Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File:                     wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier:          6QcfRlKkuF9jbCjomPVcDYt/bfcA4VJ/3z5fKIJ3sd0=
Subject key identifier:   FD:B2:7A:CF:10:EF:E1:4E:05:65:08:CC:EA:42:C9:C1:AF:E8:7F:9B
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer:       /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial:       01A17ADFDBFF1E11C20DED0B29C4F129FA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number:          081C
Signing time:             Tue 27 Oct 2026 01:00:53 +0000
Manifest this update:     Tue 27 Oct 2026 01:00:53 +0000
Manifest next update:     Wed 28 Oct 2026 01:00:53 +0000
Files and hashes:         1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: 5Sc4ghycSpYps+Hkb6Sitnz3BqOY4RMtaR+S7+UEKUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:df:db:ff:1e:11:c2:0d:ed:0b:29:c4:f1:29:fa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
        Validity
            Not Before: Oct 27 01:00:53 2026 GMT
            Not After : Oct 28 01:00:53 2026 GMT
        Subject: CN=fdb27acf10efe14e056508ccea42c9c1afe87f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:a4:ba:ae:44:1f:99:fc:aa:ce:f7:30:79:
                    e7:d8:40:45:4e:a2:69:5d:a1:d0:7d:95:9c:90:5b:
                    85:3b:cd:68:54:ce:3b:43:cc:4b:36:56:37:30:0b:
                    dd:6e:23:85:6e:bb:ca:a6:d2:e1:31:5b:f6:2a:1a:
                    a0:70:f1:04:48:3a:9f:9f:7c:33:04:36:05:18:ed:
                    89:78:7d:6c:55:71:11:4c:a0:fe:d9:5e:f4:9f:ea:
                    e4:e2:7a:c7:32:4e:6b:28:e7:c4:a6:b8:81:0e:33:
                    6e:9a:1b:05:a0:92:93:54:79:ea:7f:42:9d:0b:81:
                    13:24:52:3d:e3:6a:c4:8a:8c:0a:33:f2:4a:39:fa:
                    9a:14:3c:fa:9f:fa:06:f3:39:c9:94:c6:f3:3e:cf:
                    6b:a8:fe:d6:72:d6:03:64:57:1c:58:1f:fd:91:7e:
                    d4:19:86:6b:f0:bf:3b:63:7d:d1:79:1b:d6:6c:d0:
                    bf:64:48:48:c8:34:e7:8a:4e:65:6b:68:9d:79:e1:
                    c3:79:f2:b7:27:28:64:3e:ef:2b:5c:99:9c:de:41:
                    00:b2:31:6f:03:f7:2a:cc:2d:4f:ca:58:4e:b2:4e:
                    e7:dc:f4:9f:f7:49:c5:5c:1c:ed:aa:20:cb:07:0d:
                    b8:b8:9b:fe:a6:ab:4b:ce:4e:38:fa:e2:00:6d:80:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B2:7A:CF:10:EF:E1:4E:05:65:08:CC:EA:42:C9:C1:AF:E8:7F:9B
            X509v3 Authority Key Identifier:
                keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:d9:7e:ac:73:6c:08:d1:b7:cb:a4:9b:65:c2:07:46:68:
         70:08:b9:5a:b8:2b:c1:1e:33:3b:65:82:30:1b:52:f2:25:44:
         a5:80:d9:31:d9:8c:e9:e1:3b:6d:98:00:01:9f:e4:ed:49:95:
         b1:fb:4e:6e:7b:15:b2:6c:03:7a:31:a2:cc:a7:91:ef:e7:a9:
         f6:5a:a4:3d:fb:fc:35:ed:32:0d:84:0d:0d:ff:67:94:5c:e8:
         2c:1b:8e:83:00:03:34:68:1f:6f:a4:e3:38:11:62:01:af:d3:
         d8:33:9c:a2:55:cc:f8:8a:19:74:9e:a7:26:95:3b:05:5c:d5:
         18:56:ba:52:24:18:66:6a:6b:55:84:2b:4a:f9:49:ad:df:34:
         df:a7:69:3e:34:85:df:ac:d4:28:5c:ae:14:e1:97:11:63:96:
         bf:ba:e3:96:4e:43:73:ec:96:3b:e4:cc:db:8c:d8:ff:f7:b4:
         76:f8:aa:52:c7:2a:c6:a8:47:f0:0b:d4:ef:0c:12:08:d9:06:
         d3:7f:57:84:3a:06:bb:84:b0:64:4b:94:69:ed:9a:21:a8:47:
         b7:75:a9:cc:94:cf:8e:89:49:b3:71:7f:b0:ab:43:da:f4:f5:
         cb:c9:e8:90:4e:a5:f4:32:14:a7:7e:da:ae:0a:8c:14:9e:ff:
         c0:52:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:38 2026 by rpki-client