Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          x55E7s6OCXomOkwY+26g8BJT0c7DNyxyuM+YZcVjJ6I=
Subject key identifier:   41:34:70:CB:01:F8:B9:C1:27:AA:D5:20:31:9B:21:FF:88:21:FD:04
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       019E7EC43AC9414F107CABFF71F99DEF6C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          041B
Signing time:             Sun 31 May 2026 16:00:49 +0000
Manifest this update:     Sun 31 May 2026 16:00:49 +0000
Manifest next update:     Mon 01 Jun 2026 16:00:49 +0000
Files and hashes:         1: VWtjnNvXw2oFvoIAgaW9MGZHKMY.roa (hash: 4V1zNjbwx1AfunPBNqK+Id57z1b1okSXeFi8Sx8pi/M=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: Ce/GsKABs6VMNyPMwr5minHZiRKapKjZVlT4rFiV3eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 11:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7e:c4:3a:c9:41:4f:10:7c:ab:ff:71:f9:9d:ef:6c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: May 31 16:00:49 2026 GMT
            Not After : Jun  1 16:00:49 2026 GMT
        Subject: CN=413470cb01f8b9c127aad520319b21ff8821fd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:3d:7c:95:0b:1b:ed:26:3c:01:9f:88:f9:
                    36:12:ca:9c:40:0f:5e:fb:c5:46:65:e0:c4:62:2c:
                    6c:c6:cb:c5:4c:2c:73:72:a9:6b:2c:ad:5c:aa:3c:
                    cb:9d:ca:96:f1:29:dd:16:d7:f2:43:2a:f6:9e:e6:
                    e8:4b:40:e6:8e:e6:45:04:ed:c9:2a:99:6a:cb:dd:
                    1c:b4:c5:26:a2:b3:81:b8:2a:2d:73:69:70:10:95:
                    d9:24:69:2c:0e:e0:23:df:4e:13:b1:1c:70:c6:40:
                    59:1d:df:e3:11:e0:b5:0b:f2:00:2f:41:83:e9:bb:
                    49:02:6a:be:4d:e0:16:5d:ec:4d:c1:08:2e:34:73:
                    3c:61:e8:33:d4:c2:30:67:9f:1a:7d:0a:a1:c5:7b:
                    e3:54:09:cc:2e:cd:d3:ac:12:45:cf:ff:b1:bc:b1:
                    4f:6b:7b:44:69:68:4d:8b:fb:76:68:a1:c9:60:80:
                    0a:b9:7d:34:21:6c:a0:de:07:ea:9c:bd:29:fb:67:
                    8d:16:c8:17:57:88:2c:68:16:7c:64:af:32:73:c1:
                    a9:48:1b:d8:b2:21:f7:52:0e:44:62:f2:ac:c0:d7:
                    3d:84:e8:d1:88:45:0b:9e:70:f1:f9:01:e4:66:96:
                    91:b0:fb:f9:c1:fd:04:d0:f0:2f:ec:20:c1:e3:0e:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:70:CB:01:F8:B9:C1:27:AA:D5:20:31:9B:21:FF:88:21:FD:04
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:11:3a:20:2d:33:d1:54:e5:e0:26:20:98:bb:05:a5:3e:
         aa:56:f0:04:cd:ae:82:ef:6e:c5:92:de:f0:c1:6f:70:b6:2d:
         cc:47:72:73:ad:38:e7:6d:5a:a3:2e:b2:f8:94:3b:e8:69:da:
         63:2b:0e:ba:a8:91:86:09:7a:2c:b0:69:8e:3b:88:28:44:2c:
         fd:42:10:64:3b:c1:70:20:8c:40:15:a8:7d:bd:c7:78:7a:da:
         45:a4:42:40:f8:6b:72:24:a1:2f:f4:be:e9:d6:8b:b7:3d:86:
         dc:1b:63:72:47:cb:b8:6e:fe:37:41:cf:01:db:b8:db:c0:43:
         b1:da:a0:a0:6f:d9:37:cc:ce:31:a7:64:b4:61:a9:e2:0d:36:
         e1:5e:ae:13:75:8d:3a:41:28:ca:c1:9c:6d:e7:76:ec:e3:57:
         f9:84:9c:6f:54:a0:c0:38:54:7c:dc:4e:02:95:30:19:fa:17:
         6c:92:2e:82:5d:14:f7:5a:cd:16:95:5b:ae:04:1d:6a:5b:db:
         96:fd:6d:59:b7:51:2e:7f:4f:42:08:d9:8f:73:d8:85:29:65:
         50:fb:fb:c1:f4:3a:a0:f7:3b:34:03:45:42:9f:77:b6:d0:f5:
         a5:5b:a8:d5:c5:0e:28:32:8c:13:c4:7f:97:38:8e:8d:69:2b:
         14:34:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:57:24 2026 by rpki-client