Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          BcmaZVU1JmaCDUusE/bVe2bBKGVZYaW8MnZfIAnj0AM=
Subject key identifier:   93:B4:DE:A1:2D:8F:30:FB:E5:9B:A7:6E:17:D4:4E:33:0F:C1:E1:2D
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       019E1D229AB6955F3A5D97AD81423A4BFFF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 17:01:07 +0000
Manifest this update:     Tue 12 May 2026 17:01:07 +0000
Manifest next update:     Wed 13 May 2026 17:01:07 +0000
Files and hashes:         1: DlsgUx_zkNi2pPjWqZwrQw6D24o.roa (hash: EVqGILzQxIxgUUNelK85PnHTo4kqqnsSyA/DvDkmwWs=)
                          2: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
                          3: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: +fgg+m0owl6jVUhUuV7hMavEPsN035evpsA5hUFJcUQ=)
                          5: liXHqxDKW9rov90i198klg0eTO4.roa (hash: RxCaACto/lUWWczrW9p1uUcWLXs9X7YOE0qlRt7M2kM=)
                          6: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
                          7: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
                          8: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
                          9: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:9a:b6:95:5f:3a:5d:97:ad:81:42:3a:4b:ff:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: May 12 17:01:07 2026 GMT
            Not After : May 13 17:01:07 2026 GMT
        Subject: CN=93b4dea12d8f30fbe59ba76e17d44e330fc1e12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:88:85:19:9b:0c:9e:7f:d5:19:eb:e6:82:
                    84:c0:37:21:ac:de:e3:0a:98:96:51:ba:40:38:c1:
                    d7:3f:d7:33:6d:3f:de:7e:2e:81:c7:99:f2:c2:b2:
                    e4:e8:e8:86:37:68:21:01:b7:b9:2e:c4:6d:d2:90:
                    4f:d5:e6:10:40:d1:7a:f3:53:12:2c:72:72:24:e7:
                    cc:98:8a:35:63:22:6f:a9:a7:99:05:0a:28:3b:1f:
                    87:9f:c9:e5:a1:d9:b3:70:16:71:bf:26:ad:a8:03:
                    81:b0:aa:c9:f3:36:c7:42:d6:37:7a:63:4c:32:2b:
                    64:3f:22:46:fc:dd:20:80:82:2d:ae:71:05:73:46:
                    39:fb:c6:3b:90:4b:21:85:31:a2:00:ae:ab:ee:00:
                    98:f8:27:55:4f:67:35:1e:fb:88:7a:e3:0e:fb:8d:
                    9a:76:ab:ee:8c:d3:2d:33:30:61:6b:6a:2e:09:6b:
                    6f:9c:61:de:be:a6:4b:f6:ce:dc:02:72:f2:45:a8:
                    bc:7e:47:02:0e:e9:4c:ab:92:ce:b4:f8:06:06:df:
                    af:3f:c7:85:19:dd:b2:6d:c0:14:65:3e:fe:1d:75:
                    84:70:a2:3b:7b:0a:dd:f5:2e:5f:87:99:fe:5d:12:
                    f5:89:f6:00:86:a2:71:c2:29:bd:00:ec:03:45:f3:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B4:DE:A1:2D:8F:30:FB:E5:9B:A7:6E:17:D4:4E:33:0F:C1:E1:2D
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:dc:01:56:4a:60:5b:24:46:e4:c5:fc:c4:8c:3b:c1:7b:
         8b:d4:7d:95:c9:96:e0:a5:54:08:b6:fd:58:7c:99:07:68:3f:
         53:73:d0:10:4e:db:ed:c4:33:e1:af:95:38:2f:09:ae:56:d2:
         ea:0d:26:26:af:e1:6e:d0:e5:8e:74:be:d0:75:48:fb:ce:35:
         26:42:81:a3:1e:2e:88:28:9c:81:21:bb:b8:70:97:99:09:a2:
         fb:3e:1e:22:48:b6:18:8f:97:a7:df:c6:b4:dd:28:0a:23:5d:
         84:e1:67:18:f4:e0:e8:be:64:87:ac:31:c0:76:9d:13:50:52:
         4a:f5:26:d4:b0:df:46:89:52:26:9e:86:fe:5e:95:3e:c6:e5:
         07:d7:b4:64:9e:47:76:f6:06:f7:86:bd:ac:28:4b:f6:90:86:
         03:2e:80:68:7d:38:8c:47:99:13:5c:3a:df:60:6c:49:80:79:
         2c:7b:8d:6b:2a:ad:8d:c3:93:5c:c4:09:64:30:21:2d:1c:5a:
         be:7f:c8:1e:14:d0:5b:52:3a:4d:dd:72:c9:07:a6:2d:7c:42:
         23:7b:33:39:83:a7:c3:39:a0:d2:8f:cd:4c:84:bb:45:64:09:
         63:41:1c:10:70:1b:c4:7a:f7:b8:d5:97:f1:ea:68:8f:20:f1:
         6f:ea:ce:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIpq2lV86XZetgUI6S//wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjYwNTEyMTcwMTA3WhcNMjYwNTEzMTcwMTA3WjAzMTEwLwYDVQQD
Eyg5M2I0ZGVhMTJkOGYzMGZiZTU5YmE3NmUxN2Q0NGUzMzBmYzFlMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui+IhRmbDJ5/1Rnr5oKEwDchrN7j
CpiWUbpAOMHXP9czbT/efi6Bx5nywrLk6OiGN2ghAbe5LsRt0pBP1eYQQNF681MS
LHJyJOfMmIo1YyJvqaeZBQooOx+Hn8nlodmzcBZxvyatqAOBsKrJ8zbHQtY3emNM
MitkPyJG/N0ggIItrnEFc0Y5+8Y7kEshhTGiAK6r7gCY+CdVT2c1HvuIeuMO+42a
dqvujNMtMzBha2ouCWtvnGHevqZL9s7cAnLyRai8fkcCDulMq5LOtPgGBt+vP8eF
Gd2ybcAUZT7+HXWEcKI7ewrd9S5fh5n+XRL1ifYAhqJxwim9AOwDRfMKIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO03qEtjzD75ZunbhfUTjMPweEtMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyPcAVZK
YFskRuTF/MSMO8F7i9R9lcmW4KVUCLb9WHyZB2g/U3PQEE7b7cQz4a+VOC8JrlbS
6g0mJq/hbtDljnS+0HVI+841JkKBox4uiCicgSG7uHCXmQmi+z4eIki2GI+Xp9/G
tN0oCiNdhOFnGPTg6L5kh6wxwHadE1BSSvUm1LDfRolSJp6G/l6VPsblB9e0ZJ5H
dvYG94a9rChL9pCGAy6AaH04jEeZE1w632BsSYB5LHuNayqtjcOTXMQJZDAhLRxa
vn/IHhTQW1I6Td1yyQemLXxCI3szOYOnwzmg0o/NTIS7RWQJY0EcEHAbxHr3uNWX
8epojyDxb+rODg==
-----END CERTIFICATE-----
Generated at Tue May 12 23:30:58 2026 by rpki-client