Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          8nAQE0m5nD9EyexJ+77WZUnBD/dvPVvUXGv/w83SBFY=
Subject key identifier:   47:1D:21:DE:62:D8:81:C3:1D:E1:B8:35:86:2B:95:26:55:25:B5:7C
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       019FA7F44C3E5AC2ADDF4A78959826388151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          0DBE
Signing time:             Tue 28 Jul 2026 09:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:33 +0000
Files and hashes:         1: 7r4lRPQc-QTSmeOcUsrSRcjkV4c.roa (hash: OocvrP+x2oNsYStihaud30OWGNdq9vGwzjAJqLEWJFg=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: w/hUdvrMKDzXpQMgebx242ztOHvRf8nTHKBaM6osbwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:4c:3e:5a:c2:ad:df:4a:78:95:98:26:38:81:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Jul 28 09:00:33 2026 GMT
            Not After : Jul 29 09:00:33 2026 GMT
        Subject: CN=471d21de62d881c31de1b835862b95265525b57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:b1:8c:cd:7b:67:99:59:c7:63:2f:f8:6d:
                    79:fb:2f:ce:1d:f3:c3:66:e5:98:38:27:26:c3:49:
                    d3:64:07:26:b6:1d:42:5c:c0:bb:ef:98:dc:a7:fb:
                    9d:e5:46:48:43:08:e9:0d:8e:12:7e:81:87:dd:6c:
                    af:87:8f:fe:ee:11:0e:c8:ae:67:9d:f2:64:9f:9e:
                    4a:1c:21:bc:20:e4:2e:f9:21:a0:8b:4a:97:c0:67:
                    fb:62:b8:bb:5f:f0:a8:53:1a:b8:b6:dc:0f:e2:40:
                    52:10:dc:f0:e0:38:da:a5:7a:50:ad:c0:87:74:2c:
                    08:08:a5:17:74:4b:f0:69:c5:21:32:36:9e:af:f5:
                    7b:df:77:77:90:81:11:32:90:86:19:07:d6:a1:b6:
                    11:df:cc:29:95:4b:69:3e:ef:c8:90:e8:76:d7:b8:
                    40:9a:25:de:e1:c9:a8:b1:7d:42:bf:ba:06:74:a5:
                    61:70:c1:45:c0:c9:e2:42:85:e4:ca:59:38:b1:35:
                    a7:a0:0c:ab:4c:92:bc:28:47:8e:9e:28:39:5d:ae:
                    59:38:c4:b3:ac:e7:3f:1b:83:1d:4a:be:c8:03:7f:
                    c9:55:99:ce:6f:44:ae:62:46:6f:a9:e7:93:79:73:
                    0e:15:cf:5f:3d:45:da:62:ae:28:20:dd:04:37:90:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:21:DE:62:D8:81:C3:1D:E1:B8:35:86:2B:95:26:55:25:B5:7C
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:55:12:4c:e1:75:3c:34:87:4e:ba:5c:b2:2e:ac:80:20:1f:
         b4:2b:f9:eb:5e:8c:70:89:e5:5f:16:b1:86:00:91:ac:1a:0d:
         3a:74:9b:54:db:4c:74:90:d8:7e:2a:95:d8:36:2c:eb:8f:d7:
         41:33:14:94:91:1f:07:f4:09:e5:c3:6f:80:a0:1b:3f:82:f2:
         82:8d:54:5b:ac:66:ed:46:e0:b5:5f:63:85:01:cb:af:aa:79:
         60:ed:10:a0:e4:ba:9b:ef:6e:a7:fb:7e:9f:dc:31:a3:97:48:
         4a:d0:dd:f6:04:68:94:17:f6:9c:50:d8:24:a9:70:4c:81:99:
         dd:28:5c:34:95:54:c3:2b:aa:4e:41:96:e2:c6:92:97:64:bc:
         02:47:2b:e3:8e:ff:3a:49:17:dd:36:65:73:75:66:db:47:00:
         46:e5:70:54:ac:a1:6d:5b:16:e8:03:b8:e5:5f:d6:0b:c9:3e:
         fd:41:e5:0c:ce:96:47:54:2b:ea:24:ad:0e:31:9e:0c:41:db:
         75:d9:15:d7:0c:6e:16:8b:a9:e9:60:34:08:61:ac:a3:00:95:
         7a:84:fa:42:cf:f5:c4:3f:38:55:d8:6d:a8:86:6c:af:f6:91:
         fb:89:e3:b6:2b:97:b9:40:0a:c1:8e:31:a4:b9:d0:e5:0e:a4:
         cd:fb:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:34:53 2026 by rpki-client