Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File:                     1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier:          FGFUJJL3gSFum2XTPMBKkMMtCUseBLhh4wDCysKvWCM=
Subject key identifier:   97:AC:9E:47:8D:CE:72:39:4E:E9:7C:83:63:05:81:F6:54:E3:1C:FF
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer:       /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial:       019E1D910C545599E8F461AD745F0D9F18EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number:          106B
Signing time:             Tue 12 May 2026 19:01:45 +0000
Manifest this update:     Tue 12 May 2026 19:01:45 +0000
Manifest next update:     Wed 13 May 2026 19:01:45 +0000
Files and hashes:         1: 0HKg8uH6cdYkhCmod68CGVyEJVY.roa (hash: nHekJ9B0E/EBXFK9sjaa2GSBNkwPlvZK9aL2VrpgqLc=)
                          2: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: XG76vakHMHoDukFvP4nB4KeKCUZW/usbT6CR0uV35po=)
                          3: krfpUOsKk9DoFNPp057CENG5hQQ.roa (hash: bEXca+e8qKhhGx3/Uy1v1Ih1d41nnDuRNWadtn30SPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:0c:54:55:99:e8:f4:61:ad:74:5f:0d:9f:18:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
        Validity
            Not Before: May 12 19:01:45 2026 GMT
            Not After : May 13 19:01:45 2026 GMT
        Subject: CN=97ac9e478dce72394ee97c83630581f654e31cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:11:fe:cf:8f:67:27:6b:42:de:61:24:e2:
                    9f:d5:e2:51:1a:a3:7e:d0:24:8c:ca:b7:4e:35:a0:
                    7a:7b:2f:9c:24:be:5b:b6:fd:b4:b2:ed:6a:57:c1:
                    04:5b:3d:d9:9d:c2:24:62:f8:fb:4a:79:24:8b:45:
                    fc:b6:56:ce:94:b9:ab:74:0d:4d:fc:93:8b:06:5c:
                    13:fb:96:b5:f5:5b:0a:b7:4b:54:ac:3f:69:ac:9c:
                    98:76:0d:57:9a:05:d1:19:22:5f:62:e2:1a:18:2e:
                    88:05:eb:41:c2:95:80:02:3b:64:dc:2a:69:29:f5:
                    6e:b1:d8:5b:f8:5f:d6:2d:05:91:e4:e9:f8:c5:7a:
                    49:b3:ec:c3:06:20:9c:99:77:d4:44:73:e3:45:15:
                    0a:ad:90:27:41:7e:f4:35:19:a1:f1:73:96:61:2b:
                    78:04:ac:51:52:eb:65:b4:e2:ec:e5:2e:53:43:79:
                    ff:5f:f9:93:3b:43:8f:f4:8b:d8:85:77:8d:32:d0:
                    d6:9e:b5:a0:be:2c:51:59:c4:30:98:3b:84:6f:d4:
                    cc:11:00:51:f8:52:0b:66:f4:db:84:61:aa:d4:52:
                    33:16:80:ed:6b:d2:96:67:05:c7:eb:52:1d:9d:ae:
                    d0:fc:8f:50:c0:bd:17:4c:e6:28:94:e3:3d:09:cc:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AC:9E:47:8D:CE:72:39:4E:E9:7C:83:63:05:81:F6:54:E3:1C:FF
            X509v3 Authority Key Identifier:
                keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:2c:21:9d:b6:40:0d:37:4c:3d:cf:73:cf:eb:15:d9:a9:
         a1:c0:01:ca:87:60:66:97:c8:6c:26:a3:d9:14:51:97:85:e9:
         91:4f:cf:8d:4f:16:dd:6f:72:44:9e:1a:aa:ef:4b:8c:e6:52:
         41:3e:e2:81:78:6a:89:5c:ec:59:5a:97:ab:60:cb:4e:fa:04:
         b5:07:82:bc:0c:e6:b2:55:cf:a0:d7:82:ce:99:12:c3:d3:56:
         59:4e:14:28:d4:04:75:d1:49:49:52:04:42:32:74:4d:4d:e0:
         de:9d:9e:7d:c9:92:b5:b4:19:7e:49:21:b8:84:0b:59:93:6c:
         30:6f:e3:3a:06:f9:44:2a:cc:6f:e7:25:ce:54:6c:a7:bb:66:
         2a:c3:e0:f8:4d:e7:17:ee:41:35:bb:a7:98:8a:e6:c1:fc:fb:
         8d:3d:8e:de:84:9c:7f:e8:fb:c1:99:db:68:af:ac:44:5e:b5:
         c1:9f:16:a9:d6:0f:be:f9:39:e7:d9:2d:c3:d4:82:33:97:08:
         8d:64:e0:06:52:f4:c0:cf:2c:b8:9c:7b:84:0d:a3:5c:9c:47:
         59:a6:fe:31:ad:9e:80:a6:d3:8c:77:2c:fc:e0:98:aa:b6:b7:
         89:b0:16:e5:50:1d:58:f5:c0:a6:9b:43:e0:f6:82:ef:52:e9:
         c9:39:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:25 2026 by rpki-client