Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          mMB/h75FFE9I9wZAJOU6faYsQtdRJM3e2JxZgUhbF50=
Subject key identifier:   19:D5:7E:74:00:FC:6F:9C:BD:1F:B0:6A:27:40:77:DE:58:CC:BD:95
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019F194302B3D120C04BC651B9D8FAAAB361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0AD0
Signing time:             Tue 30 Jun 2026 16:00:49 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:49 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:49 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: S0Z-QG3S6OWhct2R_ZOJmi2BN2s.roa (hash: DcFFFIgBF5pA0VbXRYkO/MxP7tMxGBn3QzgWRQGPawY=)
                          6: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: uQChkW1qYMLv3Y3eyWGnluvCOeh9Y32mH6vNOUUVLwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:02:b3:d1:20:c0:4b:c6:51:b9:d8:fa:aa:b3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Jun 30 16:00:49 2026 GMT
            Not After : Jul  1 16:00:49 2026 GMT
        Subject: CN=19d57e7400fc6f9cbd1fb06a274077de58ccbd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:76:44:d7:cd:da:4d:c4:2b:3a:22:8b:f5:
                    e4:8a:fe:f5:ab:14:69:b2:a7:cd:e7:ea:34:f8:ea:
                    4d:58:20:e2:d4:be:bc:85:4f:f0:39:2a:ba:a1:01:
                    15:ff:70:74:65:6a:d9:af:96:82:ca:f8:35:2f:16:
                    dd:a4:35:44:3a:d8:da:a1:f6:f7:6f:20:a0:4d:a6:
                    ae:fe:0c:ca:b3:28:58:bf:b9:52:f2:f4:59:d1:ed:
                    4c:9a:4e:94:b3:c6:0b:65:94:84:2d:92:98:ae:63:
                    7c:29:55:3f:26:52:db:79:e5:36:42:3c:f4:f2:ee:
                    f8:18:1f:1f:68:d6:30:ae:f8:9b:30:6e:77:c2:2d:
                    07:60:59:ec:13:91:5d:b1:22:39:07:7b:92:a1:49:
                    b7:2d:05:a7:85:11:b5:97:7a:53:74:11:ad:12:78:
                    53:c8:00:cf:a3:d2:73:a9:a2:6a:13:57:b8:fe:34:
                    27:7d:da:61:5f:c5:c7:ab:05:4d:80:bf:f5:e0:4d:
                    48:25:1b:5b:32:94:9b:11:fc:df:f6:a5:45:3c:c3:
                    f3:7a:49:24:12:5d:9c:d5:ed:a3:13:44:1d:8c:02:
                    1e:f5:b8:76:60:fd:39:5b:11:df:c8:b6:38:23:c5:
                    c2:a9:28:7e:94:86:31:81:55:64:3a:9f:24:e0:be:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:7E:74:00:FC:6F:9C:BD:1F:B0:6A:27:40:77:DE:58:CC:BD:95
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:40:99:78:db:d0:16:27:c3:c4:35:e3:df:bb:3d:cc:37:18:
         c8:e3:59:ac:2b:0f:33:ed:d6:95:7f:1d:0e:cc:e7:5c:fd:5c:
         38:04:22:c1:8e:25:bf:48:07:09:3d:2c:77:26:50:e7:5b:73:
         0e:e8:d7:da:e9:7d:b9:f3:62:92:68:57:4b:f9:45:31:86:01:
         12:6c:77:29:0b:44:dd:77:7f:5e:36:42:58:92:9d:98:38:17:
         54:c6:56:50:b6:b1:e2:02:69:93:68:43:0f:43:72:e8:31:3a:
         89:c0:45:ca:4f:1b:4b:e3:95:e9:d0:59:91:75:1b:f8:23:d9:
         b8:34:51:1d:94:95:35:dc:81:47:53:55:2f:ad:6c:91:b3:eb:
         68:13:77:cb:2b:d9:93:e6:47:d2:34:c0:5c:7f:28:1d:8d:7f:
         d8:42:df:3b:a8:3a:a4:06:7e:6f:d7:55:cc:e4:93:35:24:43:
         68:dc:84:05:f9:a3:e2:e8:79:5b:f1:02:b2:ba:ba:93:7e:32:
         15:cd:44:de:c2:0f:c5:5f:bd:e0:35:39:a3:8e:30:77:de:bc:
         bc:ce:33:46:c2:b6:4e:59:e3:aa:3f:64:93:3d:18:45:f8:08:
         0b:f3:fb:b9:00:9b:39:e7:f8:c3:0b:6a:c3:b0:33:47:7d:ed:
         1f:18:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:43 2026 by rpki-client