Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          nqibgGZT0O3i9U2q27gg+08KyKcPVis6/HUt2rSB4Jc=
Subject key identifier:   86:06:51:C4:78:B6:8A:37:A8:EA:C0:0A:43:A1:56:AC:1C:CF:E1:79
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       019DCD87245F595E114DE2067A0FF20B4496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          067F
Signing time:             Mon 27 Apr 2026 06:01:19 +0000
Manifest this update:     Mon 27 Apr 2026 06:01:19 +0000
Manifest next update:     Tue 28 Apr 2026 06:01:19 +0000
Files and hashes:         1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: cORdBd6OCzGgh67LYXYfoR5IuMG1LKnAHbVscaO6ER8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:87:24:5f:59:5e:11:4d:e2:06:7a:0f:f2:0b:44:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Apr 27 06:01:19 2026 GMT
            Not After : Apr 28 06:01:19 2026 GMT
        Subject: CN=860651c478b68a37a8eac00a43a156ac1ccfe179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ae:98:86:72:44:3b:ec:1a:63:2b:ee:52:ff:
                    a9:2e:57:50:85:8a:18:1d:51:4a:0d:7e:ce:73:c0:
                    72:ee:0f:04:82:15:87:58:d3:ba:c7:3c:2c:ee:2e:
                    79:b2:df:07:cd:c5:91:34:cc:43:1a:b2:f5:15:61:
                    15:e7:4c:23:e7:6a:5e:48:52:54:1a:bb:0f:74:2d:
                    c7:bc:73:43:7e:46:e8:e8:0d:2d:f2:1a:74:d6:23:
                    9a:a0:0a:b5:09:f1:8b:7a:a7:97:ec:67:d9:be:1e:
                    35:0b:89:7b:dd:5a:a5:11:03:85:41:93:4e:74:87:
                    f5:af:63:e2:ef:40:9a:5e:92:f7:d4:94:9e:1d:04:
                    63:89:eb:fe:14:85:65:7b:3a:9a:1c:72:ab:de:75:
                    25:a6:36:16:50:ec:2d:5c:ba:34:11:67:82:5a:8b:
                    ea:f6:11:48:91:88:0f:9b:f4:35:d1:5d:0a:88:17:
                    24:c3:34:22:c4:3f:a4:1a:b7:7d:bb:00:67:39:86:
                    78:3c:b9:8b:44:e4:eb:87:65:17:76:98:87:62:ff:
                    ab:23:de:16:f1:7d:8a:25:bb:8e:85:01:70:7a:e2:
                    30:34:66:1b:5c:ed:44:76:fa:85:a6:74:10:73:4b:
                    11:38:26:cf:e4:67:cc:68:6d:c4:3e:d5:b3:de:ed:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:06:51:C4:78:B6:8A:37:A8:EA:C0:0A:43:A1:56:AC:1C:CF:E1:79
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:26:f6:eb:5b:58:56:74:15:9c:10:06:fb:45:d8:cb:d2:
         89:c0:1b:77:27:11:46:c2:cd:7b:53:c6:86:ce:5b:98:ad:90:
         f5:56:f4:6d:93:bc:0d:bd:9f:7b:ca:30:3b:50:e7:c7:ea:6f:
         55:f7:38:22:64:97:29:80:3e:14:17:90:3c:25:da:85:09:bd:
         79:f4:d9:fa:4e:4e:fc:80:a7:c0:36:c6:95:bd:66:48:5e:f7:
         e9:93:fa:ef:10:16:6e:f8:b9:36:6a:5d:09:bf:83:88:ac:cd:
         59:bf:fe:93:58:c0:05:95:15:c1:1b:26:ff:70:67:2b:eb:b4:
         ef:30:1f:be:2d:42:78:02:f6:da:49:3f:be:95:e5:c2:29:74:
         f4:6d:5f:e8:66:c2:8a:85:89:15:a6:61:8f:fd:75:63:91:04:
         78:c9:0f:ed:f1:56:5e:1d:69:ef:b9:41:ad:bf:2a:7b:b6:77:
         96:65:7e:09:b0:a6:c1:03:7c:7c:07:2f:57:a4:72:d4:45:75:
         39:dc:1f:ab:15:73:b3:c8:4d:cb:3e:09:13:00:e2:d2:d3:cf:
         5c:4d:a6:86:a4:f9:12:5d:23:02:93:d8:79:68:1b:e5:01:12:
         f8:b1:69:59:68:72:27:fd:a7:a4:23:63:37:27:52:fa:e4:9a:
         5e:a8:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:30 2026 by rpki-client