Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File:                     WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier:          v1PcZiyw7+2lWXkfrBJPHPZ4bcVAdBLUBxFmq0Pw/eM=
Subject key identifier:   CD:3B:16:95:4A:CB:F6:1F:68:C1:42:42:FD:B9:10:6F:15:70:AC:89
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer:       /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial:       019E1EA37941F64C203465568ABF48144402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number:          0E60
Signing time:             Wed 13 May 2026 00:01:30 +0000
Manifest this update:     Wed 13 May 2026 00:01:30 +0000
Manifest next update:     Thu 14 May 2026 00:01:30 +0000
Files and hashes:         1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
                          2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: Ds/fl4jJYikklZwb9F56dxbHbJWcdhz0xFEgSdUiFY8=)
                          3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:79:41:f6:4c:20:34:65:56:8a:bf:48:14:44:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
        Validity
            Not Before: May 13 00:01:30 2026 GMT
            Not After : May 14 00:01:30 2026 GMT
        Subject: CN=cd3b16954acbf61f68c14242fdb9106f1570ac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:7e:71:59:f4:ca:eb:b3:7f:e9:6b:37:aa:
                    ab:b3:2d:18:e7:4f:2c:0a:78:94:d0:df:7b:a9:e6:
                    b7:ba:9a:7f:1b:ef:56:de:0e:e2:ef:cb:2d:8b:31:
                    e7:82:cd:d2:4f:7a:bf:29:54:4e:7f:7e:16:7f:5c:
                    be:81:b0:6f:3a:2f:63:8d:a5:04:30:e0:06:4b:81:
                    d7:d7:11:53:05:37:a8:c1:03:3e:66:cc:a2:d0:1d:
                    cd:14:02:91:8d:a5:59:4c:8a:86:69:21:30:00:c9:
                    b9:b5:39:8a:eb:a2:17:67:c0:ff:fe:1a:be:8c:d6:
                    e9:89:1e:36:dd:c6:5d:5c:5d:f6:ba:3b:81:5f:0a:
                    ac:60:c2:ee:c8:48:95:9f:d2:b3:2a:9d:4b:a5:c3:
                    a2:84:70:a1:aa:0e:14:70:c7:22:35:d7:e0:87:75:
                    d2:7d:10:2b:73:b7:22:21:f4:ba:12:67:d4:27:be:
                    b6:b6:87:fc:7c:be:ec:1d:9e:bf:9f:33:2d:77:8a:
                    ae:cd:a3:57:84:69:c5:3d:dc:d8:fb:a1:82:55:4b:
                    bb:3d:b0:8e:eb:51:d1:62:55:06:25:bc:ba:21:2a:
                    98:6f:08:75:4b:90:6e:10:1a:04:65:77:de:14:fa:
                    04:ab:11:db:2b:60:8c:1b:5e:ab:44:3e:0e:fd:0c:
                    4d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:16:95:4A:CB:F6:1F:68:C1:42:42:FD:B9:10:6F:15:70:AC:89
            X509v3 Authority Key Identifier:
                keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:36:07:a2:ce:ed:0c:4b:9f:bd:59:d4:85:86:4d:57:2a:
         36:d8:09:ea:76:c8:98:84:e7:8d:54:f1:02:f5:9e:ff:b1:fc:
         28:f3:c7:ed:8f:76:7d:1c:35:fe:b8:69:e3:32:9d:8c:d3:71:
         85:5e:bd:47:bf:16:c1:d3:c3:de:b6:e5:25:a6:a3:1c:55:24:
         ba:2f:5f:bd:42:b8:b1:7f:51:1a:e4:fc:1f:a0:7a:dc:c1:3b:
         40:e9:3b:fb:3d:11:e3:d1:89:14:50:6f:9a:98:13:dc:cc:af:
         aa:76:57:84:26:b9:9d:82:c8:53:e8:dc:bf:83:a0:76:88:92:
         ca:2e:eb:f8:74:f9:8b:8e:ee:be:28:89:87:a7:51:6a:23:65:
         54:6d:80:71:7e:3d:67:94:4c:d6:34:d1:fd:04:a5:f8:99:3b:
         fc:f8:70:4d:12:87:ed:85:1f:29:9e:1a:88:ea:5c:cf:0f:5d:
         4a:5f:18:e3:32:09:71:17:f7:ef:77:c8:91:d7:5f:b8:e1:71:
         23:36:60:aa:b4:bc:cb:a7:03:2c:33:ac:51:4c:eb:9a:07:c7:
         b3:57:aa:d3:9c:6f:3b:1c:7c:db:81:57:c2:46:a5:84:30:cc:
         4b:e3:7f:02:1b:1e:a9:9d:44:4c:e7:84:b3:1b:1a:2b:62:22:
         e7:8b:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:31 2026 by rpki-client