Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
File:                     wvrMVfBdPoBsyn52MQzPPdjwKG4.mft (raw, json)
Hash identifier:          m/41m5SP8btECwgGQlCGA+dpEMulMtgoWGxBycUw4OQ=
Subject key identifier:   B4:59:A9:5E:AC:A6:2F:14:6B:1C:4A:BC:CF:58:CD:6F:CD:20:9E:23
Authority key identifier: C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E
Certificate issuer:       /CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
Certificate serial:       01A08AFAD4EBB6303C84D4C9A838716A86AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
Manifest number:          BF
Signing time:             Thu 10 Sep 2026 11:01:29 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:29 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:29 +0000
Files and hashes:         1: LdaE_Bi2qwSvJb8iyoaRHE7CrYA.roa (hash: gVcye9NQcI54DcMJHyKCUcGC0ONkraDbgztVtuA+gyQ=)
                          2: wvrMVfBdPoBsyn52MQzPPdjwKG4.crl (hash: 54kalT8R9cdVLS1V7+O+jPR5QomSC7iD2QoUTMXuGYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:d4:eb:b6:30:3c:84:d4:c9:a8:38:71:6a:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
        Validity
            Not Before: Sep 10 11:01:29 2026 GMT
            Not After : Sep 11 11:01:29 2026 GMT
        Subject: CN=b459a95eaca62f146b1c4abccf58cd6fcd209e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:39:70:1b:99:32:40:65:55:00:83:41:aa:
                    71:92:c6:21:c0:3a:ae:6b:a9:ee:8a:37:9b:f1:5a:
                    ef:d6:03:17:6f:df:6c:ab:14:7b:01:ab:4c:d6:08:
                    81:eb:aa:bc:b3:94:23:da:85:9f:22:0d:63:01:ff:
                    b8:ed:d8:05:b7:3a:d8:3e:56:90:1e:cd:45:0e:2d:
                    6b:89:09:78:53:ff:9b:4b:4c:8f:13:ae:0f:9f:ca:
                    9d:88:ec:df:ff:23:5a:67:8c:6d:cf:fa:51:b4:ca:
                    fc:95:a6:76:90:22:60:7c:f0:ee:db:fa:ad:46:a3:
                    58:ac:aa:45:18:52:46:b5:1c:83:8c:38:f8:61:c4:
                    8b:43:83:3e:f5:a8:7b:82:d1:30:ca:d1:0b:60:94:
                    20:6e:01:bb:b4:a8:e9:e1:96:5b:02:96:05:eb:b8:
                    4d:55:d9:00:23:1a:36:37:60:f2:8a:a7:3f:fe:e1:
                    1f:d7:ee:e8:ce:78:6a:3a:10:14:c4:2b:3a:c2:3c:
                    19:3c:81:89:32:14:90:9c:c5:b4:8e:77:22:29:4d:
                    84:5d:f0:92:df:b8:2e:91:de:c3:3b:77:84:8c:35:
                    b5:d9:85:09:bb:2a:fc:b9:2b:c3:1d:45:d9:68:cd:
                    1d:9a:1f:01:50:5b:fa:54:2d:29:02:73:3f:28:04:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:59:A9:5E:AC:A6:2F:14:6B:1C:4A:BC:CF:58:CD:6F:CD:20:9E:23
            X509v3 Authority Key Identifier:
                keyid:C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:10:3c:73:0d:74:97:f2:f0:42:cd:33:fd:e8:3d:1e:cc:
         61:b7:e0:97:ad:b3:93:0e:4d:2e:9a:99:3a:5a:66:eb:62:ad:
         0f:f4:61:3a:73:65:dd:c0:32:43:65:f2:2f:e0:a2:74:43:01:
         7f:58:d0:d4:6a:b1:16:f5:48:25:12:a4:43:54:a9:fb:77:7d:
         84:7d:85:fb:4e:f4:63:99:51:0b:b3:ad:eb:0e:c3:47:38:0f:
         1b:c3:38:ae:0f:f6:3c:e1:20:0c:90:8d:91:51:6e:c1:7d:7a:
         33:97:1a:cb:d2:0b:52:bc:9b:cb:d8:31:0c:83:07:9b:a0:e7:
         0a:16:78:ca:6a:ec:21:48:64:f8:28:cd:81:96:39:2d:d4:d2:
         50:f3:31:f2:35:b6:92:ad:0e:a9:02:d6:0f:17:e9:1f:29:ac:
         2d:13:c8:10:13:6a:39:d3:d9:c9:63:e5:10:dd:3a:13:1d:e1:
         25:2d:45:e5:88:fe:18:fb:38:ef:72:ae:b1:e8:81:76:df:ec:
         d0:c1:81:cd:aa:9e:ca:8f:0c:8a:d2:ec:fb:da:0f:61:4e:dc:
         ef:6f:e7:d7:6f:5e:6f:e0:3a:3f:af:c6:74:c8:83:ce:3e:53:
         af:1c:98:a2:0c:3c:c4:8d:6a:4e:5a:af:a7:ea:ad:e3:99:bd:
         32:10:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:50:03 2026 by rpki-client