Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File:                     wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier:          URTXKxxRGMsP8wF/AcySZST3793NGIeIUEZ5QoFdWkw=
Subject key identifier:   BA:42:FF:FE:17:74:9C:61:AD:49:8C:3A:2D:60:40:CB:56:C2:6A:1B
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer:       /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial:       019EB9FD3F56451E7C1C76E03DF1C4E9061D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number:          1295
Signing time:             Fri 12 Jun 2026 04:00:42 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:42 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:42 +0000
Files and hashes:         1: 3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa (hash: gAnkb8zd3PHjDZTfC8dT4Ka5LoLCtOrff/CEiB269iI=)
                          2: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (hash: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A=)
                          3: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (hash: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0=)
                          4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: rvi/Hzk+5oqPftBqUyURJZnz7Z0ajzTjr7g0PK6i7+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:3f:56:45:1e:7c:1c:76:e0:3d:f1:c4:e9:06:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
        Validity
            Not Before: Jun 12 04:00:42 2026 GMT
            Not After : Jun 13 04:00:42 2026 GMT
        Subject: CN=ba42fffe17749c61ad498c3a2d6040cb56c26a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:51:8b:b2:92:32:ae:b0:1d:6b:5c:97:97:
                    21:73:dd:a3:68:66:7e:34:88:eb:f3:f7:a8:30:db:
                    0d:2d:d0:8f:6b:f0:62:e2:a8:f0:a0:54:df:45:9e:
                    52:f0:c7:d4:90:d9:3e:d0:86:61:eb:86:76:d2:2a:
                    8d:55:1b:fe:03:ed:70:af:27:a6:bf:cc:d6:b3:57:
                    26:70:7e:15:5f:c0:34:80:18:d2:13:11:18:96:95:
                    af:a8:39:f7:ac:a6:7f:89:55:dd:00:aa:df:c6:d6:
                    6c:12:08:73:f9:a1:af:94:6e:6b:ee:9a:d7:1e:cf:
                    dd:8e:15:37:51:d1:7f:07:34:52:82:3c:d3:f2:85:
                    d2:a7:b4:c9:ae:d3:00:78:dd:ab:10:49:02:76:78:
                    7f:26:14:39:f7:3b:1a:69:b9:a1:46:95:60:b0:97:
                    87:c5:3d:b0:22:0f:a3:30:2a:d2:bf:1a:60:33:43:
                    6b:ef:c7:74:8a:3b:a6:73:f1:19:2b:b2:f6:b7:41:
                    e7:d8:0c:39:fd:e7:6f:ba:e5:2c:de:2e:be:8d:4c:
                    df:aa:ca:37:3d:f9:6e:a9:7d:20:a1:11:02:d8:95:
                    b8:e2:2c:12:a7:b4:95:7c:35:16:5b:79:23:7f:85:
                    2f:5b:1e:65:e1:57:7f:30:90:40:c5:69:e2:f6:38:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:FF:FE:17:74:9C:61:AD:49:8C:3A:2D:60:40:CB:56:C2:6A:1B
            X509v3 Authority Key Identifier:
                keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:58:50:01:1b:68:9f:b2:09:ac:41:97:37:ab:ec:1c:d5:89:
         2d:1e:02:0f:a1:4c:db:36:27:da:ac:e2:67:6b:d1:1a:d4:68:
         df:25:8a:8d:d8:92:84:10:d3:a3:f6:97:5a:18:9d:49:0d:46:
         64:e1:99:0a:22:57:bb:dc:d3:23:e1:34:66:d3:94:6d:a5:08:
         78:f9:f9:97:1e:7d:78:30:8c:1a:26:64:43:48:76:41:84:32:
         74:84:0e:13:b4:dc:ea:40:09:c6:fe:36:8b:5a:84:2c:49:70:
         92:a1:c2:13:53:70:ad:81:91:75:c2:18:1d:b9:79:3e:57:5e:
         d4:68:c8:2c:72:3a:9d:b0:f6:52:6d:9f:a6:12:8f:6d:56:33:
         68:60:4f:17:83:eb:1c:16:1b:85:94:d9:5a:01:46:bc:dd:f2:
         94:b4:f5:28:46:45:af:ae:7e:d4:28:1b:48:4d:f2:12:64:62:
         05:b8:97:a9:1d:a5:01:98:25:c5:1c:51:f3:0d:b6:d5:1b:e0:
         57:60:69:62:2e:94:9e:17:f3:96:20:a7:ca:72:69:ee:be:9e:
         fc:27:25:7b:f7:c5:c7:be:c3:e3:0c:90:d2:cf:d6:de:95:4f:
         72:df:7e:08:e3:14:81:4a:95:31:fa:49:6b:88:05:d0:e3:5e:
         48:ad:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:26:27 2026 by rpki-client