Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File:                     WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier:          cfL+s6AG4BZ/ZjqID0h8YqQOhCbMofX9vs4HTnm1gmw=
Subject key identifier:   69:21:63:72:A7:90:F1:E3:9F:F2:04:9F:DB:B3:27:A4:64:D9:51:7C
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer:       /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial:       019EBDA2E3D44B739B19DAAB53D34537DA4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number:          040E
Signing time:             Fri 12 Jun 2026 21:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:29 +0000
Files and hashes:         1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: /1gf5ZFEAFLtl5dHWqlsuKJLWEZwtON3xRJmSg3sVZk=)
                          2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:e3:d4:4b:73:9b:19:da:ab:53:d3:45:37:da:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
        Validity
            Not Before: Jun 12 21:00:29 2026 GMT
            Not After : Jun 13 21:00:29 2026 GMT
        Subject: CN=69216372a790f1e39ff2049fdbb327a464d9517c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:0c:1d:36:af:2c:af:d0:1f:f0:ee:d7:25:
                    f1:16:6f:62:e6:c1:75:b9:65:8f:df:8c:0b:9a:12:
                    fe:af:c3:66:6f:a0:4f:12:b4:09:bb:66:01:a9:21:
                    51:d3:12:58:f1:64:49:47:2c:e8:4a:08:5a:13:9c:
                    24:bd:2c:c4:80:5c:51:87:3d:ef:83:4b:46:61:ce:
                    d4:64:78:9e:f8:7e:08:b6:7c:72:8f:bf:75:ef:40:
                    18:40:14:fd:49:59:a6:5b:0d:6a:55:51:ab:d0:e8:
                    9b:42:4d:88:02:e0:a1:79:18:6b:9a:7e:09:de:5f:
                    96:8c:af:ea:c3:de:f7:fb:57:bb:ad:56:13:32:87:
                    85:f9:91:0a:78:e4:3a:95:b6:44:fa:99:65:5d:d0:
                    5d:16:90:53:05:51:3a:66:d5:20:b4:36:63:42:a6:
                    02:51:31:f6:f6:94:6f:d1:42:70:ca:a6:43:d6:43:
                    64:49:c5:48:13:f5:cc:0d:47:95:33:fc:73:40:83:
                    79:fd:60:e4:d9:b8:70:ce:79:0a:6d:d5:bb:78:8f:
                    8b:59:a0:52:0d:7c:73:57:7c:78:0f:97:7b:34:9e:
                    84:41:d3:e2:fb:31:4f:2a:cf:9c:5d:2a:42:cb:f0:
                    7c:60:0c:21:ce:a8:eb:dd:99:f4:94:31:9f:a5:70:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:63:72:A7:90:F1:E3:9F:F2:04:9F:DB:B3:27:A4:64:D9:51:7C
            X509v3 Authority Key Identifier:
                keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:7b:6b:95:5a:fc:d6:9f:21:72:e3:0a:c1:01:2b:7c:75:
         cf:1f:ed:fd:72:50:c1:ec:98:53:c9:53:d0:a0:0c:11:c8:3f:
         c3:1b:f4:4a:38:77:59:77:6e:2d:ea:7c:6a:51:00:e9:09:06:
         20:4e:3e:84:92:f6:8c:17:18:ec:38:e5:5e:6f:67:72:69:f5:
         9e:ea:5e:97:a1:ce:fb:17:6b:10:33:63:eb:c2:fc:46:a4:9b:
         14:5f:13:ff:e7:55:cc:0f:9e:00:cf:59:fd:5d:47:ae:8d:2b:
         34:47:50:06:5e:ab:b4:27:25:9b:a4:34:8f:3f:c1:f4:cc:32:
         fb:25:72:a2:8e:47:9b:c4:e7:50:41:63:1f:3f:7b:28:c9:b4:
         9f:48:5a:44:6c:f2:e4:a0:54:1f:f6:4a:42:59:78:b9:e0:2a:
         11:b5:31:85:1a:49:b2:6e:cc:d6:b0:9d:8d:ac:54:16:d0:e7:
         10:94:28:77:e1:0c:51:2f:aa:2e:2b:78:e9:d4:c1:c3:48:2a:
         8e:24:45:19:de:bb:e3:1e:c9:ca:dc:15:3d:fb:17:1d:98:5d:
         9f:19:94:9e:bd:2a:5d:3a:6b:aa:b8:25:29:f0:c9:d7:5c:89:
         77:04:5c:cb:e4:a9:c4:d0:4d:c1:b7:c8:8c:06:46:d6:a8:b9:
         9e:ea:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:23:45 2026 by rpki-client