Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          hFIdPdRV2i6BnSqbRfUJkKHg4pg2vFtFFZ4AiZHLueo=
Subject key identifier:   44:84:08:8A:5E:92:82:EB:1A:B7:3B:6F:C3:5D:E4:3C:AE:27:DC:FC
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019F0F646CFF236C8F69DEE0F6C674B7D725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          1985
Signing time:             Sun 28 Jun 2026 18:01:07 +0000
Manifest this update:     Sun 28 Jun 2026 18:01:07 +0000
Manifest next update:     Mon 29 Jun 2026 18:01:07 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: bZ5nT8M7a1U+ulDMTiua2E+1A6W490bkYH2kh7g5A9g=)
                          2: 13qi8AI2-EVNpOSQSS-2sC_j3KU.roa (hash: Ao/N1CH5IyqTs+C/2xXMQjWZkUvQDWoCz0AZMzqUUQQ=)
                          3: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (hash: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA=)
                          4: jv_YABzSModWtlchMh_9InM60gw.roa (hash: 4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0f:64:6c:ff:23:6c:8f:69:de:e0:f6:c6:74:b7:d7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Jun 28 18:01:07 2026 GMT
            Not After : Jun 29 18:01:07 2026 GMT
        Subject: CN=4484088a5e9282eb1ab73b6fc35de43cae27dcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:03:70:77:ae:94:c0:b4:91:d6:54:ba:2c:
                    f5:6c:c3:30:d9:fc:77:52:eb:c1:a7:f7:82:de:73:
                    49:81:5e:6c:a8:cd:49:69:be:5d:5c:48:ec:ff:eb:
                    bf:21:60:f3:0d:0c:fd:eb:d9:31:b9:26:68:f7:03:
                    12:5e:c1:26:74:0e:95:37:ce:c3:d2:5b:71:8f:04:
                    a5:e8:71:ec:9f:f2:09:5b:f1:92:3d:15:02:30:a0:
                    c7:98:da:49:76:b3:22:2c:13:ad:8a:22:4b:53:54:
                    48:f6:5d:f1:cc:6a:19:2c:53:bc:84:9b:6c:c5:95:
                    de:14:1f:a6:67:c9:f3:ec:73:a2:25:a8:44:e0:d9:
                    7e:d9:80:da:56:73:63:c1:3f:8c:76:dc:73:e5:88:
                    8e:c8:78:b9:3d:6d:bc:e4:b1:2b:18:37:15:21:50:
                    f7:ba:93:f2:c0:d6:77:ad:8d:f4:58:3c:08:e4:a3:
                    11:47:f7:6b:17:5e:d9:64:51:00:65:25:18:5b:8b:
                    11:2b:f8:21:b9:3a:db:fa:cf:5e:ab:19:63:99:a6:
                    1d:ae:1f:28:9d:a4:57:c8:98:05:e6:48:97:47:70:
                    9b:c7:ef:e7:24:5d:07:1c:f4:ac:a6:43:cd:e2:6b:
                    24:4f:37:4b:77:b6:14:e5:3c:fd:6d:09:1a:09:e1:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:08:8A:5E:92:82:EB:1A:B7:3B:6F:C3:5D:E4:3C:AE:27:DC:FC
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cb:e9:e5:e6:39:b5:fd:59:a6:33:e1:37:0c:17:f8:83:52:
         74:5d:84:7d:3f:2b:dd:ce:b2:0e:f8:50:2a:20:37:18:38:09:
         cf:2b:65:d6:3b:3e:80:7a:49:b5:e9:f5:8b:0a:8a:dd:f0:e8:
         65:dc:f5:fe:73:5f:3f:10:7e:a0:f1:09:23:02:b8:26:2e:06:
         56:d8:08:25:29:58:bd:2f:56:fd:f0:5f:dc:1d:90:94:f1:6d:
         5d:91:2e:90:38:72:cb:55:6b:b9:67:95:bc:57:a4:c5:b1:63:
         9c:da:ef:cd:50:2e:fe:d1:90:ac:88:49:29:43:33:4b:f4:e6:
         2f:47:2b:97:c8:cd:ad:d6:37:09:50:b7:7a:c2:b1:a0:d6:75:
         35:d1:a8:af:0a:7a:ec:33:bd:83:46:a0:8f:32:d4:ed:d2:c7:
         4d:cc:98:d1:47:8f:8b:58:22:dc:f3:78:e1:2e:fe:b9:32:fc:
         68:9b:f8:01:b6:a0:b2:28:50:88:f7:90:bf:da:38:ac:30:18:
         fe:3c:27:46:22:c2:9a:64:39:25:36:d7:72:9d:17:2d:02:76:
         5d:cf:36:07:9f:02:d9:e2:51:2e:c5:40:01:4f:f5:12:05:96:
         67:7d:c1:8f:d9:9c:88:d0:49:28:37:04:88:05:0b:6e:16:db:
         d0:df:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:19:25 2026 by rpki-client