Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File:                     w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier:          AHImajV90kygCwLboc/iwg596AOg2w3lOFkqQQ2lZoA=
Subject key identifier:   D5:31:2A:E9:FB:EB:FA:28:DC:DC:27:50:E1:6F:76:A9:29:F6:9C:D2
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer:       /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial:       019E1ED9E88B9A50CF9BF266E7040F5B3CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number:          11CC
Signing time:             Wed 13 May 2026 01:00:57 +0000
Manifest this update:     Wed 13 May 2026 01:00:57 +0000
Manifest next update:     Thu 14 May 2026 01:00:57 +0000
Files and hashes:         1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: aBS2gosCAwnaz8fKuqOWxS551CjZntSX2FM9jK+bJlE=)
                          2: x4-mHKJb7bMwY9GE86KAS0BLgKg.roa (hash: ++8zNyvezH+pL+l7TXoCaIybHlTSo3lc/2BXe8F2UWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e8:8b:9a:50:cf:9b:f2:66:e7:04:0f:5b:3c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
        Validity
            Not Before: May 13 01:00:57 2026 GMT
            Not After : May 14 01:00:57 2026 GMT
        Subject: CN=d5312ae9fbebfa28dcdc2750e16f76a929f69cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:a4:0d:cd:bf:19:b9:72:70:18:9e:f9:33:
                    aa:05:2a:e6:87:8c:78:bf:c9:ff:f3:28:e1:3d:ee:
                    d7:c3:d9:00:6b:7f:8e:31:55:62:e8:07:a0:69:29:
                    54:ed:e6:55:99:35:9d:6f:ce:be:4f:c6:7f:70:4f:
                    2b:8f:54:97:d4:73:f6:82:6c:97:f9:2f:13:0b:93:
                    b6:8d:ee:91:65:8d:1b:03:d1:76:5e:2d:92:3d:f9:
                    6a:54:84:f8:e6:71:f6:cc:55:9f:79:80:7f:18:e7:
                    38:df:6c:ee:2e:25:d5:10:c6:86:f2:7e:f8:4a:fd:
                    c5:3a:14:e5:8e:4b:b4:53:9f:f9:eb:97:58:70:81:
                    bf:8a:3a:c6:8c:3c:68:e7:0a:05:d6:ee:3c:d9:60:
                    47:1f:e6:30:a2:06:42:11:b1:81:c4:af:af:65:d6:
                    77:da:72:f9:8f:cb:90:bd:6c:91:39:42:1b:97:16:
                    23:b6:04:86:a7:4f:bc:08:86:e7:fc:ec:69:e2:9b:
                    b1:69:ba:0e:79:53:1c:1d:2b:0d:48:26:13:b9:76:
                    ab:8a:75:b7:4f:67:93:e8:c1:ca:ce:ac:51:a7:83:
                    1f:85:ac:e9:d1:73:e5:82:8e:c7:78:78:94:9f:2a:
                    5c:08:c9:f5:36:c8:d2:81:bf:51:11:d7:77:8e:03:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:31:2A:E9:FB:EB:FA:28:DC:DC:27:50:E1:6F:76:A9:29:F6:9C:D2
            X509v3 Authority Key Identifier:
                keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:f9:15:17:c7:aa:13:cd:d8:2f:38:f4:24:0a:b5:e5:d2:
         10:34:64:ea:cf:86:5d:6a:c6:5d:ec:13:bb:34:04:34:9c:3b:
         49:09:b6:e7:ef:ad:a0:8c:a5:6f:1f:1c:6a:47:c3:d9:c5:c9:
         6f:ae:4b:13:7c:01:2a:7c:29:64:bd:f0:24:bc:8d:a0:cf:28:
         97:70:39:92:c5:3b:5f:dc:ee:59:7a:ff:23:ad:18:55:46:25:
         b4:1a:87:65:56:e7:25:e9:0c:82:a0:91:72:1a:81:46:82:b1:
         46:81:b6:cd:98:16:03:f6:98:c4:23:8d:ac:51:35:20:e1:97:
         61:65:24:d8:5c:cd:74:0f:76:1c:f8:dd:5c:e4:63:41:05:c6:
         a4:b7:12:65:a7:81:56:f2:9f:ba:09:17:59:eb:3e:6b:b9:5f:
         ed:43:30:52:08:f8:56:c2:86:16:3d:d3:c2:cd:7c:3c:0f:3c:
         ee:16:c6:15:98:b7:b3:a3:61:01:20:bc:ed:84:d8:2f:cf:a4:
         41:90:00:8a:e2:fd:0e:d4:ed:3c:97:0c:b9:bf:ae:b4:8b:de:
         fe:b0:ef:d5:76:55:d9:07:6d:bc:7b:c3:64:b0:42:2d:44:40:
         83:9f:67:a6:a4:40:c4:87:29:50:9d:de:22:43:a5:b1:e3:ab:
         a4:9c:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:53:06 2026 by rpki-client