Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
File:                     wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json)
Hash identifier:          xsMP8ZpEqYJgAWIS/I4604ug8QltCLZP5gc3YVn/8MY=
Subject key identifier:   E3:88:A6:F5:99:12:47:D1:9E:83:C6:4F:E7:83:78:4E:EA:9D:92:34
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Certificate issuer:       /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial:       019F1943A7F52E56CE1AB705F4993BA402B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
Manifest number:          16B3
Signing time:             Tue 30 Jun 2026 16:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:32 +0000
Files and hashes:         1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=)
                          2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=)
                          3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=)
                          4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=)
                          5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=)
                          6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=)
                          7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=)
                          8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=)
                          9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=)
                          10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=)
                          11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: q3NDsXryjDNMEVXqkhP6AP3UZ6iBEXRTS+SD6O4c8QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:a7:f5:2e:56:ce:1a:b7:05:f4:99:3b:a4:02:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
        Validity
            Not Before: Jun 30 16:01:32 2026 GMT
            Not After : Jul  1 16:01:32 2026 GMT
        Subject: CN=e388a6f5991247d19e83c64fe783784eea9d9234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:75:0d:af:9d:94:a9:4b:e0:ec:4b:0b:41:
                    6a:04:1d:06:3f:f4:3b:8c:38:09:81:c5:03:12:9a:
                    64:ed:a4:2f:67:7a:ba:85:c7:a5:6f:b1:62:b5:98:
                    39:9b:88:aa:8a:69:69:41:4c:ef:11:a1:07:e4:a9:
                    b8:db:ef:8d:1d:69:74:e4:dd:13:dc:37:15:10:86:
                    ee:c7:46:dd:66:d7:41:ed:10:42:82:c8:82:0e:fd:
                    47:5c:ea:33:0e:de:da:58:5c:0f:c4:c9:43:b8:77:
                    1c:3e:99:fd:42:b4:3c:4f:85:32:b7:89:3d:08:6c:
                    5f:32:5d:9b:a2:2b:c2:97:e9:38:99:bb:49:f8:d0:
                    58:ec:91:20:18:12:8d:35:85:3c:63:2e:b5:bc:f0:
                    1c:f2:ed:31:62:85:6c:67:16:88:46:3a:6b:41:24:
                    b1:05:be:8b:45:8c:65:1d:97:81:d1:a5:62:ac:24:
                    c5:2b:26:16:da:de:20:b3:4a:b1:2a:f5:81:49:70:
                    d0:82:a1:97:ee:6e:95:95:c5:68:bd:e4:77:65:be:
                    df:65:bb:a0:2a:98:c0:42:40:fa:c8:27:f7:40:0a:
                    74:86:01:51:a5:c2:88:aa:f5:92:45:30:76:05:66:
                    33:9a:58:eb:e8:ba:93:85:54:4f:e0:51:36:8d:0e:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:A6:F5:99:12:47:D1:9E:83:C6:4F:E7:83:78:4E:EA:9D:92:34
            X509v3 Authority Key Identifier:
                keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:e1:f3:f7:c7:de:95:e0:40:79:36:69:db:08:dd:ec:4e:
         a1:49:f8:b5:40:17:f2:e5:69:cb:44:a1:d8:f3:4d:0d:8d:2e:
         0f:00:ab:f7:f2:10:2f:a1:72:eb:69:88:40:8e:01:59:98:a4:
         d5:2c:35:84:94:8f:3e:a9:a6:c7:f6:a8:61:01:76:e6:e2:fd:
         92:6b:e1:5f:06:cb:fa:02:00:c0:78:93:4a:4f:5c:13:c6:9c:
         e0:be:9f:76:a3:ca:4d:6a:d5:b5:c0:78:88:78:4d:54:37:2b:
         b5:07:81:b7:f7:d6:dd:6a:ce:49:4c:69:6e:92:41:94:94:6a:
         87:6a:ce:08:ef:da:45:ab:56:41:82:8c:f3:97:08:71:26:b0:
         62:6c:73:e1:4f:83:cb:59:ce:34:7c:8c:84:89:c4:0d:e9:31:
         de:49:97:27:f6:71:8c:e2:ac:2f:4c:a1:cb:2e:f1:58:e8:6a:
         9a:41:3a:c7:e2:db:41:3e:7d:ab:41:6d:67:6f:ab:0f:c8:99:
         b1:b2:cb:eb:ea:9f:be:a8:d7:e5:2b:79:72:52:e7:55:e6:8e:
         97:b3:be:56:00:f7:dc:cd:fc:e1:06:ac:d5:b9:28:95:52:3f:
         09:bb:3f:a9:c3:88:2c:75:89:00:fd:e2:9f:98:49:14:3c:b7:
         13:65:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:53 2026 by rpki-client