Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          QQDnGzzbDpGMSv86Hzw+d7BEbpCDuHldJKE74Zq+Xlc=
Subject key identifier:   26:76:95:97:80:AE:07:A1:FC:3C:F7:3B:14:49:45:04:7E:37:56:B7
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       019E23C9BDD40B4F36F9189BFDEE398E1580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1919
Signing time:             Thu 14 May 2026 00:01:24 +0000
Manifest this update:     Thu 14 May 2026 00:01:24 +0000
Manifest next update:     Fri 15 May 2026 00:01:24 +0000
Files and hashes:         1: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (hash: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8=)
                          2: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (hash: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM=)
                          3: jf5uHxrszKQSuQYGdA__Shppl9Q.roa (hash: /NiMq9OomnHYD9C1AKbBaKLno//7V0tj4EGyTCM/hbo=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: lUgHpGw+tmJg/UZcKvDLpq+8jyTOka1MGa1W4TsErfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 22:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:23:c9:bd:d4:0b:4f:36:f9:18:9b:fd:ee:39:8e:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: May 14 00:01:24 2026 GMT
            Not After : May 15 00:01:24 2026 GMT
        Subject: CN=2676959780ae07a1fc3cf73b144945047e3756b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:15:32:a3:46:37:21:80:ed:fd:3c:0c:11:
                    b8:88:82:b7:b7:fa:f7:90:0c:a5:0a:de:de:a9:2f:
                    c5:cc:09:0a:e0:21:bc:66:c1:f6:28:0a:c1:78:4d:
                    2b:7d:1b:c0:08:bc:df:c3:5d:94:18:4a:b0:19:3a:
                    a2:b5:bd:77:b3:10:bf:92:b0:9a:fd:3d:69:88:f2:
                    8b:76:6a:8a:4c:a9:e4:09:13:a3:aa:1d:aa:ad:00:
                    67:fd:f9:b9:d0:2e:2d:fc:a6:f2:87:7a:10:16:24:
                    ee:00:3b:85:fd:78:14:13:de:c3:d8:a6:25:ad:87:
                    89:7c:08:ee:01:53:88:0a:c0:c4:8e:74:29:60:5b:
                    16:7a:fd:80:b1:25:9a:c0:5e:ab:e3:86:d8:4e:9b:
                    2a:93:05:5f:2c:e3:b9:4c:49:df:6c:88:3d:ab:76:
                    ef:7f:df:47:f1:b8:0d:a8:4a:82:f2:e8:c1:c1:96:
                    45:53:5c:f4:1a:cd:18:c3:5b:9e:1e:37:85:f5:9b:
                    5e:ee:c0:0a:f4:8c:79:61:93:0f:ab:0c:7a:db:99:
                    21:2b:78:17:15:cf:00:bf:82:80:5c:52:0e:ad:5f:
                    88:66:f3:e4:de:3f:e7:9f:76:43:ab:d4:ea:25:72:
                    ba:d7:c6:ac:a6:9d:84:f3:5f:ee:b3:c4:0a:3e:94:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:95:97:80:AE:07:A1:FC:3C:F7:3B:14:49:45:04:7E:37:56:B7
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:1e:5d:42:12:ac:ce:0d:5c:69:98:bd:63:dc:0e:d6:12:85:
         49:93:2e:53:5a:5d:b5:1b:04:c4:3b:08:b6:41:51:40:5d:7e:
         a3:b0:9f:4b:fa:09:ad:0d:33:43:9d:9b:51:40:a7:88:51:eb:
         c1:e6:63:fa:1d:02:12:cb:e3:99:6e:7f:12:86:5a:ac:dd:29:
         de:71:03:ac:33:aa:54:6b:60:67:a0:5c:28:c6:2c:43:92:27:
         06:81:c4:a6:98:84:32:9f:0a:39:e7:3a:1a:79:7a:02:88:5e:
         94:a8:32:fb:97:0e:10:93:88:e2:d1:05:b2:10:ce:1d:d2:50:
         40:81:1d:03:76:5a:6f:70:94:40:f7:86:e1:c1:84:a5:ac:74:
         fb:bd:50:29:77:76:ff:4f:92:13:0f:61:36:1c:f4:5d:3c:e8:
         ed:b7:32:de:f2:0c:73:13:da:1f:f6:86:21:fd:0c:cf:01:85:
         91:38:52:9f:70:7d:18:3c:ca:91:ac:6c:7d:08:a8:bc:a2:c2:
         65:e2:df:c6:35:29:21:38:00:f7:4d:30:48:22:37:27:2c:9e:
         a1:f7:1c:cd:09:44:2d:f3:ec:9e:29:42:de:1e:97:53:3d:ca:
         8a:48:ee:39:dd:e0:a9:21:1e:3f:94:64:9e:50:d5:52:84:b6:
         e1:b8:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:52:22 2026 by rpki-client