Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File:                     wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier:          E96rvYIarMqJ7y3nhrxCQ9CPa89c6iY02OH4BH/TzsQ=
Subject key identifier:   32:4A:45:56:27:51:76:30:74:1B:32:E6:19:AE:3E:76:FC:2E:E3:0D
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer:       /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial:       019E1F47FCE499CA17C602919AEDB4AC94E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number:          0B80
Signing time:             Wed 13 May 2026 03:01:11 +0000
Manifest this update:     Wed 13 May 2026 03:01:11 +0000
Manifest next update:     Thu 14 May 2026 03:01:11 +0000
Files and hashes:         1: 3DSxcK9BYX9k5tvNNrwWZ7kYjz4.roa (hash: LlbtQ15mDycazVoOyoBxW8uz2UEgpVUqP+tEU+6Dy34=)
                          2: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: gT9HT9AqX/Z8O9PmYbrxjHaqy0+/f24m0U3ZeBGjsog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:fc:e4:99:ca:17:c6:02:91:9a:ed:b4:ac:94:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
        Validity
            Not Before: May 13 03:01:11 2026 GMT
            Not After : May 14 03:01:11 2026 GMT
        Subject: CN=324a455627517630741b32e619ae3e76fc2ee30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:f5:f0:b6:e4:12:f1:29:42:d1:8a:5f:64:
                    fb:2f:d4:99:ae:4a:f4:79:dd:32:81:fe:b7:48:10:
                    cf:15:ea:7d:3b:21:97:10:70:c5:d8:e9:9b:57:76:
                    ad:3a:8d:29:33:95:fa:42:70:0a:f2:c2:31:30:52:
                    db:e4:ec:95:68:2e:a2:0e:00:1a:f9:ad:3f:81:9b:
                    e1:68:98:4e:b5:eb:6b:93:85:8d:c0:20:88:52:18:
                    01:e7:e6:97:b4:6f:db:3d:87:2a:3b:ef:eb:a9:d8:
                    77:ad:66:a2:71:bd:67:ea:b3:62:e0:25:a9:b5:08:
                    b0:88:96:31:f7:17:0f:dc:fb:e3:ac:47:27:36:3e:
                    59:cc:52:b6:44:c5:fa:3a:1f:87:1e:78:fa:be:fb:
                    fa:a0:9d:37:c7:45:90:09:dd:cf:21:76:03:4b:71:
                    c8:44:01:08:6c:f9:a0:80:b7:0a:af:68:a9:6c:97:
                    f4:a0:f9:80:7c:bd:40:d4:bb:82:fb:79:d7:63:a6:
                    38:e0:63:02:fe:54:f2:4b:71:3e:ab:f6:68:48:52:
                    20:f7:e1:77:b3:e5:67:95:7a:8a:98:4f:cc:4d:80:
                    72:6e:29:99:2a:22:be:c0:dd:f9:c3:f2:68:f4:75:
                    f5:95:d5:f0:68:c8:ec:f1:81:01:e6:68:00:3f:03:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:45:56:27:51:76:30:74:1B:32:E6:19:AE:3E:76:FC:2E:E3:0D
            X509v3 Authority Key Identifier:
                keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:a8:77:6c:8c:bc:26:89:7b:57:f1:49:1b:53:24:36:e8:
         1b:9b:30:1e:f3:e8:99:1a:d0:1b:e3:16:2b:1b:9a:c7:ed:b1:
         78:f2:3f:81:68:4f:c7:ca:f9:af:15:66:c8:d1:01:06:0a:e0:
         42:dd:d7:a8:55:f7:9a:c5:61:d3:00:ef:06:3c:49:71:cd:fb:
         33:17:1f:32:e3:a6:15:bf:17:b0:32:3d:3c:fd:e7:d5:5a:57:
         13:74:8a:cc:19:77:ab:4c:2c:40:0d:6b:48:db:b0:63:29:4e:
         dd:dd:17:14:c0:a8:95:41:b2:c1:74:b4:a6:47:bd:3c:f9:6a:
         a7:6e:33:c8:38:b3:1b:4a:31:5f:d7:be:dd:4c:08:c9:cf:2b:
         22:da:a5:18:bc:92:8c:84:8e:9f:25:b9:41:e7:8f:8d:94:44:
         84:68:da:37:75:b4:de:70:a5:7f:f5:60:68:aa:b0:26:94:a1:
         63:33:61:42:52:09:b1:b0:7d:6c:77:31:0c:e3:3f:78:f6:5a:
         98:40:a9:a1:b2:17:8d:cc:3f:1f:00:14:5c:f7:60:d8:4a:b7:
         fb:26:43:ae:af:ee:2c:28:fd:08:e4:a7:c6:de:49:b6:ac:31:
         8e:80:57:64:97:45:7f:0f:f3:a6:2a:8a:b0:e6:6a:d3:b9:0d:
         45:92:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:14 2026 by rpki-client