Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          hHLji92Qw0vnFN6h0hvE+u1pREPyzO5Iwq/7ziLWqLw=
Subject key identifier:   25:9A:4C:5B:0B:21:59:C8:A6:E8:14:03:29:E7:8A:4D:45:E4:24:DF
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       01A002822987017BAC1EBA66EB0B1A13C955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 23:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:19 +0000
Files and hashes:         1: 2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa (hash: cybpkVwdsMajo+j6GQEPWPYPJtxhQXNnJjY27Ojj6kI=)
                          2: H-6m9OAus7SJdJgHPXm_EOjYjKw.roa (hash: gi8ow+847xYV+vC4uNruDQ8q4FPVqzKl6+lW3Re5puA=)
                          3: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: 833wKLvxvVoFQNbJydUEmkWUV3YnTvxKW7ZgS2YQWp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:29:87:01:7b:ac:1e:ba:66:eb:0b:1a:13:c9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Aug 14 23:01:19 2026 GMT
            Not After : Aug 15 23:01:19 2026 GMT
        Subject: CN=259a4c5b0b2159c8a6e8140329e78a4d45e424df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:13:98:8b:e8:49:4d:d1:96:28:8c:6a:1e:
                    99:99:d8:fd:ff:48:8d:5c:43:6c:1e:a7:9e:b6:12:
                    95:01:1c:37:12:b6:28:57:d8:1c:c9:83:4a:2d:4e:
                    f5:3b:fd:70:88:6e:6f:01:72:a9:5f:a9:58:42:01:
                    e2:34:c9:9e:f3:af:8b:3b:90:32:c6:68:df:3e:e0:
                    e4:de:fa:2f:6f:36:f6:52:c4:27:da:39:66:41:7a:
                    a7:4b:c8:3d:07:eb:1c:c6:38:10:cf:12:e5:3f:d3:
                    d4:d7:ea:5a:cb:66:8e:39:76:11:32:4d:ce:49:4d:
                    b9:2e:4c:55:7a:e3:1d:4f:0f:37:7e:1c:b8:d2:5b:
                    cf:d0:4c:59:94:09:d8:d6:8f:20:2c:c6:32:e8:21:
                    43:eb:45:94:98:cf:68:56:74:2d:0a:47:b4:57:14:
                    5d:80:8a:17:07:22:be:03:7c:fb:2b:f8:07:c2:3e:
                    02:91:5a:3a:a8:0b:3b:a4:54:f7:fa:d6:ad:60:cc:
                    3b:e4:3b:9c:7f:27:ea:e7:f1:25:51:6b:6d:e1:ed:
                    7a:3d:6a:f6:87:d5:d8:9a:82:b5:50:ea:c9:f6:01:
                    98:ed:eb:78:2f:93:f0:ee:85:75:ef:1f:05:b9:44:
                    c2:2e:79:3a:32:2b:cd:80:58:5a:2e:19:cd:4e:1f:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:4C:5B:0B:21:59:C8:A6:E8:14:03:29:E7:8A:4D:45:E4:24:DF
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:bc:a2:08:49:49:1d:4b:3f:45:1b:95:b6:55:b0:a6:20:
         71:36:3d:c9:b0:7f:07:99:ae:bb:93:04:60:8c:3e:0b:d3:4c:
         52:96:e7:68:00:d3:00:c3:c4:1e:90:36:e0:a2:44:6e:39:46:
         18:d3:e9:9a:a1:a9:fa:7b:aa:79:a9:7a:40:61:6e:7f:fd:39:
         38:1f:2e:0d:17:e2:13:92:36:ac:0b:d6:a2:7e:18:4e:d0:b1:
         9a:32:b6:df:85:6d:f1:a8:95:c2:a3:09:ff:11:33:6c:be:b4:
         15:d5:5b:00:e9:d8:a7:7e:9f:37:e5:2d:89:fb:f7:ec:73:f5:
         96:ef:5a:61:e1:5d:0c:c6:6e:e6:8a:ff:60:f9:2f:6d:7e:ac:
         ef:75:df:f1:82:ac:e9:10:05:06:1d:ea:9b:de:91:86:a9:dc:
         dd:7c:4e:40:72:67:c8:51:bc:2a:f9:0c:b6:6a:fd:b8:be:0b:
         15:cc:27:2b:67:1b:05:c3:73:22:8b:e0:09:44:b1:da:14:95:
         51:89:a2:27:e0:1f:5d:e9:87:32:52:06:fd:e0:cd:16:3a:0c:
         c4:ee:5b:6e:73:85:5e:4f:bb:e5:e5:ce:ff:c4:ae:af:eb:95:
         6e:de:24:1e:b1:b1:97:50:ef:4f:ac:80:57:a6:26:a9:09:d2:
         a6:30:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:27:50 2026 by rpki-client