Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          gIqPmfp3ZH9c9x/DLqQo9zZaBI5AuTcGfVUamKnM15s=
Subject key identifier:   66:8C:10:6E:12:C7:E0:66:F8:5E:0D:F9:8E:9D:13:29:E4:FF:40:4B
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       019E1DC70532D9D7551CC98BFD6EE8605A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          040C
Signing time:             Tue 12 May 2026 20:00:42 +0000
Manifest this update:     Tue 12 May 2026 20:00:42 +0000
Manifest next update:     Wed 13 May 2026 20:00:42 +0000
Files and hashes:         1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=)
                          2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: 6S5f9Gg/hN4PYIABnb3w43erZDRAHZHb7ftnxSESGwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:05:32:d9:d7:55:1c:c9:8b:fd:6e:e8:60:5a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: May 12 20:00:42 2026 GMT
            Not After : May 13 20:00:42 2026 GMT
        Subject: CN=668c106e12c7e066f85e0df98e9d1329e4ff404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:30:ca:51:2f:f1:43:8f:23:4a:d9:ba:8a:
                    1e:5d:27:e2:16:0e:df:d1:67:90:87:6b:53:0c:e6:
                    b1:51:31:7e:3d:56:53:2f:c8:9c:62:a3:b8:67:b0:
                    4e:bd:5f:75:45:c0:41:c4:46:5e:37:f7:4c:5f:6b:
                    22:a3:d4:ec:90:9b:36:87:e1:46:64:81:00:01:36:
                    f3:35:be:c6:ab:1c:1c:47:b6:10:74:e1:bb:79:cb:
                    0b:9c:45:12:93:f8:bb:cd:43:1c:1c:7c:aa:e4:a7:
                    d8:f8:e3:db:db:db:3c:bf:63:5a:2a:17:c0:38:bb:
                    f4:02:04:e8:72:74:bf:b3:bf:64:21:0f:00:97:1f:
                    6c:e0:d4:1c:eb:fd:27:b4:f4:fa:43:cd:a5:07:cc:
                    9c:d7:27:5e:e8:75:36:21:45:54:f1:7c:ee:68:6f:
                    57:fc:63:e1:70:e9:15:c4:dd:72:00:90:22:e8:08:
                    94:64:79:50:aa:06:da:42:68:c7:7e:c9:e9:25:b8:
                    41:2a:3d:8b:4a:90:55:fd:f1:bf:d1:3d:e4:e3:46:
                    fb:42:13:87:d5:48:cf:d8:7c:4e:23:8c:02:dd:fc:
                    d7:b2:1f:c2:6f:b6:fa:4c:f9:60:43:89:c8:e7:33:
                    e9:54:b0:67:84:9d:34:6a:d5:af:83:95:84:f6:62:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:10:6E:12:C7:E0:66:F8:5E:0D:F9:8E:9D:13:29:E4:FF:40:4B
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:a7:c2:1f:21:c6:68:df:d8:55:fe:89:56:8c:21:68:9d:ea:
         18:db:8f:c1:cc:a5:ae:f9:40:ab:0b:84:bd:68:41:88:c2:3d:
         80:0c:9b:ae:45:b6:2b:53:69:01:a3:8d:c2:56:de:4d:66:a3:
         34:9a:1b:f3:a5:0b:ad:25:9b:1d:c8:5f:66:9c:26:40:af:dd:
         e3:47:ad:2d:23:8c:9e:c7:83:ad:a7:2b:e7:0f:a7:6e:8e:45:
         84:b4:98:64:01:44:de:68:a3:95:fe:9e:0c:bd:c0:3e:11:73:
         93:4d:e4:b9:a0:49:cf:c5:01:1d:e2:9e:0c:c8:29:a6:6e:66:
         ac:67:92:1a:0c:ed:71:8c:b0:1d:43:c8:1a:59:1c:a5:52:35:
         63:8f:dd:7a:ff:4c:4f:b8:5c:f5:39:ea:f1:b7:da:ef:08:7d:
         2c:88:28:a6:a6:6b:de:94:cc:fa:de:b5:2d:8a:e8:b0:9f:c6:
         29:c8:e3:9c:ec:a2:c9:ed:b9:6c:4b:0e:81:0b:45:16:4b:78:
         34:9a:29:5f:b6:8f:5c:64:0d:0f:ef:55:7c:e8:a1:b2:05:63:
         1b:57:47:c6:2a:53:1b:5e:c3:4f:3d:63:92:52:16:c5:9e:e5:
         6f:2e:ff:95:50:66:b8:e2:26:be:55:dc:db:17:a4:c9:e9:2c:
         04:f3:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:19 2026 by rpki-client