Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File:                     wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier:          SBF+et5PFeI1pxnSb1S3gHAScRsyWnotow1usNQZF9M=
Subject key identifier:   6B:3E:81:D1:3B:98:9B:1A:D1:2B:59:43:FA:10:9A:57:02:C4:70:55
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer:       /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial:       019EB9C61BFDE1929D3FBCE98D577654DBCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number:          1030
Signing time:             Fri 12 Jun 2026 03:00:28 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:28 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:28 +0000
Files and hashes:         1: 5WdAfePuazyKOqDBol6a24O3XpY.roa (hash: mhrHbQmeUkZKLJUs5FqRvkUEbMJKmKPn0IXdQCttlDY=)
                          2: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=)
                          3: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=)
                          4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: n/AGGsaJxohYk/VhJMJwz5kpBdxs7OFTteCs1eJOa7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:1b:fd:e1:92:9d:3f:bc:e9:8d:57:76:54:db:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
        Validity
            Not Before: Jun 12 03:00:28 2026 GMT
            Not After : Jun 13 03:00:28 2026 GMT
        Subject: CN=6b3e81d13b989b1ad12b5943fa109a5702c47055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:60:ed:cb:e0:18:dd:d5:e2:47:0b:b9:2d:
                    21:45:fb:e2:3a:96:e1:1f:3a:b9:31:52:7b:80:83:
                    67:2c:70:1c:7c:b9:69:62:12:1c:fa:d4:ec:53:b1:
                    87:be:9c:fa:5e:4b:5b:c2:a2:7d:bc:e0:db:97:5a:
                    12:6c:02:62:b1:2e:14:b4:cd:b3:51:d5:15:09:4e:
                    9f:d1:40:97:86:7d:35:2d:14:dd:c8:0d:5c:9a:60:
                    b1:cb:63:83:10:36:c7:9e:ae:2e:a3:c0:74:32:dd:
                    b2:44:74:09:6a:06:d2:2f:d0:37:53:13:29:63:63:
                    bd:76:66:ae:54:e0:3a:43:79:0f:1f:a9:4d:12:49:
                    56:cb:e4:8d:10:27:3b:08:98:78:e6:30:3c:25:d7:
                    fa:df:22:3d:9f:6e:b6:14:2c:83:37:5d:0c:36:37:
                    9d:d6:f8:41:12:df:54:b7:ca:2a:4b:21:10:e1:3d:
                    d2:01:be:9c:31:09:5a:02:e3:1b:b1:41:c8:fe:df:
                    f8:ed:8a:99:f1:1b:4b:d1:ed:10:65:ba:37:1f:74:
                    68:37:90:32:27:4c:a1:fd:a7:25:54:5a:76:b1:46:
                    11:88:33:94:91:87:dc:51:16:5e:3e:a1:09:5e:7a:
                    6f:b1:37:b6:17:07:b0:98:0a:8a:b6:c3:a3:47:62:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3E:81:D1:3B:98:9B:1A:D1:2B:59:43:FA:10:9A:57:02:C4:70:55
            X509v3 Authority Key Identifier:
                keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:69:45:83:0b:0e:ed:5a:da:75:d1:8c:b0:39:6d:36:cc:
         b5:08:7a:b3:03:7e:37:c6:46:b1:80:9a:78:73:3d:de:f9:42:
         be:3d:70:a8:1e:fd:5f:67:d9:b4:1c:32:60:7a:01:2a:01:16:
         d4:a8:ea:59:31:df:1d:2e:5e:55:4e:d2:40:05:a5:0d:6a:43:
         77:b1:82:0a:b4:b0:8c:63:ca:e4:57:8c:20:99:c1:8c:45:77:
         ac:3c:d1:ce:95:31:e7:4a:6e:f1:c2:76:99:86:a9:bd:0e:cf:
         7c:0c:53:4f:5d:fd:68:ee:e3:6a:39:28:70:43:90:82:06:f4:
         5c:75:0b:aa:60:57:7b:98:fc:74:98:53:26:b3:d2:c6:06:94:
         c4:dc:9a:0f:71:03:0d:92:00:d6:ba:a6:4f:da:17:0d:29:71:
         41:09:25:6c:cc:93:51:29:e4:b7:47:ab:02:42:3d:e3:61:3b:
         59:e5:54:4c:0a:ae:13:c8:61:32:a2:34:43:3a:a5:76:75:8f:
         4d:34:7c:32:76:f4:e4:df:68:6d:d0:87:07:da:f4:cf:bb:bf:
         bb:e5:a3:9d:fc:6c:2d:3b:4f:75:7a:d1:2d:4d:78:a6:1d:7b:
         0b:44:f0:7f:be:1d:d4:03:de:54:aa:61:2e:98:5f:9d:1a:4b:
         9c:6d:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:16 2026 by rpki-client