Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File:                     wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier:          ecGPo7tJyuIkvFbtmLqhe3QfKJ9mcPF3MWQjAuYdyNM=
Subject key identifier:   DA:C7:2A:0C:F9:36:D5:01:4E:F7:6E:09:51:65:1B:C7:E3:5D:B2:FD
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       01A05A7BFA54098D1A387340AC1E6B1248C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number:          0EEC
Signing time:             Tue 01 Sep 2026 01:01:09 +0000
Manifest this update:     Tue 01 Sep 2026 01:01:09 +0000
Manifest next update:     Wed 02 Sep 2026 01:01:09 +0000
Files and hashes:         1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=)
                          2: 37DSb3PoQONs4UHGxU4wU20BEFs.roa (hash: OlnOwrbkS8dmY5i8N9bx/W1dQv1dfIcZBaKLZ3sLd7Q=)
                          3: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=)
                          4: 4c6KH4m5JyBANb9oOy99vsDIdpM.roa (hash: Vau4v3YfR5YHaHhHOoSzdszkBq78658OuV6gr/q3rxE=)
                          5: 5ICsFrquvX49HjEzOQU7S93GVkQ.roa (hash: dNzwPe5ZKIgncVs1sWSuSbTrhXj7p0vAUSyPZCigSn0=)
                          6: 6-4zWGnIR-C1798fnpiFbscWIME.roa (hash: OCyRLE+b/m/XR38UgcQGMiT8oc39s0bet+zMo7PHL9I=)
                          7: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=)
                          8: 8lPw_ga_FoSSpmboRwfajYdx-go.roa (hash: JloEp5W3jYXSF6n1lKX3TTBhUm7QwMzhp+1X0sR8wMg=)
                          9: 9RXrdD1qJMf_8xNn3HnZaLopyak.roa (hash: KfZruuWMflD9yqrnDRJtXO3IL4kig+hFeQaQ1JiQO/w=)
                          10: HKmOA4kYZLilOR3lns1zO5ipEbU.roa (hash: Yz7lQttPSDYdbYbtexTLUwIiQDzr90HjmuYUCaHlIKw=)
                          11: M1q9NGALl_5zWyIsBUUB6ElwUw0.roa (hash: P6viUgEvhrKdeTf5i8KPv7U8+f6vJ2sUgXvC3nzTpOU=)
                          12: No-d_K1AdtQFN89IEpRFXmUG73I.roa (hash: nGDD7GXmkYEq6gGfWHCPiJFjSrwfBH1B1pwZ05Swa6E=)
                          13: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=)
                          14: X9F7v4AXG7bPpuEkvPpmXb8iQng.roa (hash: iwWDtcquwV309wrQ4g5VKIsUxyjbCcTHSbr+j3QYLgw=)
                          15: Ya7gHcOJW_wjSJWa4WLFKiSUkcU.roa (hash: zf47OzJ7ZBqDdrfAJUX5U6MlyOVPwuqS2R07zroieCs=)
                          16: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=)
                          17: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=)
                          18: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=)
                          19: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=)
                          20: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: gaYPqz70x3QTGSIiY/5uK3hVtxZtVnipT4uTSa0oXDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5a:7b:fa:54:09:8d:1a:38:73:40:ac:1e:6b:12:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Sep  1 01:01:09 2026 GMT
            Not After : Sep  2 01:01:09 2026 GMT
        Subject: CN=dac72a0cf936d5014ef76e0951651bc7e35db2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:0d:50:34:fe:53:74:82:b0:cb:70:3c:7c:
                    b4:b2:4a:1d:d4:11:a6:d0:14:a2:c5:06:52:7f:67:
                    92:9b:2c:3d:07:d1:d6:4c:f6:38:be:20:02:37:89:
                    cb:70:05:d5:95:38:38:be:f9:43:98:d6:9c:c1:a9:
                    4a:83:e5:0e:ff:98:aa:d8:a9:36:0f:1c:02:a6:1b:
                    73:dc:92:83:04:54:62:e7:40:23:f1:c6:46:31:d3:
                    76:b6:2c:54:36:99:e4:9c:e1:b6:19:80:4c:ad:d5:
                    bd:38:14:37:8d:1f:73:97:f9:8e:3c:fc:d4:d0:ff:
                    0e:0e:de:99:7c:c4:59:0a:88:9c:ce:1c:d7:e9:13:
                    97:fd:9d:08:43:d9:ca:88:61:07:d5:03:c6:e9:1e:
                    44:45:20:ce:69:a7:1b:d4:46:96:a5:82:71:05:14:
                    da:26:b4:82:d2:69:b3:20:26:1f:4c:b9:ca:bb:57:
                    87:00:55:19:5c:60:3e:b2:40:bf:18:3a:ed:5e:c4:
                    ae:fe:1b:e2:6c:8f:8d:84:8f:0b:bc:80:ea:35:c5:
                    94:36:c3:38:65:8f:3c:39:f7:fb:6d:27:83:71:b9:
                    2d:bb:ca:48:fb:b6:b6:ff:30:86:76:27:32:11:e6:
                    b6:5b:80:fe:43:6d:df:60:3a:21:ad:45:df:26:1b:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C7:2A:0C:F9:36:D5:01:4E:F7:6E:09:51:65:1B:C7:E3:5D:B2:FD
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:52:4c:1c:9e:c3:28:3d:d5:b9:51:27:1c:b8:01:d7:00:8a:
         88:67:f0:cd:69:d9:4d:f1:67:82:0d:14:7c:61:54:39:93:3b:
         7e:21:e0:d1:e6:58:dd:89:e8:70:8e:35:25:ce:21:8b:d3:5b:
         ca:ce:41:bc:42:55:20:42:a7:52:b5:a9:81:63:97:0a:e0:92:
         72:ec:86:38:1b:77:b5:8f:a1:42:33:0a:95:04:65:91:dc:21:
         36:a3:8b:56:a7:45:9b:12:91:27:fb:be:42:e0:76:c4:b9:be:
         25:19:b5:57:ac:ba:29:b2:8e:71:ef:97:2a:bc:99:5e:86:b1:
         f8:a7:c6:8d:0b:66:6e:7e:34:5a:06:5c:f2:46:04:ab:8f:e5:
         df:d0:c1:fb:82:bb:8a:30:3b:c1:f2:4a:72:18:59:91:06:42:
         11:08:c0:ea:bb:a1:ba:18:18:a2:5d:f3:92:c7:e3:b1:e7:4a:
         1e:f2:84:74:5b:0c:08:e6:1e:63:29:8e:ac:58:a0:f2:f0:00:
         4c:5b:45:c2:c1:a0:1b:65:f0:2c:5d:63:70:1a:44:4a:02:57:
         06:2c:02:1a:5e:f5:16:fb:ec:4c:9d:3b:92:ef:10:f3:5e:f2:
         d0:ef:bd:08:3f:d9:ef:24:b3:f7:6c:3c:1a:2b:68:f9:f6:bf:
         79:96:e9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:10:21 2026 by rpki-client