Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          Hf8Ys/Xy8u0tISz4kw13Za0ImpMAmILij09EFpfiqh8=
Subject key identifier:   71:89:62:79:F4:71:95:01:E3:61:10:A0:36:E6:4D:BF:73:72:D0:F3
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019FF610AE502DD1592D4B5C0C6AFBE314B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          0804
Signing time:             Wed 12 Aug 2026 13:01:56 +0000
Manifest this update:     Wed 12 Aug 2026 13:01:56 +0000
Manifest next update:     Thu 13 Aug 2026 13:01:56 +0000
Files and hashes:         1: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          2: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          3: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          4: uTr13Te3pwYYdTFAT-0rxl4K2a4.roa (hash: oQV4cNUdbV2vNfYqR3e7xR1qkeePDkN6t+oSOnNTZ8M=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: 1FhCGSz5dcGCSEMEPCVTaGb7yOKsh8AdDRZ5JeaSoFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 13:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:10:ae:50:2d:d1:59:2d:4b:5c:0c:6a:fb:e3:14:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Aug 12 13:01:56 2026 GMT
            Not After : Aug 13 13:01:56 2026 GMT
        Subject: CN=71896279f4719501e36110a036e64dbf7372d0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:46:bb:d8:99:8a:2d:4b:ed:0d:e4:9f:8c:
                    9b:0b:95:dc:68:37:e8:b4:09:bf:d1:1f:4e:3f:67:
                    69:68:c1:d1:4a:fa:f4:55:56:e8:32:2f:f8:16:f9:
                    b4:a8:bb:5c:74:9a:9b:e6:56:02:fd:23:f1:55:97:
                    ac:a3:1c:85:ce:fd:4d:ee:6b:c0:2d:e4:65:58:22:
                    dc:be:78:f5:49:cd:58:7d:86:1c:f5:a2:b1:c5:d7:
                    bd:ae:2e:f2:f6:a3:ee:08:76:35:30:49:57:9d:5b:
                    79:b1:ff:9a:8f:32:9b:96:ef:97:d2:24:64:a7:82:
                    50:de:94:51:0f:19:6e:c3:d7:87:d4:3c:ee:a0:90:
                    d9:c1:a1:25:99:4f:60:1b:b2:19:25:69:95:78:ce:
                    c5:d6:83:c1:38:09:9d:d3:d3:fd:df:c5:53:9f:d6:
                    52:b5:cb:7f:b2:e7:8b:b6:6c:ef:1f:ad:0d:71:df:
                    36:1f:8f:bc:34:26:55:5a:47:5e:f2:22:8a:b9:42:
                    f9:9a:99:2e:6f:7d:b5:2a:82:87:5b:12:01:4a:85:
                    fc:62:f4:4d:c6:f0:82:25:b9:df:f0:96:5f:3e:08:
                    5b:da:d4:e3:c9:42:87:e3:82:f6:0f:00:23:ce:ad:
                    ff:49:f6:ba:b4:53:c6:0c:c9:f3:3c:61:f9:51:ac:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:89:62:79:F4:71:95:01:E3:61:10:A0:36:E6:4D:BF:73:72:D0:F3
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:17:df:47:de:92:1f:19:58:95:db:7d:cd:a2:65:2e:4d:7e:
         6f:22:fc:a0:fc:1c:0f:31:6d:da:4d:76:03:ae:33:e3:6d:62:
         d8:f2:60:10:0a:fb:a3:f7:ec:05:13:3f:13:cb:1a:6c:e1:1b:
         75:bb:e4:70:b1:8b:3e:19:2d:03:0d:a7:54:cc:fc:50:84:67:
         ef:e5:bd:ea:72:44:97:7c:64:ad:55:00:09:26:94:23:1c:43:
         99:21:a7:09:16:68:44:cb:b7:29:4b:90:48:24:f2:6e:b1:22:
         bb:18:de:da:78:07:42:ae:eb:00:10:a6:f7:eb:7e:5f:23:dd:
         51:c5:fb:31:63:64:6f:bb:d2:f1:53:33:b3:24:3d:e2:b2:ea:
         fe:09:8a:b1:20:80:9c:63:ff:10:cb:7c:71:76:c4:c3:91:e3:
         57:2a:f1:f4:73:ed:4b:4a:6a:7c:88:ce:68:ee:17:76:de:05:
         ae:13:b6:91:e9:a6:1f:8e:31:08:80:a7:3a:04:9a:77:2f:dd:
         20:c7:fc:a3:dc:37:03:28:aa:91:7a:a1:f9:6a:d4:71:59:93:
         05:f9:4a:73:5f:2a:86:96:6e:cd:2b:76:64:6c:83:70:d4:ec:
         f0:1e:14:f3:d4:cd:20:b7:6c:38:2e:df:fc:2c:eb:cf:4d:a5:
         5f:40:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:25:06 2026 by rpki-client