Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File:                     w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier:          nWhg7TgYmncmtQkLgLhk5jID/QR7QkfFqKZkVKEX8QI=
Subject key identifier:   70:0C:A6:5F:E5:AB:43:21:49:63:DD:B8:5C:2F:BA:73:B4:AD:87:5A
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer:       /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial:       019EB80F3444730FF7B5EF4A1D686E631260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number:          15B2
Signing time:             Thu 11 Jun 2026 19:01:04 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:04 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:04 +0000
Files and hashes:         1: vAWr7DCiErOxN_C5-TPGoRi3VBg.roa (hash: yOuxPDX3hQeFVT5meNKt6VOVi7//Pn4HmhuFPEp2iEM=)
                          2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: 6Xmd+B1OnmhBeVqht1L1tZRzMNPbcl+Z+gusl93nzfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:34:44:73:0f:f7:b5:ef:4a:1d:68:6e:63:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
        Validity
            Not Before: Jun 11 19:01:04 2026 GMT
            Not After : Jun 12 19:01:04 2026 GMT
        Subject: CN=700ca65fe5ab43214963ddb85c2fba73b4ad875a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:a7:6d:ea:67:00:29:d0:07:43:f1:c2:5a:
                    6a:0f:c4:f1:87:9b:d8:7b:ae:d6:c8:ef:51:5f:80:
                    61:7e:ad:c1:5a:01:08:23:e0:ba:91:6f:99:ba:7e:
                    54:94:a6:6f:b0:91:18:79:e2:35:20:be:da:f9:7a:
                    ac:88:48:64:15:71:60:01:67:08:7d:e1:e1:b4:cb:
                    e6:c2:b0:e7:95:0a:39:a7:2f:c2:ab:3e:70:7f:6a:
                    34:92:d7:35:51:ea:a0:8d:d2:48:42:6a:ee:de:7f:
                    af:56:1a:20:13:ca:7b:50:f0:96:04:a5:62:29:4b:
                    21:13:91:ed:a8:ce:bf:be:c1:c3:80:81:ee:5e:3f:
                    27:ef:0e:dc:e8:33:67:7f:3d:22:e0:25:be:bc:62:
                    c5:16:3d:ec:22:d1:86:a0:d4:07:c0:69:7a:bc:0a:
                    1f:48:9d:4e:22:ec:09:17:17:3b:0c:db:9a:ce:af:
                    6d:f2:24:51:b1:91:4c:5c:0c:fa:a2:d4:85:05:6d:
                    5b:61:81:ee:84:d0:a6:6c:ed:fa:5f:0f:bd:7d:18:
                    c4:17:b7:73:6c:77:3b:24:38:25:6b:ce:3f:ee:94:
                    7a:10:fc:28:d6:36:ab:aa:54:ce:ec:d6:0f:d9:f4:
                    da:47:10:c6:43:b6:b0:a9:6c:5f:76:c4:54:3d:14:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:A6:5F:E5:AB:43:21:49:63:DD:B8:5C:2F:BA:73:B4:AD:87:5A
            X509v3 Authority Key Identifier:
                keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:8e:f9:7e:73:24:53:f5:3f:e2:70:c2:74:70:fb:d9:a7:
         2e:dd:4c:a7:36:4e:19:22:72:59:12:f8:27:01:d5:29:5c:e4:
         13:72:56:9f:d8:9d:65:ff:85:2c:d8:23:e6:a3:a1:35:3f:ce:
         8e:18:84:f5:08:d5:fa:d8:76:5f:ee:d4:e8:19:53:3b:3c:89:
         61:2c:22:73:e3:0b:e3:38:60:68:87:28:c8:ac:a3:1b:cb:e9:
         26:7e:c2:76:9f:3a:48:27:01:eb:a1:e0:b0:91:81:75:35:3e:
         10:aa:49:f1:2a:6b:63:0b:df:fc:2c:59:a5:a1:24:22:4f:00:
         4e:d2:a7:76:21:a9:bb:8c:04:fb:43:16:50:df:bd:1d:de:6b:
         50:3f:2e:fc:35:4b:54:0e:80:91:9b:39:9b:86:c3:ab:f9:8c:
         8f:0f:07:14:87:ac:d2:6d:55:e0:c9:ba:ab:f5:23:e4:97:72:
         1a:e9:31:c8:f3:9c:79:e5:97:ef:a4:fa:6f:07:cd:b4:4f:8f:
         5b:b5:4a:d7:48:aa:18:82:25:f5:1d:f2:b0:f1:63:71:e0:15:
         e1:7b:76:b4:ae:7d:f2:3a:4c:14:07:17:4b:92:06:80:f2:d2:
         9c:f9:f7:9d:5e:54:cf:37:9c:00:8c:6f:3c:14:eb:ae:b0:29:
         cb:ec:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:16:51 2026 by rpki-client