Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          oQN5pD3fR9CFoXBo1zmlBg88lhfX+N2rBxoxxdSgxbY=
Subject key identifier:   2E:10:92:EF:37:8F:7D:89:44:59:3E:A0:89:FC:B9:FD:35:E5:81:13
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       019F3A189FD865353D7ACF21F13341A5AE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          04D4
Signing time:             Tue 07 Jul 2026 01:02:00 +0000
Manifest this update:     Tue 07 Jul 2026 01:02:00 +0000
Manifest next update:     Wed 08 Jul 2026 01:02:00 +0000
Files and hashes:         1: 4mtxApph_9MS77mo7dnRYHNzv98.roa (hash: PhPkJXgdPNKURqwnzEUMiajtjEnbJmXFdFqDd1kopb0=)
                          2: 9EYbQcuokiQ3PLXtCGAIwFewXeo.roa (hash: jLNXeOrl0Rii7w4wiHiLKivUNt1cz5L0GNNK/0vRrvI=)
                          3: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: WVDjMXrUyPplHvvtMRKuQ7bVPUABk3agRmYEuQ3mmDc=)
                          4: aZTkPbXNRsPD1lOUCeaDegTWgE8.roa (hash: JFUxMjofzQwR3Oc2ar9w9EVMpvVMJoznshzwwTzRBIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:18:9f:d8:65:35:3d:7a:cf:21:f1:33:41:a5:ae:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: Jul  7 01:02:00 2026 GMT
            Not After : Jul  8 01:02:00 2026 GMT
        Subject: CN=2e1092ef378f7d8944593ea089fcb9fd35e58113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:5b:59:da:3c:8b:f2:d9:e9:16:05:5e:de:
                    78:4d:de:a1:e6:d6:a4:f8:fa:08:ef:14:e4:9b:e9:
                    82:ad:ed:0f:b1:2d:79:fd:33:55:a9:36:f0:3a:ce:
                    6d:e2:5d:1b:c1:08:30:b2:aa:ab:25:3e:67:a4:15:
                    ce:62:04:4c:cf:12:0c:53:7b:81:b5:de:8d:d8:3f:
                    dd:c3:f0:16:1d:df:cc:43:54:2f:52:0e:07:75:39:
                    fb:67:2c:77:45:ea:c1:60:e5:ca:dd:3c:5f:28:af:
                    a5:7b:f0:74:ca:6b:4a:df:79:33:7e:26:06:6f:93:
                    b3:be:03:60:db:a4:67:9e:e2:cd:2a:46:72:14:64:
                    f5:14:e8:39:ea:04:51:42:a0:ce:5c:ae:2d:bc:9e:
                    d3:22:63:b4:d5:94:09:58:df:de:fa:f0:48:2b:35:
                    48:17:aa:81:01:46:72:5e:e2:57:7a:9b:69:38:b2:
                    3b:2c:99:38:37:26:dd:b5:03:ff:fc:2b:7b:b4:42:
                    24:87:e1:60:e8:40:82:f1:ee:87:bc:72:00:ee:72:
                    b3:2a:98:08:a0:21:63:d0:0e:61:4a:70:6c:c2:2d:
                    20:22:da:98:19:06:43:8d:53:53:5b:2d:e9:cc:79:
                    f6:03:83:b7:4b:53:90:53:35:1f:d0:ef:12:9e:f1:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:92:EF:37:8F:7D:89:44:59:3E:A0:89:FC:B9:FD:35:E5:81:13
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:d3:50:09:3a:2a:94:f8:a8:ac:32:2a:c3:da:48:65:28:
         f1:c3:89:30:e1:89:ce:e9:24:a2:bd:88:9d:4e:0a:85:2b:7c:
         80:70:60:0a:e1:ee:7a:19:0c:69:14:2d:a7:80:3d:4f:04:7b:
         3e:19:22:e3:b8:4d:c0:5c:e9:14:08:ef:a2:25:65:2c:bd:f5:
         29:57:de:d3:7b:81:f8:37:fe:6f:35:f2:77:5c:e4:5e:aa:ad:
         72:9b:ee:f1:91:78:a0:96:a3:44:f0:e5:48:22:e7:03:75:c2:
         3f:51:94:d5:31:05:93:01:05:97:e4:ee:40:7e:38:7f:86:88:
         3c:b0:4c:3e:9a:3f:19:92:b1:b1:32:02:fb:e8:fc:46:e8:d9:
         25:8b:a7:ca:cb:4e:e7:b8:04:7b:bc:5f:c2:a1:43:d2:8e:7b:
         94:fd:4a:c1:63:3b:63:56:e9:cd:85:8e:10:6a:f3:14:34:eb:
         a4:47:cf:9c:1b:f8:2e:a0:78:79:ba:fe:e3:1a:26:b1:4e:11:
         16:75:0f:3b:28:57:c4:04:be:75:f1:bd:9d:35:ad:d8:0e:c4:
         e0:7f:38:64:8b:19:14:7b:bd:c8:fb:e5:1d:70:50:22:39:7c:
         fb:54:48:8d:bd:0f:71:1f:73:5e:a1:29:db:d6:e7:82:9f:8c:
         f4:63:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:53 2026 by rpki-client