Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File:                     WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier:          m2OkGmp+jbSTwikKopXuBS5sZGICdt7Ctf/gTkyDR0w=
Subject key identifier:   51:38:CA:F1:E4:4D:BF:08:94:F2:14:4E:50:E6:D6:DE:BE:41:0A:1A
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer:       /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial:       019EB98F67E47418ABA63ED11F304C0C3C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number:          17F5
Signing time:             Fri 12 Jun 2026 02:00:43 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:43 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:43 +0000
Files and hashes:         1: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: 5LCnL++myn7TZh9+f4RVNjHCoSCsTwpHILnDgGR+yZU=)
                          2: rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa (hash: GMqoDXQ3wU8Deq0i39xZJUggMEqmsY8s+770f8FFSeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:67:e4:74:18:ab:a6:3e:d1:1f:30:4c:0c:3c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
        Validity
            Not Before: Jun 12 02:00:43 2026 GMT
            Not After : Jun 13 02:00:43 2026 GMT
        Subject: CN=5138caf1e44dbf0894f2144e50e6d6debe410a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:20:2f:c6:8d:e1:5a:7a:40:c6:24:e4:6d:
                    6f:cd:bb:ad:a8:ed:36:be:df:52:8a:71:4f:c0:35:
                    36:74:fb:b8:7f:5d:73:e4:ce:e7:17:c4:1b:00:80:
                    5f:55:31:6a:00:c8:d5:b4:2f:f7:29:27:f0:c1:69:
                    8e:de:e0:8b:67:08:fa:ee:cb:cd:33:71:31:ef:4a:
                    1e:71:46:16:dd:30:0e:e8:48:64:bf:13:9d:80:8e:
                    8d:31:02:ca:c1:dd:bb:3a:fa:d8:13:60:32:25:95:
                    ea:26:87:31:09:52:55:87:36:a2:87:1d:09:ad:cb:
                    0b:75:d5:bb:0d:47:84:ed:40:88:55:d3:36:18:77:
                    57:d6:1c:77:6d:20:05:66:b9:6e:df:59:1f:d1:ad:
                    d4:87:55:6d:ef:89:c4:73:48:47:d9:58:9b:48:c4:
                    83:5c:8f:ce:2c:f2:c8:36:13:27:17:42:b9:2c:72:
                    7b:5a:7e:f0:8d:cc:59:ec:00:3d:74:3f:03:25:8c:
                    62:61:77:1f:cb:e5:e6:3d:2a:1f:28:fa:a8:98:12:
                    42:23:32:95:72:1f:ef:11:a3:75:d1:97:cd:91:31:
                    ee:aa:3a:51:48:0d:81:b0:ef:ff:ca:52:c2:45:21:
                    0c:b5:6e:aa:15:79:be:d0:4f:14:95:30:f0:98:2f:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:CA:F1:E4:4D:BF:08:94:F2:14:4E:50:E6:D6:DE:BE:41:0A:1A
            X509v3 Authority Key Identifier:
                keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:10:16:ac:a4:bc:5d:e5:8c:01:01:13:98:1a:84:c3:1c:
         fd:fe:2e:e3:2b:72:e9:0d:7a:8c:a5:c5:24:41:0a:e7:19:9d:
         bb:7b:c4:10:14:d3:23:b4:a7:90:4b:87:49:8a:63:73:cf:8c:
         04:2b:15:69:89:08:29:32:65:75:14:49:aa:f9:9a:c2:bb:6d:
         96:22:a3:ae:3a:13:ec:bd:3d:4b:6d:2a:23:3b:b3:08:1a:4d:
         92:70:36:9c:b6:af:e8:23:fb:3b:35:a8:31:39:fd:5a:f0:4e:
         7b:da:07:1c:d3:92:8b:ae:c1:6b:66:ce:05:65:71:dd:d4:37:
         64:8b:6d:73:ce:e3:1f:1d:7e:b0:2f:b1:b7:ba:04:bf:42:be:
         8e:d8:95:10:b4:5a:62:ef:46:5b:ff:a0:41:d9:12:9d:a3:ca:
         0d:4b:63:fa:48:01:41:bf:43:f2:1b:f3:41:51:d7:30:a2:f0:
         0b:63:ed:ec:40:e0:21:80:bb:a2:61:2b:7c:43:c6:c2:74:e8:
         20:2b:a3:77:4b:b4:88:f4:dd:0e:09:37:23:22:e3:c6:f2:12:
         b2:2e:f4:81:c9:ef:ea:46:d7:70:38:bd:8b:f7:ef:5f:30:80:
         cc:a8:63:86:3d:3c:d4:96:2a:7b:76:e6:85:95:7a:44:3a:f4:
         ed:b3:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:12 2026 by rpki-client