Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
File:                     0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json)
Hash identifier:          ek2mjurFezYB307ba09Vn0Rf8r6TYYj4o+N/0tocriE=
Subject key identifier:   06:C3:C9:0C:67:E8:E0:5E:54:9F:D7:56:95:2E:96:B3:FC:23:30:A1
Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
Certificate issuer:       /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Certificate serial:       019E1D232023EE2CCBA046E8CA7E4CD47A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
Manifest number:          02EE
Signing time:             Tue 12 May 2026 17:01:41 +0000
Manifest this update:     Tue 12 May 2026 17:01:41 +0000
Manifest next update:     Wed 13 May 2026 17:01:41 +0000
Files and hashes:         1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: aywnAf6d/Z8IOg2svAwEcOj5D3BWueDqMgxBv4BVmGk=)
                          2: W2JVDI-08lmKNZhAYHd2tvRmyTM.roa (hash: ckBzzLd5OwJEVbSyU7U9n0rLQV1aHwoolzgedy1E6y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:20:23:ee:2c:cb:a0:46:e8:ca:7e:4c:d4:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
        Validity
            Not Before: May 12 17:01:41 2026 GMT
            Not After : May 13 17:01:41 2026 GMT
        Subject: CN=06c3c90c67e8e05e549fd756952e96b3fc2330a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:35:2d:3a:72:ac:1c:43:51:bd:1f:6e:34:
                    21:88:d8:9a:6b:e9:99:ec:c1:b5:3a:6d:19:be:a9:
                    9b:7a:c9:1f:97:2b:96:ce:6d:b5:65:8a:ca:23:25:
                    f0:dc:f3:e4:4c:ad:bd:ca:aa:50:7b:74:12:d8:a2:
                    cb:0b:db:ce:ce:55:b8:be:56:eb:78:13:dc:19:84:
                    89:cd:8c:29:22:7f:ba:0b:68:eb:a7:65:d3:ae:4f:
                    85:82:a1:14:7a:99:3b:3b:45:84:a4:5d:0d:90:ab:
                    12:4a:90:7f:c4:36:49:06:28:f7:5b:96:c7:89:bc:
                    7e:71:71:47:f0:3c:64:3d:4a:47:6e:cd:b8:7e:a8:
                    30:b6:0a:86:91:38:2f:95:78:35:55:06:b1:0a:c7:
                    ae:49:31:c9:aa:ef:b7:bb:36:81:c3:cc:ec:60:c1:
                    6a:32:72:34:1d:64:58:34:56:43:c6:3d:f5:1f:1c:
                    92:63:e2:79:e0:14:9d:b2:da:98:cf:9e:7b:c9:09:
                    76:e8:d4:db:40:72:90:ae:f7:d4:41:0a:3d:7f:d8:
                    ca:da:d8:d3:d8:5c:a0:85:cc:86:92:9b:60:75:20:
                    96:ac:7b:8e:d5:e8:44:7e:79:31:52:ef:30:01:cc:
                    c8:0f:85:f7:d4:e3:f7:33:93:42:ff:ba:cf:22:41:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:C9:0C:67:E8:E0:5E:54:9F:D7:56:95:2E:96:B3:FC:23:30:A1
            X509v3 Authority Key Identifier:
                keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8a:5d:8e:7b:6a:1a:e7:58:7d:d7:0d:81:10:80:cd:82:89:
         f2:99:74:14:e6:db:c8:57:3d:96:7a:57:ce:10:2b:01:25:60:
         69:12:b2:ec:53:05:6c:1f:7d:53:8d:b1:99:47:06:98:81:2f:
         2b:d1:b5:17:56:55:e4:81:94:e3:48:bd:cb:f4:f9:84:4d:f8:
         46:f4:1d:94:f8:43:51:b4:36:08:1a:0d:46:53:04:b7:fc:85:
         41:1e:00:64:1a:b3:d2:ac:ee:a8:d6:60:0f:b8:bd:e1:f4:81:
         ed:2d:4b:a3:ab:f8:65:13:81:d0:c1:75:92:ef:5f:bf:fb:43:
         27:0f:46:bf:1e:04:61:b4:3a:79:a6:4a:f2:c9:09:02:b9:56:
         33:4a:6a:e1:78:1e:cc:54:de:ca:ec:2e:9d:e6:45:3f:16:1e:
         18:63:1d:ae:81:00:c1:26:f8:08:b4:11:0f:91:dc:36:87:d6:
         0e:54:4e:94:e9:0c:0b:a5:c9:86:65:67:a7:06:9e:89:4a:d5:
         1b:b7:0d:10:1e:9f:ec:90:03:77:d0:51:44:76:2a:e9:d5:e9:
         e6:4b:2b:4d:08:37:b7:3f:dd:5a:97:ef:90:3a:ed:f3:c3:f9:
         01:14:0a:d9:e5:60:dc:98:dc:c2:78:bc:e6:ad:a7:40:f2:c7:
         fc:f8:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:38 2026 by rpki-client