Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File:                     weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier:          d1nigoOc7hf8ps5/mJ2K3SKMYQ+m8ME0ZVsjiUPQWtM=
Subject key identifier:   35:89:34:46:2C:E6:2A:92:8A:AE:E1:57:71:2B:BB:90:33:C9:B5:83
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer:       /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial:       019FF8360E1B58257E5C623AA647B9459573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number:          0142
Signing time:             Wed 12 Aug 2026 23:01:59 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:59 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:59 +0000
Files and hashes:         1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
                          2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
                          3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: s4PN3RS4V1eoCCJu7gHkyqPw12AJ1bz1/OEyKTPiJhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:36:0e:1b:58:25:7e:5c:62:3a:a6:47:b9:45:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
        Validity
            Not Before: Aug 12 23:01:59 2026 GMT
            Not After : Aug 13 23:01:59 2026 GMT
        Subject: CN=358934462ce62a928aaee157712bbb9033c9b583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:a8:57:70:88:b1:cf:3c:3f:4a:f6:02:e4:
                    db:2e:5d:98:fe:18:52:65:ee:2c:0f:8b:a8:15:ea:
                    f5:75:f1:4c:e7:b1:64:2d:a5:88:01:52:72:0a:36:
                    cd:26:e6:4b:1c:b9:1b:ff:00:e2:ca:94:03:a1:f4:
                    8f:c7:06:09:83:a8:1a:e3:28:bb:33:64:c5:67:92:
                    88:e5:33:7d:02:e1:f6:68:97:ba:e8:1b:76:6a:82:
                    72:6e:b8:b6:66:64:b7:ee:c4:02:f8:7f:81:e4:1e:
                    9a:6e:ea:1f:98:b9:5a:3e:fc:c8:f8:f1:89:91:86:
                    fc:bc:22:d4:9e:ef:92:91:87:5e:3b:42:1b:10:5a:
                    e1:c2:35:14:f4:9a:09:cc:c6:1a:78:4d:f1:cd:86:
                    67:03:6e:c0:9c:67:03:ad:ba:59:5f:1c:d6:f5:8e:
                    ef:03:48:ee:68:a2:5c:a3:fd:16:a0:3e:19:8c:bf:
                    2e:7b:b7:5f:ae:a1:ae:78:58:73:9c:51:78:54:ce:
                    5e:e9:4c:4b:d5:41:e9:5c:0c:8f:d0:1b:74:1c:90:
                    48:9e:3f:60:34:4b:0c:1f:60:da:d2:a1:72:84:51:
                    7d:e4:69:e1:12:ee:3a:7b:8c:d7:66:09:b4:f6:26:
                    2d:ec:45:43:5e:e6:93:0f:f9:89:83:b1:32:c4:5b:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:34:46:2C:E6:2A:92:8A:AE:E1:57:71:2B:BB:90:33:C9:B5:83
            X509v3 Authority Key Identifier:
                keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:09:f5:fc:47:50:ab:cd:0b:fc:5c:e6:1a:27:44:44:39:
         48:1b:07:e3:c5:10:b3:32:6a:38:51:cb:5e:5b:97:3b:a8:f9:
         76:0e:15:45:86:de:14:e5:f1:e2:95:85:15:32:59:57:0e:01:
         7d:d3:60:d6:5d:61:5b:50:28:16:15:5f:5b:9a:6c:58:b1:93:
         03:11:a1:8a:39:dd:f4:2f:6f:60:55:1e:f0:f4:5d:63:b8:e3:
         9d:d0:f8:98:79:94:62:ad:8a:35:29:f1:2d:d8:8a:d0:9f:b8:
         6a:bf:bd:f9:31:d5:65:08:b9:34:e3:94:a1:ef:5b:f8:47:82:
         a7:d2:cd:7a:cb:3c:32:b3:27:89:a6:a2:d4:98:b4:07:71:59:
         42:82:eb:d7:eb:ae:38:c8:dd:cf:ae:1a:9e:48:f5:c8:97:04:
         e4:a3:24:7d:0c:3e:7c:51:15:36:27:a3:01:f4:2f:6e:94:14:
         20:96:68:90:27:33:95:32:c3:ec:29:95:d7:82:82:71:2e:d7:
         8a:d0:ae:93:69:dd:87:15:c8:2b:78:39:cb:12:00:05:5b:3b:
         93:4a:44:23:fb:16:b4:08:c1:b8:6e:f9:6d:0f:20:29:82:6c:
         81:26:9a:ff:01:55:d0:ce:14:61:5f:b7:7f:6f:81:17:11:3e:
         e1:92:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:58 2026 by rpki-client