Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
File:                     WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json)
Hash identifier:          qxvgYFfsiGBlDVkiGDgujt00X0pg2LsWUWj5My/HLU0=
Subject key identifier:   05:93:5F:72:E9:D4:45:D0:52:1A:B6:79:6E:E4:BD:D7:B8:F2:B9:C7
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Certificate issuer:       /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial:       01A0856659FAA89B3B14EAD340EB7249F9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
Manifest number:          1651
Signing time:             Wed 09 Sep 2026 09:01:12 +0000
Manifest this update:     Wed 09 Sep 2026 09:01:12 +0000
Manifest next update:     Thu 10 Sep 2026 09:01:12 +0000
Files and hashes:         1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=)
                          2: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=)
                          3: A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa (hash: Vg1LcQNz/XKk+x/pf6T3VfFuldheMFgMWkJ/JA6myNs=)
                          4: AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa (hash: NHQMdNh4Ym+0k0zIiZ+2OzU8E5q7yos10YV7kXoqN9k=)
                          5: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=)
                          6: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=)
                          7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: qYRGC52I7N3KSdesdWPNivNBm2oqdQjJ21Df6cGxZWA=)
                          8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=)
                          9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=)
                          10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=)
                          11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=)
                          12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:66:59:fa:a8:9b:3b:14:ea:d3:40:eb:72:49:f9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
        Validity
            Not Before: Sep  9 09:01:12 2026 GMT
            Not After : Sep 10 09:01:12 2026 GMT
        Subject: CN=05935f72e9d445d0521ab6796ee4bdd7b8f2b9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:a6:f8:08:ff:a6:18:5b:b2:06:b2:44:82:
                    bb:99:65:92:58:55:e6:f4:dc:5e:7a:d5:95:15:fa:
                    c5:6b:b4:ca:a5:be:61:b2:e8:14:76:ec:90:22:62:
                    4f:c7:bf:b7:a0:b3:dd:82:12:0b:15:3e:fd:12:31:
                    3c:bf:f5:c2:85:18:28:f7:62:79:9d:99:dc:35:08:
                    fc:35:87:04:cd:c2:3b:0f:a8:f4:e5:dc:ea:61:73:
                    92:6e:34:db:c3:25:c5:bc:2c:a3:73:17:69:35:bb:
                    2a:92:ba:3a:aa:58:69:f5:e3:16:f9:c4:6e:89:e1:
                    f9:7e:85:95:2f:84:3c:d9:77:f6:b9:6d:9f:4d:5e:
                    1b:a0:81:92:5c:3d:58:47:60:b4:b3:dd:63:95:7e:
                    bc:67:78:3d:41:8b:e9:ab:c3:31:b1:84:d5:78:04:
                    ae:21:14:84:32:ef:4a:02:d0:3e:54:c8:40:ce:56:
                    af:7f:9f:d6:20:5a:62:95:82:5f:d5:d0:c3:e7:dd:
                    a8:89:1a:ca:df:00:a3:8d:8e:fc:a2:11:fe:a8:f9:
                    dd:68:c5:59:1c:c4:7e:29:03:cd:ef:82:29:f3:be:
                    35:88:1d:21:87:04:8a:02:07:02:8d:01:c8:e9:93:
                    1b:91:b2:37:ea:8f:3f:45:d1:8f:f1:0b:48:0e:c9:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:93:5F:72:E9:D4:45:D0:52:1A:B6:79:6E:E4:BD:D7:B8:F2:B9:C7
            X509v3 Authority Key Identifier:
                keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3e:8a:6c:a4:86:99:0d:76:db:84:85:be:7d:6d:56:de:9c:
         89:5e:97:d8:0f:68:13:f1:43:d7:cb:f4:77:80:5e:d9:44:e6:
         3f:55:ef:73:0d:df:58:df:04:c2:14:f6:13:52:eb:05:d6:99:
         35:dc:e5:69:98:90:f8:ca:af:8e:f8:23:04:28:7e:f3:b0:e3:
         3d:2f:31:3e:63:f7:28:c2:63:c4:41:1f:8a:a5:fb:f5:96:96:
         8b:8c:3f:92:22:e7:22:68:58:24:0e:db:0d:47:fa:6c:bc:a3:
         72:b0:bc:c5:ba:b8:10:95:bb:c7:99:ad:b9:d4:3e:b3:83:36:
         a0:32:81:85:93:70:c8:47:6b:bc:47:d6:60:fa:fb:96:54:02:
         d0:8f:59:04:6d:40:a8:06:9d:69:ce:bf:f4:f6:3b:b3:b5:4e:
         ea:67:8d:52:fa:b0:b3:c1:45:57:5f:49:ad:1f:80:60:d6:85:
         75:9c:61:6a:31:3e:f3:36:b5:3e:41:c9:cf:a8:f9:a9:74:05:
         91:ef:78:b8:c1:f4:a7:77:b5:6d:ff:a8:48:79:64:68:33:a8:
         29:e1:bc:a9:5a:04:4a:f0:e7:36:bf:48:d7:4e:5f:5a:51:0c:
         d2:ca:84:98:82:34:cf:c6:fe:31:31:e2:99:53:c2:99:d9:9b:
         d6:42:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:37:54 2026 by rpki-client