Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          xcuLst2xcrsKzZysJqt+zz8z0lRNbY/r7sOwALBUBjk=
Subject key identifier:   70:15:CA:7E:6B:35:D6:2E:70:5E:D8:BE:07:6B:13:21:20:08:54:66
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       019F6503C85949759682D4E07892B04343FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          19B1
Signing time:             Wed 15 Jul 2026 09:02:54 +0000
Manifest this update:     Wed 15 Jul 2026 09:02:54 +0000
Manifest next update:     Thu 16 Jul 2026 09:02:54 +0000
Files and hashes:         1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: aSzV4oM0CtC21Yl5e21v+c9noDd8B3FR1RPeV/Opoe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:03:c8:59:49:75:96:82:d4:e0:78:92:b0:43:43:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Jul 15 09:02:54 2026 GMT
            Not After : Jul 16 09:02:54 2026 GMT
        Subject: CN=7015ca7e6b35d62e705ed8be076b132120085466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2f:65:76:5e:de:4a:9d:8b:6a:99:96:7b:74:
                    5a:11:47:b4:42:f6:95:6c:31:08:d5:26:7c:00:41:
                    af:05:b3:d5:5e:01:c5:52:50:d7:4b:e2:0e:3a:b6:
                    4f:16:d2:30:5b:f1:09:91:0c:04:e5:57:cc:04:f2:
                    4d:42:68:c8:85:cf:8f:66:e9:7b:c4:78:97:e8:4b:
                    2f:8a:08:7b:20:6b:0e:7f:09:d4:a0:2f:af:9e:2c:
                    a5:07:f5:d7:81:ce:42:63:39:22:00:76:c4:d0:3c:
                    60:5b:bc:65:ae:57:c5:9e:d9:22:53:59:0a:7e:c6:
                    46:c1:75:e6:a4:26:e9:cf:09:28:ac:54:10:6b:ac:
                    8a:6a:d3:e3:53:ab:ae:02:47:a0:6c:ba:c1:07:53:
                    fb:05:ad:15:6b:9a:13:a2:1f:aa:8f:cd:11:fa:0e:
                    a0:03:ed:8b:22:ae:dc:74:24:72:4d:f2:79:4a:e4:
                    cf:53:7c:c9:8f:e0:eb:cf:92:86:94:b7:af:2d:ce:
                    95:18:0e:78:a8:29:95:b2:10:20:21:62:fe:f0:57:
                    5a:48:96:7f:9d:7e:0c:da:54:42:8c:61:b5:41:ed:
                    e1:c6:40:69:52:ee:3e:e1:7b:3a:cc:b0:ff:67:48:
                    22:07:10:53:12:1e:75:ad:87:50:2b:e1:51:3c:2a:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:15:CA:7E:6B:35:D6:2E:70:5E:D8:BE:07:6B:13:21:20:08:54:66
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cc:47:5f:1f:a7:a1:f7:d2:6f:e8:5b:1b:19:2f:ff:9b:9f:
         b4:75:b5:f4:3c:77:0d:4d:4e:57:cd:9e:00:8c:98:b3:30:12:
         11:b1:f3:13:71:bf:61:7a:c1:03:37:16:2b:7e:6b:d1:92:38:
         19:56:a3:cc:8e:77:02:13:0d:ed:32:26:dd:07:44:b0:6e:b7:
         c9:69:55:fb:61:d4:9f:00:14:06:0a:9b:d8:c4:43:65:d3:11:
         83:f9:e4:03:e6:e1:06:5b:1f:2b:53:3d:95:9f:75:85:0c:5b:
         26:22:d8:e3:01:1d:49:2e:d6:b6:db:ff:21:3c:12:4c:48:6d:
         bb:13:93:3b:bb:68:e7:c7:b9:ae:9c:86:48:0f:50:93:6f:ff:
         0d:59:92:e9:b0:91:69:74:16:14:75:07:d2:d8:31:bd:b5:ad:
         d5:db:25:b6:0c:ad:1c:79:ef:25:54:4d:6e:3c:a7:39:b2:01:
         d5:e1:e9:f9:8d:ef:88:a4:b5:ed:d8:ce:ab:dd:03:ae:47:8d:
         bc:12:bf:71:a7:a4:76:2c:ef:8f:55:29:88:a1:fc:48:0d:b6:
         fe:2b:32:19:79:be:39:67:8b:bd:ce:81:9a:0d:05:d7:ee:9c:
         65:65:b5:ef:a0:cb:d3:e9:63:87:11:5b:d2:e0:dd:bf:45:48:
         52:b5:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:51:41 2026 by rpki-client