Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          07SWKvgpH3ssKVxLEyasGWonUwRB1n9ORv2MB0FMJsE=
Subject key identifier:   BB:9C:11:8B:6B:8A:27:57:93:DA:2B:11:53:F3:BB:77:0C:27:AF:47
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       019E1F109E2F119962F948740FE1231F0C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          0D7F
Signing time:             Wed 13 May 2026 02:00:43 +0000
Manifest this update:     Wed 13 May 2026 02:00:43 +0000
Manifest next update:     Thu 14 May 2026 02:00:43 +0000
Files and hashes:         1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: 17fKmS+VrDp0LYp/MKQxSLqVa6LLDjJ9X4mBMJ1lnAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:9e:2f:11:99:62:f9:48:74:0f:e1:23:1f:0c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: May 13 02:00:43 2026 GMT
            Not After : May 14 02:00:43 2026 GMT
        Subject: CN=bb9c118b6b8a275793da2b1153f3bb770c27af47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:d1:ca:c2:04:13:22:42:9d:a1:0a:89:10:
                    09:aa:bf:73:93:5c:bd:4c:f9:ba:3a:25:b7:90:77:
                    db:19:fc:6b:ca:d1:a6:4f:b3:47:c8:27:1e:ce:4d:
                    61:99:bd:dd:09:35:98:72:af:6a:83:51:0b:ad:0f:
                    dc:05:33:e1:16:b2:6a:32:21:d9:be:b4:09:16:b7:
                    28:ba:c9:00:b2:e6:c0:76:fa:d7:56:6e:10:0e:04:
                    a6:0e:29:ae:1e:f3:b6:85:8a:28:f1:eb:46:89:cb:
                    e8:b7:6a:a1:59:26:f5:d3:d3:8f:8d:1d:dd:76:4c:
                    77:d2:63:7a:26:49:35:a6:b0:a4:8e:c9:4a:28:25:
                    e2:21:21:97:1d:4a:e3:01:8b:2b:2b:2a:49:50:3c:
                    03:56:06:14:64:fe:65:e6:7b:67:f5:3d:39:c9:00:
                    50:9c:22:07:8a:a8:91:9c:fa:d8:f0:79:ae:79:7d:
                    ca:79:04:eb:bf:1f:fe:77:0d:6b:a0:4e:22:c2:6e:
                    48:0e:bf:4f:89:d8:10:bc:9f:3a:43:2f:89:85:a7:
                    27:dc:85:61:e5:a5:fe:d9:1b:ec:3d:cf:6c:20:6f:
                    b4:55:d5:3e:66:54:c0:8f:dd:ca:51:de:d7:4c:a1:
                    21:42:94:82:6d:e9:04:ec:fd:97:80:e0:76:a4:a9:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9C:11:8B:6B:8A:27:57:93:DA:2B:11:53:F3:BB:77:0C:27:AF:47
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:2f:37:2c:ea:61:4e:e6:c3:38:95:4c:0b:f8:4e:bc:8e:
         c4:ec:c7:ce:48:0e:cb:b9:5f:27:93:2e:d8:e7:b4:63:28:7e:
         ac:c0:a4:c0:d5:9b:62:78:38:b3:67:71:00:d0:6b:84:59:b2:
         22:36:a7:bf:4f:3d:59:57:ec:a6:1c:c6:94:3c:33:bf:d9:3f:
         16:4c:a2:78:95:62:38:ee:cd:3b:54:30:64:0c:0b:6d:8d:1b:
         97:0a:4a:7b:c1:50:77:e4:21:2d:08:75:f9:e8:c3:b8:36:1a:
         aa:fc:f2:51:b3:06:bd:8b:e1:75:b8:42:55:66:23:de:00:20:
         1b:be:f1:ec:ca:13:ba:9f:ea:14:e5:40:de:fd:3d:44:06:d4:
         79:18:ae:0f:03:44:bb:60:dd:bc:88:1f:8c:5d:1d:16:6d:f5:
         41:b9:7d:94:91:ef:3f:f7:cd:c6:bd:e4:21:1a:d3:88:73:46:
         dc:36:bd:0e:71:27:77:57:48:1f:28:7f:eb:c6:fe:c9:fa:35:
         89:c7:24:3f:c0:a3:46:bd:da:39:dc:09:51:43:2e:17:88:00:
         f8:8b:68:e8:79:ab:a8:c8:fc:2e:9b:45:2b:97:4c:a4:61:b8:
         11:93:db:3b:55:d9:74:e6:91:0c:2e:3a:83:2d:07:e1:2d:f5:
         7c:c5:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:13 2026 by rpki-client