Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File:                     wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier:          j3YgiUbDtP3A93dqwF7VBgIwuGE0RlAvxQEOUmMMk4U=
Subject key identifier:   C3:97:E3:56:D8:F7:E8:E2:E4:EA:E0:2C:EE:1F:CE:EB:48:2C:6F:74
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer:       /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial:       019F0B19CA26F46465F5BB7425E9F932C13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number:          16F6
Signing time:             Sat 27 Jun 2026 22:01:07 +0000
Manifest this update:     Sat 27 Jun 2026 22:01:07 +0000
Manifest next update:     Sun 28 Jun 2026 22:01:07 +0000
Files and hashes:         1: 6WdR5ALUcJI-sJuaADDlA6E9Y0A.asa (hash: VJWjlwq1JUBaxiGK+9yYjlSpnVeoc6WMAIqDzfDLC38=)
                          2: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: 7R/g9BNSuT4Io6DhC/rhG34KCKFVdHimE1gAxTg2of8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0b:19:ca:26:f4:64:65:f5:bb:74:25:e9:f9:32:c1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
        Validity
            Not Before: Jun 27 22:01:07 2026 GMT
            Not After : Jun 28 22:01:07 2026 GMT
        Subject: CN=c397e356d8f7e8e2e4eae02cee1fceeb482c6f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:17:27:a7:a2:de:2b:18:dd:c1:ec:18:ee:
                    f1:de:e6:9f:28:f8:ba:ac:4f:d3:09:40:b2:97:2e:
                    de:1f:ab:91:6c:8b:9f:64:df:85:d5:06:f4:91:29:
                    4f:b5:b0:a7:85:d1:71:ef:96:0b:69:d8:00:f9:76:
                    8c:85:51:5b:07:42:f2:18:10:28:81:59:57:df:73:
                    0a:3d:13:52:70:e8:d1:44:a2:b6:63:3d:eb:45:95:
                    4a:c7:71:da:7b:9b:b9:43:5f:4c:17:f5:5f:b9:4b:
                    95:51:54:d7:d8:34:aa:3e:fb:74:25:fd:d0:0c:59:
                    17:1d:1f:24:d0:e6:c5:2a:e9:78:a7:12:dd:66:20:
                    2f:95:e0:e7:33:7c:41:41:17:64:51:3d:a3:b8:ea:
                    df:df:31:43:b7:55:f0:18:3b:a7:58:e0:a3:b3:9e:
                    29:79:71:30:a7:d1:c8:21:d6:3b:97:ef:d1:9d:1d:
                    f3:5b:98:90:d3:3e:e0:c4:84:0d:d1:a5:71:b4:02:
                    0b:95:8d:f7:9e:e2:07:4e:2b:36:ab:36:2a:58:71:
                    dd:26:67:82:5e:3d:bc:6c:de:32:6c:4f:b7:e0:8a:
                    87:dd:c8:06:95:6f:18:f9:04:1b:4e:9b:35:e7:f1:
                    1e:b3:50:e5:ad:f6:c9:d9:3f:ec:95:73:f9:60:99:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:97:E3:56:D8:F7:E8:E2:E4:EA:E0:2C:EE:1F:CE:EB:48:2C:6F:74
            X509v3 Authority Key Identifier:
                keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:e2:9e:a5:c3:b7:53:bb:d1:4d:89:ab:f3:55:2e:c7:72:
         ce:bc:a3:9b:13:59:d1:fa:0a:08:47:fe:15:6c:6f:1d:74:5a:
         be:aa:d7:10:3f:dc:d5:ed:fc:10:d6:d8:74:6f:24:a8:26:c5:
         6b:5c:df:7b:eb:d3:61:a4:62:98:00:09:62:0d:4b:4c:aa:8e:
         4b:ee:4e:50:62:a5:bf:cf:79:c7:2c:e7:31:14:a8:16:a3:b0:
         cb:3c:00:24:3a:b0:3e:d4:eb:98:d6:0f:e6:71:95:a7:1b:d3:
         ca:ba:fa:67:64:b8:10:09:5a:a5:b1:1a:5c:88:34:ba:47:91:
         b8:f2:75:da:ba:1e:d7:64:21:2e:28:4c:66:65:25:05:66:02:
         a9:d0:59:29:d2:2f:09:a9:5e:4c:aa:b1:92:1b:39:3c:e5:77:
         6f:c7:63:5a:c0:f1:95:9a:79:25:e4:a9:e9:d3:3d:54:5f:70:
         d8:1b:48:6a:21:44:b7:5e:61:b1:ed:df:04:41:4f:b9:55:53:
         5d:35:fc:e6:7f:d7:5f:b5:99:dc:d2:94:52:d0:bc:b6:39:89:
         06:02:ff:50:ea:d8:6a:db:e8:6d:8d:70:48:ba:60:99:bc:ac:
         95:7e:fa:5c:90:d6:62:58:af:3d:37:08:82:3e:5b:10:c6:9f:
         d4:6e:1b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8LGcom9GRl9bt0Jen5MsE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2M5ZmI1OWM5OWNkZmI0YTZkODQyOWNkODM3MDU5MDYw
MTJiMTEwHhcNMjYwNjI3MjIwMTA3WhcNMjYwNjI4MjIwMTA3WjAzMTEwLwYDVQQD
EyhjMzk3ZTM1NmQ4ZjdlOGUyZTRlYWUwMmNlZTFmY2VlYjQ4MmM2Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLEXJ6ei3isY3cHsGO7x3uafKPi6
rE/TCUCyly7eH6uRbIufZN+F1Qb0kSlPtbCnhdFx75YLadgA+XaMhVFbB0LyGBAo
gVlX33MKPRNScOjRRKK2Yz3rRZVKx3Hae5u5Q19MF/VfuUuVUVTX2DSqPvt0Jf3Q
DFkXHR8k0ObFKul4pxLdZiAvleDnM3xBQRdkUT2juOrf3zFDt1XwGDunWOCjs54p
eXEwp9HIIdY7l+/RnR3zW5iQ0z7gxIQN0aVxtAILlY33nuIHTis2qzYqWHHdJmeC
Xj28bN4ybE+34IqH3cgGlW8Y+QQbTps15/Ees1DlrfbJ2T/slXP5YJlT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOX41bY9+ji5OrgLO4fzutILG90MB8GA1UdIwQY
MBaAFME8n7Wcmc37Sm2EKc2DcFkGASsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMt
YWRlYzA3ZDIyZjQ2LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMtYWRlYzA3ZDIyZjQ2
LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP3inqXD
t1O70U2Jq/NVLsdyzryjmxNZ0foKCEf+FWxvHXRavqrXED/c1e38ENbYdG8kqCbF
a1zfe+vTYaRimAAJYg1LTKqOS+5OUGKlv895xyznMRSoFqOwyzwAJDqwPtTrmNYP
5nGVpxvTyrr6Z2S4EAlapbEaXIg0ukeRuPJ12roe12QhLihMZmUlBWYCqdBZKdIv
CaleTKqxkhs5POV3b8djWsDxlZp5JeSp6dM9VF9w2BtIaiFEt15hse3fBEFPuVVT
XTX85n/XX7WZ3NKUUtC8tjmJBgL/UOrYatvobY1wSLpgmbyslX76XJDWYlivPTcI
gj5bEMaf1G4bOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 28 06:18:25 2026 by rpki-client