Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File:                     WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier:          GfidsT6/nPYPzs3tFthg5p7gdWOhd8wDVxyb8iAyIa8=
Subject key identifier:   3F:27:4F:9B:A8:94:3A:CB:D1:90:6E:1C:2F:CD:55:96:5D:02:E8:F3
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer:       /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial:       019F189E2DD1B11009DFCFD6E5DC921405F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number:          102C
Signing time:             Tue 30 Jun 2026 13:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:47 +0000
Files and hashes:         1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
                          2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: Y2di0SLukQVSaEgJbjmMjvzrW3a90fDWkmVkaJHqjTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:2d:d1:b1:10:09:df:cf:d6:e5:dc:92:14:05:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
        Validity
            Not Before: Jun 30 13:00:47 2026 GMT
            Not After : Jul  1 13:00:47 2026 GMT
        Subject: CN=3f274f9ba8943acbd1906e1c2fcd55965d02e8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:1a:0e:32:5c:8d:d8:85:6b:8a:8a:0f:39:
                    3d:4c:20:37:74:ee:15:0c:14:a0:40:3c:3d:5f:46:
                    fc:19:d5:e1:89:58:d0:5a:af:5b:6b:d4:b4:53:f1:
                    92:92:a5:c3:5f:ea:2c:cf:a5:ab:c6:20:f0:97:4c:
                    a5:63:49:33:e1:76:99:38:96:7c:ed:fb:f9:cd:bd:
                    09:69:61:1b:25:03:04:e6:3b:41:01:31:b7:88:bd:
                    26:48:52:29:3a:f9:f8:e9:76:5e:78:5c:07:1d:ec:
                    0b:f6:ab:28:6f:c3:9a:b2:bb:24:fa:cc:27:82:e7:
                    f8:c1:98:6d:ef:ca:f3:88:21:67:58:75:18:98:af:
                    61:c0:57:b3:bd:c6:54:0a:03:be:d7:9b:08:5d:86:
                    c4:b9:3f:3a:9d:05:3c:be:91:6b:5b:27:2e:a2:3e:
                    27:88:e8:0e:bc:fd:32:f7:6f:f9:50:31:ca:6b:f1:
                    42:23:c4:c0:00:d8:ef:e3:6d:c2:97:26:5b:b1:12:
                    66:1b:8d:9a:35:ac:aa:06:6a:56:b6:a4:b8:ba:46:
                    ec:f9:6d:d4:08:a5:a2:ed:49:9d:ce:0f:a7:f2:df:
                    60:d9:4f:5d:58:11:8c:4a:65:64:e4:e5:a6:e0:02:
                    49:b7:1d:37:80:52:0c:8b:09:dd:1c:1f:a3:73:85:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:4F:9B:A8:94:3A:CB:D1:90:6E:1C:2F:CD:55:96:5D:02:E8:F3
            X509v3 Authority Key Identifier:
                keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:67:01:93:49:36:e8:c4:40:48:69:4d:2b:88:51:fb:2e:
         57:ed:c0:37:ac:0d:1d:7f:22:50:71:b1:fd:c2:d0:78:22:88:
         e4:2a:28:94:e9:d3:f2:e8:4c:44:91:ab:f5:0d:13:a1:47:04:
         e8:86:84:6e:5f:3f:74:3e:6f:13:80:b6:73:64:c3:f6:51:e0:
         a7:73:80:27:4b:b6:2b:ca:4b:49:e8:59:ff:b2:1e:56:cb:20:
         fa:ea:54:70:cf:fa:70:c1:87:1d:6b:6e:19:20:2c:f3:5b:88:
         2e:9e:11:20:fc:8d:ad:b5:dc:45:1c:63:a5:32:9d:c8:16:d7:
         c7:07:6b:e4:3a:4a:35:85:3f:7d:45:3e:68:1f:95:d8:11:5a:
         bd:e4:e6:57:77:9a:67:06:a1:96:15:31:fc:34:33:6a:d8:74:
         6e:91:11:e6:d0:c1:cc:ae:07:d5:f0:e0:2b:0a:ef:75:33:62:
         b0:1a:b7:76:26:fb:4f:b8:ea:29:c7:e3:8e:71:9f:eb:b3:7c:
         1e:bf:a7:91:15:c3:6e:ba:b8:d2:1b:95:34:36:b2:0b:2a:48:
         ea:7b:3c:3d:80:b6:7d:21:e5:ac:20:45:2a:ce:19:01:e1:9f:
         0f:fb:21:01:41:81:3d:e9:eb:e2:ea:32:5e:14:8e:37:65:dc:
         c7:52:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:20:42 2026 by rpki-client