Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          FQCf/KgvveYcKX2TZOpVubv3Cog1hv/sEenlyFBx0EI=
Subject key identifier:   97:0B:1A:25:E4:CE:7F:F2:6A:39:BF:A4:BA:A3:FB:B5:86:F1:73:B4
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       019E1F10DAF2D334B675190A379928FFC217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          0CEF
Signing time:             Wed 13 May 2026 02:00:58 +0000
Manifest this update:     Wed 13 May 2026 02:00:58 +0000
Manifest next update:     Thu 14 May 2026 02:00:58 +0000
Files and hashes:         1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: GrfVTqgGrKnL8/RsKQBtO9B1Fi0lVUv5j3f08MHXCQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:da:f2:d3:34:b6:75:19:0a:37:99:28:ff:c2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: May 13 02:00:58 2026 GMT
            Not After : May 14 02:00:58 2026 GMT
        Subject: CN=970b1a25e4ce7ff26a39bfa4baa3fbb586f173b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:15:84:cc:f9:23:2c:88:d7:67:69:df:3d:
                    7d:e0:67:ec:07:7b:40:eb:35:04:96:81:8f:ad:3d:
                    04:dd:cc:30:ee:12:7d:b4:e8:d5:5b:22:c3:84:44:
                    7f:3a:5a:2d:98:b5:8b:3b:b2:58:6f:c4:7c:19:5a:
                    9b:1e:17:9d:c7:73:c5:a0:2a:c5:07:78:5a:4a:41:
                    7e:80:07:47:c6:96:e6:28:2e:10:9d:10:09:8a:91:
                    01:22:a8:5b:c7:ca:e3:d2:2f:82:76:2f:fc:fe:17:
                    66:58:68:98:6b:2c:2c:f6:2a:53:1b:6b:2d:0e:0a:
                    07:4a:66:da:4d:8e:b1:8c:cb:8e:b0:38:e2:31:5b:
                    d3:84:2b:c5:a5:77:d4:39:21:82:95:d4:ee:59:00:
                    71:66:7c:6d:4b:b8:1f:5d:60:8a:b2:c5:cc:f6:cc:
                    24:32:b8:89:8b:2e:6b:2b:9b:83:c1:65:3b:86:70:
                    40:db:87:c5:fd:96:82:e0:af:4a:1c:dc:ea:c3:e3:
                    76:b3:c9:02:bf:42:3b:ec:49:89:1b:28:e7:df:8f:
                    1e:82:bf:a9:65:2a:b0:42:27:cf:de:e2:e2:75:3f:
                    da:46:80:18:1f:3f:e8:1d:a3:f0:62:45:83:97:2a:
                    71:2e:78:d8:4d:62:c5:93:11:61:be:36:45:34:d7:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0B:1A:25:E4:CE:7F:F2:6A:39:BF:A4:BA:A3:FB:B5:86:F1:73:B4
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:a5:73:a4:26:3c:60:c5:ed:92:b8:8f:e7:d9:e5:be:f9:
         ef:b0:c2:4a:85:26:80:93:96:e1:08:2f:94:57:fd:d2:68:c3:
         ed:f3:5f:a6:a1:58:d5:ce:a1:14:f3:da:df:d7:ab:db:1a:86:
         fc:3e:87:6d:4e:38:bd:f1:17:e1:92:ed:1e:69:68:68:81:5d:
         6a:a9:c4:bc:37:ae:55:e5:89:d9:79:54:0a:08:9e:a4:50:79:
         ca:a4:ed:dc:a6:8a:24:1d:d5:32:d1:6f:ba:9a:cc:66:bc:e9:
         32:a1:09:4c:d6:12:cf:81:a3:ba:f9:b4:96:89:08:8a:83:0a:
         7e:66:b8:df:e0:0c:44:95:90:42:a7:55:c3:e4:0e:87:70:dc:
         cf:b8:2e:0d:fd:fb:82:7d:89:56:0b:62:2e:3d:bf:5f:df:81:
         51:da:7e:ea:a1:95:37:2e:94:cb:0a:d7:b2:20:0b:85:d4:63:
         8a:5a:25:f5:4a:dd:f1:45:7c:e4:d8:d2:b7:7d:d2:aa:dc:a3:
         e8:74:ec:93:a4:cd:cb:46:35:4d:54:c1:1a:87:1f:a4:16:65:
         1f:64:c6:64:6a:d2:b5:6a:6d:65:55:9e:2b:53:90:3e:22:d5:
         27:78:17:c8:85:67:0e:96:02:b6:84:f7:a4:f8:8d:c7:ed:78:
         28:be:bb:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fENry0zS2dRkKN5ko/8IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm
MDNjYmMwHhcNMjYwNTEzMDIwMDU4WhcNMjYwNTE0MDIwMDU4WjAzMTEwLwYDVQQD
Eyg5NzBiMWEyNWU0Y2U3ZmYyNmEzOWJmYTRiYWEzZmJiNTg2ZjE3M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGYVhMz5IyyI12dp3z194GfsB3tA
6zUEloGPrT0E3cww7hJ9tOjVWyLDhER/OlotmLWLO7JYb8R8GVqbHhedx3PFoCrF
B3haSkF+gAdHxpbmKC4QnRAJipEBIqhbx8rj0i+Cdi/8/hdmWGiYayws9ipTG2st
DgoHSmbaTY6xjMuOsDjiMVvThCvFpXfUOSGCldTuWQBxZnxtS7gfXWCKssXM9swk
MriJiy5rK5uDwWU7hnBA24fF/ZaC4K9KHNzqw+N2s8kCv0I77EmJGyjn348egr+p
ZSqwQifP3uLidT/aRoAYHz/oHaPwYkWDlypxLnjYTWLFkxFhvjZFNNdo5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcLGiXkzn/yajm/pLqj+7WG8XO0MB8GA1UdIwQY
MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et
OTY2NmVkZWVlMWUzLzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz
LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlqlc6Qm
PGDF7ZK4j+fZ5b7577DCSoUmgJOW4QgvlFf90mjD7fNfpqFY1c6hFPPa39er2xqG
/D6HbU44vfEX4ZLtHmloaIFdaqnEvDeuVeWJ2XlUCgiepFB5yqTt3KaKJB3VMtFv
uprMZrzpMqEJTNYSz4Gjuvm0lokIioMKfma43+AMRJWQQqdVw+QOh3Dcz7guDf37
gn2JVgtiLj2/X9+BUdp+6qGVNy6UywrXsiALhdRjilol9Urd8UV85NjSt33Sqtyj
6HTsk6TNy0Y1TVTBGocfpBZlH2TGZGrStWptZVWeK1OQPiLVJ3gXyIVnDpYCtoT3
pPiNx+14KL67Uw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:43:31 2026 by rpki-client