Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File:                     WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier:          VePi5xzYdemCHYPOIQt0Eojiv/HGyilLjsvKOI+oHHA=
Subject key identifier:   0F:1D:69:10:88:51:BB:A6:0C:DB:4F:36:42:35:30:51:E0:94:9A:A9
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       019E1F110CC5243A581D2510E3360AFF62E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number:          066A
Signing time:             Wed 13 May 2026 02:01:11 +0000
Manifest this update:     Wed 13 May 2026 02:01:11 +0000
Manifest next update:     Thu 14 May 2026 02:01:11 +0000
Files and hashes:         1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
                          2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: ljEEtYxClKxSSomH5wjSemEE/vRVKUc+h0pkGWmvCR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:0c:c5:24:3a:58:1d:25:10:e3:36:0a:ff:62:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: May 13 02:01:11 2026 GMT
            Not After : May 14 02:01:11 2026 GMT
        Subject: CN=0f1d69108851bba60cdb4f3642353051e0949aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:6c:4c:f9:59:b4:75:7e:90:08:0f:0d:87:
                    59:52:29:03:26:1f:ae:69:ac:31:4f:71:d8:9e:6e:
                    05:a2:af:78:a7:59:7c:93:1e:ff:3d:c0:78:94:34:
                    6b:38:29:4d:8d:f8:98:9c:1a:91:bf:0e:ca:ac:90:
                    48:22:47:db:a3:28:46:8f:12:45:59:75:c7:ef:8f:
                    f2:0f:87:8f:c2:c4:f8:b2:ac:87:89:4d:90:b9:aa:
                    ba:36:62:85:27:5b:53:27:d9:06:99:c5:c4:12:ab:
                    70:26:da:ef:64:f1:53:a5:81:e3:b9:c6:43:b2:17:
                    e6:fc:70:00:0f:23:39:16:e4:50:eb:c9:30:93:a0:
                    91:0d:c6:4a:4f:27:26:0c:be:f9:d5:7f:8d:21:d0:
                    1c:92:34:c2:0a:5f:b4:b1:ee:36:7a:be:6d:a7:86:
                    3d:30:c5:66:17:03:ab:55:cc:5f:f4:41:46:fe:e8:
                    55:06:0f:a7:46:c4:28:8b:9b:0d:bd:98:c5:4b:5d:
                    aa:b0:03:4d:fd:44:25:ef:2a:e1:67:0e:2c:35:f3:
                    df:bc:16:cb:9a:dc:f8:7e:be:f5:c2:d9:5f:01:c6:
                    c8:58:2c:76:11:7f:01:bc:66:e9:c1:5b:65:5b:2f:
                    33:de:b6:f9:09:8c:c9:df:d5:3f:b7:99:a7:71:f2:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1D:69:10:88:51:BB:A6:0C:DB:4F:36:42:35:30:51:E0:94:9A:A9
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:17:93:e3:cb:a2:e5:bf:30:7b:d8:ef:9e:a8:62:7a:37:
         7b:c6:00:b3:46:ca:e1:b3:8d:a1:c9:ed:62:ee:1f:b6:7c:af:
         86:b2:d5:55:e3:71:b1:6b:be:97:e6:9f:bb:cd:4f:c0:10:e1:
         72:76:18:04:8a:f2:76:3b:1d:33:e4:a7:00:5a:ee:50:4f:9a:
         0a:72:25:a5:8f:c3:49:19:92:69:9c:17:e3:9c:01:ec:e3:05:
         b3:cb:c8:5f:28:e9:6f:f6:70:b8:ac:1d:ad:e7:67:85:c9:86:
         03:19:c8:85:0e:0c:f2:47:49:38:38:52:fc:fb:09:00:59:33:
         a5:2a:87:74:fb:0e:31:60:12:56:3b:e5:0e:29:ad:02:a4:3d:
         17:84:e3:19:2f:16:e2:18:7f:b8:33:9e:bd:e0:e8:6f:6d:28:
         5a:9b:26:8e:02:cb:6f:1e:02:cc:19:c1:4b:cf:a7:f6:52:46:
         b5:4d:11:33:bf:d1:8f:37:e9:f4:ef:5a:47:41:a0:92:1d:72:
         eb:de:73:5e:b2:45:09:56:a6:65:4d:60:21:48:98:5f:3b:02:
         e3:5d:4e:11:27:57:d6:24:76:f9:98:93:1e:68:89:b9:d9:c2:
         99:1a:0e:d3:8c:2f:88:3e:cc:2e:c9:b1:62:01:24:b5:80:b5:
         48:23:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:53 2026 by rpki-client