Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          fFiq0lz+jPj72Njwm0Ucrj2PRck0loCPEfpBu7DItE4=
Subject key identifier:   73:2D:40:67:74:ED:92:D6:BF:4D:55:55:AC:85:C7:13:F4:C5:48:63
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019EB9583758C9EA71799B2BDE669245562F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 01:00:26 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:26 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:26 +0000
Files and hashes:         1: 80PdpdaZu0agDCN9RQnDf0bgfeU.roa (hash: DH5ZQA3PWXrg29JH5F4jHegGPMYQINXJvtbDzJXlSLo=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: M/usuOsX+ecFqL5ebJUtuigwwsNCB0ul0oXsFWjmDgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:37:58:c9:ea:71:79:9b:2b:de:66:92:45:56:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Jun 12 01:00:26 2026 GMT
            Not After : Jun 13 01:00:26 2026 GMT
        Subject: CN=732d406774ed92d6bf4d5555ac85c713f4c54863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:12:39:50:c4:33:a9:07:86:f1:a9:ff:e0:
                    42:72:0e:4a:a8:59:dc:64:62:c6:95:59:74:97:68:
                    2e:f1:8f:44:eb:c9:30:1e:19:f0:a5:7e:16:46:11:
                    79:0b:1a:c3:e8:8f:7c:ff:96:25:8c:f3:65:f9:f0:
                    17:3f:88:85:30:90:2d:22:32:ef:c0:79:a4:fb:a1:
                    2a:83:76:09:67:62:59:a7:49:b0:53:2a:be:44:f7:
                    6d:76:95:d3:ae:e4:8c:79:5f:4c:2b:47:2e:67:ee:
                    21:3f:be:a8:88:6c:33:54:5d:35:85:55:cf:3a:2e:
                    c2:51:66:87:ed:a2:f9:0a:61:16:7a:c1:c3:cd:fd:
                    20:a6:4a:68:8f:03:ac:9e:20:85:05:e2:f5:fd:f8:
                    a2:89:eb:ab:e9:3e:8f:3a:4f:18:2d:42:e6:50:d5:
                    5a:22:bf:30:ca:13:59:74:9c:44:60:7e:a0:65:ee:
                    cf:47:b4:56:d0:75:36:8e:ae:cd:06:72:3b:d7:b3:
                    c4:a4:25:01:4f:56:c6:2a:1f:5f:5a:79:47:ba:2e:
                    5d:1b:a0:49:94:b5:2e:43:5d:14:43:4a:bb:e5:76:
                    0c:56:0b:5d:40:c2:b0:c4:e8:35:53:5b:ac:61:15:
                    70:42:7b:a2:d9:d3:ea:a9:f8:19:59:84:d0:9f:7a:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:40:67:74:ED:92:D6:BF:4D:55:55:AC:85:C7:13:F4:C5:48:63
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:d4:6e:ec:f5:03:10:a1:ea:62:66:eb:c6:e7:21:4d:e4:
         38:86:28:0d:56:76:d8:dc:9e:4f:b4:4d:78:25:d6:dd:c5:34:
         85:5a:75:4a:26:06:09:a5:c7:d6:34:5f:5c:d9:21:3d:ff:03:
         a1:ad:41:96:72:af:94:ec:de:20:26:77:64:4d:2f:0b:75:71:
         eb:2c:52:99:0e:7f:85:0d:a7:f0:3c:e6:24:b9:69:20:cc:cc:
         24:79:f6:ab:da:8f:21:c4:dc:da:78:06:52:df:e0:33:f5:ed:
         f1:73:66:9b:9a:ea:aa:96:a2:a5:78:72:f7:4f:06:2e:22:6b:
         34:5b:68:ce:a2:8c:bd:4e:33:88:e7:95:ef:16:39:07:d3:5a:
         a9:b0:50:bb:3f:13:e6:20:5b:a1:3a:73:69:0f:23:7a:b7:38:
         22:91:12:45:00:c7:29:8a:bc:de:d3:5d:64:e1:62:82:1d:9c:
         1c:6d:c7:98:82:10:c8:cb:c4:da:51:4a:20:ad:fe:87:7a:6d:
         ed:bb:95:b3:b0:77:a6:e8:d7:d5:e1:b7:9c:60:e5:43:3f:d3:
         fd:1b:4f:88:64:aa:f9:9c:33:24:b2:cd:e4:81:83:a2:17:20:
         af:3a:3d:74:62:72:89:fe:87:25:2f:99:be:79:b2:ce:cd:11:
         93:99:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:09:37 2026 by rpki-client