Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          iRDI5Oy3t5+KV1BMX5886yH28rGNZr50cvKT4tOZ9Yo=
Subject key identifier:   86:89:9B:82:A0:38:F4:11:32:0E:28:44:7F:AB:15:D8:4F:2B:DE:5B
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       019F9EF11CEF48B1F3549214DF9FDA96B30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0E38
Signing time:             Sun 26 Jul 2026 15:00:29 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:29 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:29 +0000
Files and hashes:         1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: qfahKwWF25oMmeG4zX51Ubm9wN3B8C1Ng+JCt4iuXWM=)
                          2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:1c:ef:48:b1:f3:54:92:14:df:9f:da:96:b3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Jul 26 15:00:29 2026 GMT
            Not After : Jul 27 15:00:29 2026 GMT
        Subject: CN=86899b82a038f411320e28447fab15d84f2bde5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:ab:1a:80:ed:69:3f:ff:5d:ab:ab:3a:21:
                    0b:ff:1f:37:65:67:5f:63:87:67:ba:c2:04:e4:ba:
                    3f:a1:b5:65:3e:77:fd:e3:ad:34:d9:33:74:45:96:
                    dd:e5:b1:b8:ab:97:54:27:b6:e6:a1:04:fd:dd:6a:
                    30:1b:8c:4d:c5:da:b5:fd:ae:3f:73:84:78:d7:17:
                    16:96:71:d5:19:d9:25:0a:1d:df:bb:07:00:03:38:
                    32:47:d0:6d:19:3f:0f:d1:20:b7:08:dc:4e:1a:90:
                    c5:d1:6c:c0:9c:05:5f:44:e5:ca:96:18:e3:1c:8c:
                    7a:b3:b2:a8:54:12:71:e7:08:88:3d:a0:93:14:f0:
                    cf:c8:da:7d:f4:ed:0f:c7:20:10:88:4f:ef:96:cd:
                    39:67:07:a4:2e:2a:47:b6:91:21:0c:bd:b3:88:0a:
                    da:af:4e:bd:bd:45:e4:2c:b1:7a:aa:18:2a:a8:82:
                    cd:fa:3f:70:f1:c0:81:56:c8:e5:ed:d1:78:a4:c4:
                    dd:29:b5:0a:c4:d8:72:e7:5e:4b:42:0b:12:27:be:
                    c1:4b:f5:fe:39:ce:18:97:a0:84:ca:97:91:b0:cd:
                    f3:17:2a:92:3f:6d:24:ca:c4:82:ac:d3:9a:94:35:
                    03:5f:3a:07:c0:e6:06:8a:0f:70:72:f8:ab:ca:cf:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:89:9B:82:A0:38:F4:11:32:0E:28:44:7F:AB:15:D8:4F:2B:DE:5B
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:c6:ed:f1:6b:3b:9e:6d:62:1e:a4:18:5c:91:5e:6e:44:
         e8:b5:c9:2a:e1:86:59:78:29:fd:b4:c1:d4:ac:fa:d2:e8:ab:
         ce:9b:19:05:4a:14:ba:58:53:42:f4:d7:c8:fe:6a:59:9c:e6:
         c4:7e:08:38:14:fd:0d:35:dd:b7:49:c1:bb:7e:df:98:72:70:
         39:82:d1:2d:e4:dc:84:08:ef:c0:41:b4:2f:99:0a:84:d4:ff:
         83:e6:1d:86:f9:a8:36:a1:7e:60:5a:9c:f0:0a:56:b9:a7:78:
         38:6a:cb:d0:36:09:b4:8b:51:64:67:00:9f:e6:12:2b:c4:0e:
         43:b7:3a:a7:89:93:5d:1c:32:8b:83:e7:65:40:af:c5:42:d6:
         ae:95:21:1b:fd:42:4d:4c:7c:03:4f:6c:b1:46:27:a3:cc:ea:
         22:41:ac:8f:b7:fd:82:92:fb:1b:56:66:b8:71:98:69:fa:2d:
         b7:8e:54:26:df:05:f6:2f:2e:28:d0:8a:c5:e3:8b:0b:4f:0d:
         2d:a9:f7:27:5c:c8:cb:aa:f5:9b:3d:94:1f:b2:56:c3:d3:9b:
         52:91:07:70:e2:9a:17:d3:64:4e:42:e9:3c:3c:00:c5:f0:a2:
         4f:ec:6b:d4:41:8e:b8:c9:cf:13:2d:74:61:4f:5f:cc:9e:14:
         a2:08:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:16:05 2026 by rpki-client