Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
File:                     wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json)
Hash identifier:          1EP0qedXy+nZGoVE/qX5lzJUcX/9+xpnGo/s5a4sRNY=
Subject key identifier:   36:08:1C:EC:BD:E5:55:8A:2C:1B:C1:4A:25:76:1E:0D:2E:F8:50:20
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Certificate issuer:       /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial:       019E1ED9AF57C2BC111C330ADB0BFBE9076C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 01:00:43 +0000
Manifest this update:     Wed 13 May 2026 01:00:43 +0000
Manifest next update:     Thu 14 May 2026 01:00:43 +0000
Files and hashes:         1: Cgd5Jfm0z8iU211-uSATka8FEqw.roa (hash: 6iFZepo1g13JI2QksLW8HVf91tLNVUbHxGnbKXKYWMo=)
                          2: Eijib8iYPDeplyoBLGAmPZORFLE.roa (hash: //KC1lCHcJET8STKi3XrrsGCkj88N/0LPLS69WfA2CM=)
                          3: lmh0HdtE8EG1HtIEfqG-CpL5lWE.roa (hash: iQDEvRLmeD/noBsclLg6BEdBH6bYdpCJwODCMRFPWi8=)
                          4: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: sWOqDg6yuPLmJHIW1+s3a+je7WyGor3ReOphH5f+4Bk=)
                          5: yjfBxV_rdwxlbtWbC0f6CXmYidM.roa (hash: cEHh1mv/vVXkxP03jyzCPQKZKyj1EccWurODavR3WD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:af:57:c2:bc:11:1c:33:0a:db:0b:fb:e9:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: May 13 01:00:43 2026 GMT
            Not After : May 14 01:00:43 2026 GMT
        Subject: CN=36081cecbde5558a2c1bc14a25761e0d2ef85020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:97:69:37:c4:29:8b:30:69:64:e1:9b:05:
                    0b:bf:94:c4:7e:4e:99:fe:b7:b5:f9:33:a2:96:f3:
                    ff:bf:91:a3:1b:82:1a:ca:66:a2:50:48:6d:6a:74:
                    91:4c:23:d0:9b:ae:6e:0d:c8:27:3f:97:d2:02:df:
                    ea:65:d7:63:65:6e:10:ca:14:27:4d:93:b6:25:58:
                    3a:4f:1b:9f:2b:48:a1:66:fb:5d:47:84:2d:df:1e:
                    e6:3e:36:4b:9f:e0:6c:ea:be:68:59:c7:6b:63:21:
                    cb:52:29:19:2c:70:01:81:ed:ce:2d:41:a1:7a:76:
                    cd:38:c2:36:6d:35:12:25:9b:46:5d:90:ba:ee:ff:
                    8e:9e:98:e9:e7:46:28:72:5d:76:24:94:84:f7:7d:
                    0b:b4:d8:2f:e4:b4:25:93:cd:aa:c0:73:78:a4:c3:
                    90:aa:9f:f5:3d:5b:10:89:ac:ab:3d:53:12:a5:cb:
                    83:e9:61:93:57:5e:d3:0c:30:04:a1:da:48:f9:ac:
                    18:e7:c6:29:33:18:8a:7c:0e:ef:b7:75:5e:31:a3:
                    ae:31:6b:66:dd:19:aa:72:6a:42:01:db:76:30:63:
                    51:2a:26:2b:ae:7d:3e:3b:65:cd:e6:5d:fd:57:93:
                    93:98:5c:e0:9a:d4:ba:37:63:1d:0b:c7:37:f5:a5:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:08:1C:EC:BD:E5:55:8A:2C:1B:C1:4A:25:76:1E:0D:2E:F8:50:20
            X509v3 Authority Key Identifier:
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:a8:6a:53:46:97:05:41:0a:6f:8c:4e:0c:52:af:7e:4b:
         db:fa:e4:6c:05:58:e6:e0:fd:c2:99:1a:7d:f5:79:45:92:4b:
         33:e4:c5:da:12:57:89:1d:84:ce:73:e6:e0:2c:f9:b9:7d:f4:
         c7:f4:60:03:40:ff:6d:67:14:a2:76:0d:7c:82:2e:c6:59:32:
         58:6b:3d:65:6e:54:b5:5c:0f:ae:2e:1f:fa:39:17:5d:6a:96:
         06:05:43:95:a7:29:b5:8d:ab:91:40:a0:0d:9e:70:4d:14:70:
         5e:d2:54:f5:1a:5e:c7:3d:0b:fc:39:6b:7b:43:41:ad:67:ec:
         68:22:f9:df:02:27:af:30:81:e0:a9:b2:9f:91:0c:ae:9a:5d:
         2a:f7:4f:9e:ef:d9:0d:f4:c2:5a:55:c8:5b:e2:02:c6:50:5e:
         67:ff:ed:89:a8:9d:71:d1:06:30:01:28:9a:d8:91:87:e6:3e:
         56:bb:8e:96:13:e5:e7:f4:ce:09:81:d7:c7:84:79:76:2a:32:
         c1:71:20:83:b1:ba:c4:40:da:35:35:8c:af:1a:25:85:2f:8e:
         a3:3b:bb:fe:90:b6:53:72:62:4b:cd:8e:be:f1:4c:33:6b:83:
         11:51:54:9f:9e:0c:2a:12:8f:27:75:af:9b:79:dd:f7:07:46:
         fa:d7:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:37 2026 by rpki-client