Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File:                     wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier:          0eK7H6NrtsnOY/u/aQxLNdSnvYsLK4uvs6PZ/nW3D/o=
Subject key identifier:   00:D8:75:7E:2D:AA:EA:6D:00:B9:9F:72:8C:21:21:49:E2:4A:86:E0
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer:       /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial:       019FA0A8DB0FD314BB50E837B5C45EBDA89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number:          17E6
Signing time:             Sun 26 Jul 2026 23:00:48 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:48 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:48 +0000
Files and hashes:         1: 8o82eGnMQ9kdXbjLZCmd88Y3NYk.roa (hash: lQLIuazU2M1Mw2xConB6RbtwCMEC7BRrPajBXYv168c=)
                          2: RJaMcUy1HQkUAjmIoPgafvQ5B6Y.roa (hash: s5FHVSFxCeBSbP8NsMk3I+mCIJvgXgsbwsde/huwpmY=)
                          3: a3C7IbzkbaswXsbovboq2w9BwGQ.roa (hash: ZSzg7SMIqSibkb5Y6lnFSEbHePc9+LOJ33oGgEo573Q=)
                          4: sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa (hash: 0fsrSElISGl5fc2Oeen1Zkemgio3HCia7HQB3m6xfVc=)
                          5: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: MMkZhOF4Q5c7KN4T6lYdMlJbbL0PVw4fVQTvcalv47k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:db:0f:d3:14:bb:50:e8:37:b5:c4:5e:bd:a8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
        Validity
            Not Before: Jul 26 23:00:48 2026 GMT
            Not After : Jul 27 23:00:48 2026 GMT
        Subject: CN=00d8757e2daaea6d00b99f728c212149e24a86e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:bb:ac:28:0e:1b:c4:f2:37:ae:39:0b:7f:
                    b6:d5:58:a0:33:08:ce:18:a5:af:4b:d0:aa:5e:4a:
                    e5:ec:a1:af:39:df:dd:97:8a:c6:06:3a:6e:e2:5a:
                    46:4b:43:b8:0c:4f:c9:50:b8:66:8f:64:59:cd:43:
                    42:59:86:12:54:2c:ed:fd:81:b9:70:f6:04:50:6f:
                    16:36:db:72:b2:af:f7:46:20:fb:4b:22:77:15:60:
                    fb:56:75:7b:61:82:55:bb:45:fb:15:11:5c:4b:50:
                    bc:84:61:e3:d6:2d:bc:7f:be:9c:9c:8a:70:2c:a8:
                    cd:0d:b0:5a:80:df:f7:9c:42:ec:44:30:40:39:62:
                    82:a7:af:aa:c3:af:ff:30:4a:f5:5f:e3:73:d3:92:
                    99:d7:8d:fc:14:4b:38:df:13:b4:2b:02:92:12:99:
                    7d:37:9c:ad:e3:db:88:48:ec:93:ef:b4:dd:d1:81:
                    a4:70:81:68:6f:d3:42:85:ec:77:f0:a8:87:6f:56:
                    43:9b:90:a1:5a:10:1d:3b:eb:a9:31:05:d7:d3:3b:
                    5c:c2:d7:5a:0e:26:d9:f2:75:87:46:65:87:27:55:
                    19:e2:9f:0b:0a:8f:9a:2a:1a:a3:27:44:37:d5:f9:
                    5f:60:eb:2f:7c:46:84:9f:c5:96:70:49:60:2e:76:
                    a5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:75:7E:2D:AA:EA:6D:00:B9:9F:72:8C:21:21:49:E2:4A:86:E0
            X509v3 Authority Key Identifier:
                keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:f2:d4:da:a8:80:62:78:0d:67:41:4f:eb:36:1c:80:98:
         58:ef:b5:4b:9f:e7:a9:aa:66:81:c3:3b:e5:a6:26:d0:01:9b:
         0f:84:34:a8:6b:d8:6f:0a:83:b4:0c:55:8e:bc:79:13:2a:4d:
         c5:ee:ff:3c:fa:41:12:83:88:b0:d0:a2:59:0e:7a:91:d5:26:
         27:61:b2:8e:52:20:ad:44:b8:6d:21:43:07:21:9c:5e:52:22:
         6b:63:41:f1:7b:aa:34:49:17:e6:45:6f:0f:69:a4:4b:98:41:
         e1:18:f1:6f:b1:75:aa:4a:36:52:16:fa:8d:19:92:9d:5c:33:
         e8:11:c7:a3:14:72:6c:6d:d7:bb:13:15:37:b8:d6:1e:25:b4:
         67:c7:96:ee:96:fa:1b:cf:3e:c0:45:05:0b:0c:0e:69:43:24:
         51:99:8b:cb:89:a1:92:e6:d9:a6:3c:ac:9d:d9:7a:c2:46:77:
         63:b6:5f:7d:1d:68:74:b5:af:d6:54:a7:f3:14:db:4d:10:a5:
         0e:05:86:4f:6e:4e:db:93:d5:a1:eb:7d:ee:ee:52:dd:80:e5:
         11:52:2b:de:31:80:fe:6b:e7:3c:bf:bc:74:fe:a3:9b:ef:b1:
         fe:85:3b:b6:91:ec:7f:24:a2:5d:28:08:5b:da:0f:ce:47:05:
         31:f0:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:32 2026 by rpki-client