Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          7m9IYDuD1msEHT+4eEeffDk8mnTSBcLJH0nlCdZFTvI=
Subject key identifier:   B4:36:28:D2:80:80:4F:75:88:70:F3:9E:46:A4:3D:17:BB:17:6C:4D
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       019F9EF1E64AFCBDAE5BE473B1A16FB3E278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          0770
Signing time:             Sun 26 Jul 2026 15:01:20 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:20 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:20 +0000
Files and hashes:         1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: GDh2rxztA2ZmkzSfdxkyqOSamwviWdrJAsZ3Bv+sYdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:e6:4a:fc:bd:ae:5b:e4:73:b1:a1:6f:b3:e2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Jul 26 15:01:20 2026 GMT
            Not After : Jul 27 15:01:20 2026 GMT
        Subject: CN=b43628d280804f758870f39e46a43d17bb176c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:da:e9:18:3c:e4:9f:9c:02:50:10:96:6a:
                    65:2c:5f:3a:16:d2:43:9e:01:a1:13:f5:35:be:2a:
                    a5:87:62:0e:62:0c:16:c1:b3:d6:b5:d8:77:3c:e4:
                    eb:fe:0f:82:db:6a:44:bd:bf:58:2a:dd:82:4b:cb:
                    3d:d6:5c:6b:10:7e:c3:1f:5c:b3:1c:c9:65:df:eb:
                    24:15:10:a3:10:16:28:d0:f3:d7:9f:39:31:05:c4:
                    17:be:60:be:f4:1a:1d:85:f7:a7:48:17:34:f7:d7:
                    2d:d2:93:f4:38:7a:dd:92:6f:20:01:86:a4:8f:5c:
                    cd:64:53:31:2b:0b:1f:68:5a:92:de:63:aa:73:d6:
                    63:08:e2:23:f7:6e:07:2c:9d:ad:d4:e9:9e:b3:b9:
                    8b:f3:8e:7f:6b:9d:d5:3e:9a:0b:96:be:4f:ea:85:
                    ae:fa:43:53:75:d3:4f:8a:fc:f3:79:1f:c1:3a:bd:
                    ce:38:24:40:83:a2:c6:c8:77:32:fe:07:1b:74:b6:
                    b2:77:71:89:1f:e8:25:af:ec:cc:e7:da:16:b4:1a:
                    e1:fd:d6:98:d2:aa:d6:e0:3f:bf:63:d3:a8:0c:67:
                    23:79:72:0d:56:36:b4:97:cb:6c:aa:56:9b:80:ff:
                    96:03:a9:cd:68:b5:a4:d8:f5:d5:b4:1b:8e:7a:ca:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:28:D2:80:80:4F:75:88:70:F3:9E:46:A4:3D:17:BB:17:6C:4D
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:c8:8b:bb:5a:bf:45:1b:0e:38:15:c9:14:da:79:c2:5e:
         2c:c3:f0:86:06:42:bc:34:fe:49:d5:6f:51:68:77:22:3a:f4:
         d5:bf:23:79:47:6d:65:b8:1f:64:22:cf:73:e6:47:f3:68:ce:
         47:3d:64:2f:27:b3:d6:6e:32:ff:3a:c5:1f:8c:d6:51:e6:fa:
         84:d8:d1:a2:07:8a:24:62:3f:4c:1a:65:15:0f:d4:a6:7e:26:
         2f:71:72:11:36:5b:0d:d6:f2:a3:83:ff:fe:d9:97:4d:f0:1b:
         4d:7e:c3:d3:63:a6:61:ba:1d:04:12:b0:f8:77:5c:28:30:5e:
         b9:38:5e:f5:eb:9d:59:a1:4f:68:ce:1c:68:b3:24:95:04:ee:
         48:52:05:d4:21:e4:f5:bf:a7:10:0e:6f:57:de:00:0e:24:73:
         ea:b8:e0:d8:68:33:d9:6c:b1:b1:00:80:e7:db:bc:c3:02:e3:
         5a:23:47:fa:df:61:09:cc:c1:43:8d:c8:a6:b0:13:29:a1:e1:
         84:44:bc:bb:3c:37:bb:ff:b1:46:8d:bc:f5:68:17:71:4c:22:
         9f:2d:b5:1b:38:5c:16:96:41:14:6a:85:66:6c:4c:30:bc:72:
         f0:fe:a4:ce:dc:fc:33:10:67:57:16:4c:3d:9d:ef:8d:67:df:
         7a:e9:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:50 2026 by rpki-client