:75:6f:04:2b:d1:c5:52:3d:
                    76:f8:3c:26:93:a3:a3:b1:1b:44:21:63:f1:a3:14:
                    8f:57:63:10:5d:cd:93:9a:c8:0c:34:39:4d:5e:11:
                    89:8b:4e:8d:7c:3f:47:ce:12:0c:cd:63:17:1c:d3:
                    2e:1d:d5:b5:ac:89:f3:7c:7b:13:dc:64:63:a3:73:
                    1b:86:08:92:90:9c:0e:4a:20:23:09:cf:9b:d1:55:
                    ad:0c:14:25:cd:9d:97:42:40:50:dc:8f:bb:75:19:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FE:FD:31:B7:5A:36:EB:DF:68:E3:70:8E:97:9D:CA:4C:39:51:DE
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:fb:a9:20:51:c0:b5:8c:a7:bf:63:69:66:29:94:e0:c7:
         1f:c8:cd:79:0c:6d:71:2b:0c:e5:f9:d7:93:43:55:1f:aa:33:
         9e:5a:a7:23:e2:b3:de:d0:8e:e6:0e:c2:9a:aa:ac:fb:89:5b:
         80:aa:63:3f:61:0e:a1:a6:25:63:2a:ef:ab:a8:9b:2a:b5:86:
         90:46:9e:9b:17:b9:6c:7e:5e:d3:f0:82:7a:ad:8e:e0:a3:78:
         57:2e:89:d1:39:0a:35:17:81:a5:09:06:29:c4:58:db:d8:07:
         b0:38:1e:27:f8:61:4f:23:32:00:55:b6:a7:b4:f2:bc:50:32:
         0e:d1:4b:db:0c:c6:54:b1:1a:69:db:30:ee:a7:63:4e:b5:64:
         36:5d:cb:16:14:81:ed:70:33:ec:fb:5e:79:f7:68:e9:68:d6:
         ab:07:af:77:db:f5:83:d1:0f:c8:c7:bf:ff:14:06:57:3e:fb:
         0f:07:5f:19:03:0c:7c:84:ed:ad:20:e1:37:59:70:6a:e7:07:
         92:36:3c:35:4d:c6:2c:93:35:95:88:af:db:a7:12:9d:24:44:
         6f:eb:ff:23:76:74:c8:b5:b9:8e:72:eb:c5:4f:ee:d0:8b:b9:
         cd:9d:c7:98:0c:1c:4e:5d:22:b5:62:bc:50:e3:ec:db:f5:73:
         d4:e2:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:41 2026 by rpki-client