Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File:                     WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier:          /yoHRb1TnsJoAsJU1l5CHkgxyDs+NIvia5b1umJAWzY=
Subject key identifier:   01:F6:FC:84:9B:8E:A8:5A:01:7B:A5:27:99:E2:83:46:78:3E:9A:44
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer:       /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial:       01A0024B514B83C6E9622653D8A970BC40A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number:          10A5
Signing time:             Fri 14 Aug 2026 22:01:25 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:25 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:25 +0000
Files and hashes:         1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
                          2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: lDcAO2CXjSDf58vatx3y7DYIzTC4+OO+3t1CR8DaxL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:51:4b:83:c6:e9:62:26:53:d8:a9:70:bc:40:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
        Validity
            Not Before: Aug 14 22:01:25 2026 GMT
            Not After : Aug 15 22:01:25 2026 GMT
        Subject: CN=01f6fc849b8ea85a017ba52799e28346783e9a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:65:53:6c:0a:2d:4e:55:53:9c:1b:49:1c:
                    fa:88:f7:3d:4c:10:90:f9:f5:7d:89:81:e0:84:91:
                    65:ef:c0:83:b9:8a:7a:e2:75:d8:00:6c:cb:b6:82:
                    08:e5:9e:cf:c6:8a:f3:f7:46:4a:27:53:26:7a:fb:
                    ee:0c:97:d8:5e:4e:7d:fc:f5:61:9d:fc:25:db:a6:
                    7d:c2:2f:ee:51:5e:00:9f:68:c2:c8:da:d5:45:0f:
                    38:3c:6f:ad:c1:fd:c6:be:95:be:59:04:02:f5:1a:
                    82:8a:e9:c9:e7:66:25:ac:09:1e:45:26:38:cd:67:
                    4f:05:2c:57:85:1a:77:c8:f6:c1:cf:06:a7:85:b4:
                    55:4d:11:5c:2a:d4:ef:32:e8:d1:e0:e5:96:dc:bd:
                    de:79:ea:a3:b0:7c:29:54:ba:da:b9:35:2f:ee:d2:
                    19:51:4f:b0:5b:f2:fb:49:cc:e3:d2:54:a4:02:ee:
                    1b:ba:cf:50:1d:c2:7d:64:4b:26:da:67:fa:09:a0:
                    7a:c1:07:b8:ab:3a:ec:5c:44:c0:5f:09:ce:33:43:
                    8d:9d:ad:2a:d8:be:5c:a9:1d:74:cf:75:f0:75:ec:
                    1b:5c:8e:27:25:8f:2d:1c:80:aa:37:1c:37:6e:3a:
                    61:30:fe:46:47:48:a5:19:1f:c9:8f:33:d9:cd:1b:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:FC:84:9B:8E:A8:5A:01:7B:A5:27:99:E2:83:46:78:3E:9A:44
            X509v3 Authority Key Identifier:
                keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d4:3c:b7:2b:24:2d:86:74:c6:d7:3d:47:01:69:8b:cc:24:
         c3:21:db:cf:a2:94:ed:57:80:c8:b6:8f:56:16:6e:4b:d6:9e:
         aa:56:9b:94:24:6c:5f:1c:11:b7:ee:5a:e4:d0:d3:29:ec:5f:
         58:e9:55:ce:76:9d:ae:6d:03:9f:1a:3d:e3:01:0c:26:80:d1:
         47:10:85:ec:40:50:e1:a6:d9:2b:00:f2:00:3c:96:ac:ad:a8:
         b3:8b:90:9e:c1:b1:16:35:68:38:03:13:1f:dc:67:7f:58:7f:
         e3:43:90:4c:e1:67:1a:2f:80:19:97:45:78:83:9f:86:61:e8:
         e3:c2:4f:1c:69:5d:a7:b7:79:b6:60:9b:87:c3:16:e8:19:8e:
         2a:b6:e4:74:b0:cd:c4:97:61:0b:27:63:a4:6b:6b:ab:42:43:
         8f:46:84:93:54:b3:fc:74:6b:03:25:9c:6a:50:7b:2e:72:e4:
         47:42:a5:31:07:db:a4:17:8c:20:4a:a9:c1:fc:75:8c:ef:3e:
         f4:8b:ef:cb:4e:e3:19:43:23:a5:a7:7b:c3:37:7f:5e:09:80:
         19:1e:3b:78:de:41:26:ad:cd:c1:bb:40:e2:99:0e:26:7e:db:
         3c:b8:bf:76:ef:bd:6d:a7:ba:0a:63:56:fb:d1:48:e2:ad:44:
         4c:bc:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:34 2026 by rpki-client