Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
File:                     wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json)
Hash identifier:          b/Wo8KB2f7rDKMHAUYibKlo6juFOuSBAEOGAWp74G/w=
Subject key identifier:   F3:7B:ED:BA:05:91:66:81:14:85:03:E0:E3:58:2F:0E:BB:81:25:89
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Certificate issuer:       /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial:       019EB9C62AB7CEF8073034A27DD4398A2F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 03:00:32 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:32 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:32 +0000
Files and hashes:         1: rjWMczYWVUlDT0G9Gz8JcdLLaZg.roa (hash: 8skxqfY0u+xIRKIa0L6xMXFKLEu62D+QiOeNkaaqh7g=)
                          2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: MJjlNzBimCn2daVOxipITn3+R6gQNm6avaDYYamEGvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:2a:b7:ce:f8:07:30:34:a2:7d:d4:39:8a:2f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
        Validity
            Not Before: Jun 12 03:00:32 2026 GMT
            Not After : Jun 13 03:00:32 2026 GMT
        Subject: CN=f37bedba05916681148503e0e3582f0ebb812589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:45:86:a7:5a:91:cf:96:02:25:dd:1f:61:
                    88:6c:4a:7b:63:93:33:82:df:76:59:d2:41:45:fc:
                    b9:98:a4:46:de:79:be:84:55:5b:af:4b:12:ab:d6:
                    13:60:48:0c:41:5e:d1:8a:2f:8d:70:7c:ea:8a:8d:
                    1e:7f:b9:85:6c:56:c3:d5:64:d7:8f:ca:75:16:f9:
                    37:ae:5e:49:e3:11:3d:a1:2e:0d:e8:67:fe:42:7c:
                    26:d2:de:f7:3f:dd:f7:aa:03:14:35:ad:50:1c:b0:
                    10:54:16:0e:cd:7f:19:3c:bf:fd:0b:79:1a:dd:68:
                    8c:b5:c2:d7:87:54:74:29:9e:34:f9:97:a3:71:20:
                    2e:5a:5f:ed:85:26:6d:31:ce:35:56:f5:11:8a:c5:
                    c2:1b:19:85:42:ea:5a:6e:82:92:9d:f7:26:84:c6:
                    0f:1f:00:1e:83:b3:02:13:72:9d:9e:39:b2:8b:d0:
                    ec:27:4e:af:c5:fd:f2:c3:01:34:5f:7c:d6:84:47:
                    72:3b:06:e2:e0:7e:6a:95:63:b4:e3:69:38:b4:f6:
                    9e:c3:b6:91:f8:84:0c:16:cc:d7:df:6a:61:86:f6:
                    44:d2:88:81:cc:93:34:07:d9:cc:4f:24:e4:7c:8b:
                    12:0b:ac:25:84:5b:09:4e:9b:c0:71:e0:71:1b:ed:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7B:ED:BA:05:91:66:81:14:85:03:E0:E3:58:2F:0E:BB:81:25:89
            X509v3 Authority Key Identifier:
                keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:49:22:e2:a7:85:be:9a:70:eb:13:fb:06:33:f5:24:44:
         da:8c:c2:4e:a7:88:1d:e8:ed:4c:9b:78:e6:d9:cf:5c:9a:42:
         97:fe:ed:63:50:88:15:bc:42:9d:1b:5a:61:91:3b:2d:8d:b8:
         c8:b9:6e:80:4d:64:94:2e:9b:a6:f2:76:6e:b1:53:aa:ee:e2:
         a1:77:be:bb:d1:c9:0f:5b:34:33:27:76:aa:e9:e2:13:70:30:
         9b:96:88:39:5d:d9:31:2b:75:1b:93:d6:48:c8:9f:62:15:cd:
         50:40:41:44:3e:c3:bb:bd:06:78:13:5a:d3:7e:95:b0:18:ab:
         33:37:2a:f6:be:58:c2:8b:09:bc:e9:cb:b2:96:4c:43:fa:03:
         70:8c:cf:ed:88:f4:8b:11:9c:34:6b:73:5e:40:35:1d:ef:87:
         e6:8a:ec:1d:c3:22:77:93:10:39:ac:2a:61:d5:9d:76:b8:d2:
         70:5b:7d:8f:59:84:ac:88:6b:8c:75:93:b8:77:3a:83:8e:3b:
         14:33:2f:d5:2b:d6:75:55:05:38:8e:fd:67:3e:6a:ed:af:97:
         a1:6a:42:75:c0:f0:72:72:4a:e0:47:cc:a7:b1:5f:a5:f5:e2:
         37:5c:1b:8d:a1:bb:c0:d4:0f:3a:26:b3:9b:d5:0f:f3:ce:84:
         db:30:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:28 2026 by rpki-client