Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          +N2zSC+adjVZIylTMrZ8CpzWm5hRQCQm2CRNqxEmoP0=
Subject key identifier:   09:88:D9:A2:33:59:7D:2B:61:C0:25:65:EB:3C:5E:08:35:4C:D5:AF
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       01A09B80D8677E2339702679D10C89C72106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          0533
Signing time:             Sun 13 Sep 2026 16:01:47 +0000
Manifest this update:     Sun 13 Sep 2026 16:01:47 +0000
Manifest next update:     Mon 14 Sep 2026 16:01:47 +0000
Files and hashes:         1: VWtjnNvXw2oFvoIAgaW9MGZHKMY.roa (hash: 4V1zNjbwx1AfunPBNqK+Id57z1b1okSXeFi8Sx8pi/M=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: KTxL1aD+quIAW5ATltPuXaQ/j3duAdHvi7jqkTSwdzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9b:80:d8:67:7e:23:39:70:26:79:d1:0c:89:c7:21:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: Sep 13 16:01:47 2026 GMT
            Not After : Sep 14 16:01:47 2026 GMT
        Subject: CN=0988d9a233597d2b61c02565eb3c5e08354cd5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:de:90:49:d3:2d:29:c7:b2:aa:cd:60:2f:
                    24:f1:0c:a8:c0:02:45:b9:86:48:1b:0a:44:34:3b:
                    58:df:01:9e:c2:26:d1:d9:51:d9:70:d8:d9:e6:60:
                    05:d0:6a:7b:a6:92:a5:77:a8:a0:a7:4b:af:74:a4:
                    54:f7:9b:a9:0e:a9:32:a8:aa:f8:5b:a1:b1:72:28:
                    8f:fb:a0:4f:73:74:61:63:42:87:1c:f8:a9:c4:ee:
                    45:50:43:46:53:d9:b0:27:ad:d9:20:8b:50:fe:40:
                    9e:43:f5:4e:2a:8d:f7:f4:db:f1:6c:08:69:23:8b:
                    b4:6b:45:3e:75:9f:ea:98:09:27:d6:1c:44:bf:83:
                    32:ab:45:a6:7d:91:e3:9e:95:e8:fb:d4:5a:6e:ef:
                    72:9e:58:0a:62:fa:e4:f3:45:32:fb:4d:61:5e:23:
                    16:d9:85:22:2f:b1:6c:03:1c:50:9c:2c:d1:1a:90:
                    ed:7c:32:6d:bb:a7:92:26:37:52:f6:8f:cf:8d:9a:
                    40:97:fb:60:d4:62:c5:7e:fc:5e:a4:c8:a0:bd:cb:
                    d1:e1:4f:e7:16:d0:41:dc:8d:a9:ea:f3:25:08:ec:
                    3d:a9:ad:5e:d8:77:53:59:01:81:3c:b2:a0:5a:b8:
                    c1:d5:3d:c3:8e:c4:5d:27:82:3a:11:74:3c:73:d0:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:D9:A2:33:59:7D:2B:61:C0:25:65:EB:3C:5E:08:35:4C:D5:AF
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:29:31:42:2e:0a:ad:68:8f:63:24:5a:0c:62:ca:77:43:
         2a:6e:93:7f:b2:da:02:9c:02:f2:77:7f:0b:a2:68:fa:ae:e3:
         57:9e:02:e6:55:5e:d8:fb:71:75:92:2d:fb:bd:de:0a:a3:80:
         84:a2:50:84:23:24:8d:3a:0e:e5:6f:e3:38:89:fa:ae:c8:b2:
         e0:e9:93:14:aa:33:ef:90:89:57:bd:15:91:68:be:9e:d3:63:
         b8:b8:6c:93:30:16:a6:41:3c:d8:e4:96:6b:13:1c:55:8b:5e:
         3c:59:59:fc:d2:d1:67:94:34:e1:e9:02:27:66:3e:19:71:5d:
         0b:b5:66:a6:c5:cc:23:b3:87:2c:9e:f4:73:bb:6f:8a:db:cd:
         7c:e9:49:4b:66:76:f8:14:87:a4:de:71:65:35:3a:78:30:e0:
         c4:19:d6:08:ef:7a:aa:cc:d2:46:39:8f:af:b1:fe:a2:76:70:
         e0:a1:4d:ee:df:0d:3e:21:f4:15:a5:0a:f8:d5:02:81:f1:46:
         14:b6:cb:46:56:63:43:54:c0:38:06:71:76:be:77:75:52:ae:
         e2:57:90:23:35:46:af:26:04:72:19:57:a6:ec:e5:f6:a5:54:
         84:2e:eb:91:a6:e8:8f:55:09:19:cc:7c:ee:d6:43:8b:19:46:
         a5:85:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:43:27 2026 by rpki-client