Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          c79xsuHxZvWyuJBgA1F7y5Bw3ggAeXASHrFCC+B3m2k=
Subject key identifier:   CD:25:29:2B:E4:1A:E7:38:E4:F2:52:C7:B0:A6:58:79:4A:29:F0:F3
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019EDA2D5DF326CCAEF3D3D0F0F05DF15008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0F87
Signing time:             Thu 18 Jun 2026 10:01:06 +0000
Manifest this update:     Thu 18 Jun 2026 10:01:06 +0000
Manifest next update:     Fri 19 Jun 2026 10:01:06 +0000
Files and hashes:         1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=)
                          2: 0KVvDanwdkjGR1oYxjAwINh5ADo.roa (hash: GmTL6/f05bxvf5pXNAs8+s3mX8sLj2N+DFoDDLJaHfM=)
                          3: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: E7zKLUyJrhqMRcmC1OMBmbqn/LC0klnwy9zYNVc6BRc=)
                          4: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=)
                          5: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=)
                          6: JrRi-0qoMFLhRr6cb92PJhrDFOQ.roa (hash: IOBcBMl3KD2AdRrtTbfJnBEtnt8xxIivFvb7gPSo8iM=)
                          7: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=)
                          8: LtVnv4gEDvUzm6zHA7DrO8mNb9g.roa (hash: 9IQm7/FLuF2MqQqZeHtxvpDmIo7qlEWjqcmMENiM6Ao=)
                          9: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (hash: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=)
                          10: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=)
                          11: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=)
                          12: eKPo8KqYIDnsAPIOylUfknn_lOA.roa (hash: WXfUp61NO+QV6o3kxlalE/MVA9vTXlllKhfZCGG66yg=)
                          13: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=)
                          14: f8TG-bZI-Z4nSjLzL-HsS0C_Tf0.roa (hash: 0olqv2jmyhIPEjFWu6/XmLwOWBRD4BMaKAamfg5ymBE=)
                          15: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=)
                          16: g0YLxLu2ZJOGOwT1809u5lY-w9o.roa (hash: mL66znHaw9CBpdniInIPOw6amgO+3uNvuaB2Ofegq4o=)
                          17: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=)
                          18: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=)
                          19: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=)
                          20: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=)
                          21: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:da:2d:5d:f3:26:cc:ae:f3:d3:d0:f0:f0:5d:f1:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jun 18 10:01:06 2026 GMT
            Not After : Jun 19 10:01:06 2026 GMT
        Subject: CN=cd25292be41ae738e4f252c7b0a658794a29f0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:c3:69:b5:2c:06:4f:5c:37:63:97:91:cd:
                    5b:a0:fd:59:93:56:5a:91:21:3f:4c:bc:e5:57:46:
                    83:cb:bb:16:30:13:4d:e2:87:bd:e4:bc:65:01:df:
                    0e:83:64:ca:c9:14:ed:bb:0e:2f:50:65:7b:03:cf:
                    f7:83:6b:bb:a9:f1:b6:13:d6:6d:cd:ae:3f:41:ea:
                    6f:db:ed:48:d4:d8:eb:ff:8a:15:88:4e:ff:9d:b7:
                    1b:ba:a4:d9:13:5e:7f:90:fa:c4:4b:88:e2:1c:9c:
                    e9:16:09:0d:6e:4d:f7:ac:c9:9f:cb:57:66:71:d7:
                    3e:72:8b:51:5b:94:eb:3d:06:9e:96:ac:b4:09:f4:
                    91:7d:58:a2:85:a9:93:95:eb:58:a8:24:31:0e:66:
                    e2:fc:d8:13:0e:3b:ec:2b:25:6b:a7:8c:69:e4:36:
                    b8:fa:a9:f2:ed:a2:9c:ee:47:38:98:f9:54:cd:e1:
                    42:79:3c:48:cd:3b:51:3f:ea:34:df:73:ab:52:4d:
                    00:41:b8:5d:04:4d:35:98:a6:a4:7f:cc:fe:f1:90:
                    ac:80:8b:57:1d:16:d3:40:95:f4:82:8b:38:a4:9c:
                    18:6e:32:57:38:52:c1:45:4e:c4:d3:11:a0:89:54:
                    52:e7:2d:0c:73:3d:54:d4:26:07:6d:a1:92:dc:6e:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:25:29:2B:E4:1A:E7:38:E4:F2:52:C7:B0:A6:58:79:4A:29:F0:F3
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:6e:2a:6b:fe:b3:37:20:bc:d6:f0:7d:8b:ce:c7:1e:bb:
         73:45:95:c1:70:71:be:2b:ee:d6:f9:89:13:04:ca:7f:b7:1e:
         96:e8:69:5c:57:5a:e1:b7:2e:10:aa:7f:8d:19:3a:42:7b:19:
         0c:e4:00:95:81:fa:c8:f6:f8:d3:7f:3c:cb:f9:90:69:51:15:
         59:dc:00:b7:86:42:e3:0d:d7:18:2c:90:13:a3:20:1e:4b:d7:
         04:13:6c:c1:d7:c5:61:75:ba:8e:dd:1c:18:2d:6f:60:38:5f:
         8e:65:11:31:c4:11:37:ee:a1:92:c1:0a:fd:1e:a6:ab:0b:d0:
         7a:a1:06:6f:3b:2c:c0:cb:59:4d:3e:d9:fb:93:e1:61:cf:22:
         20:69:3f:5a:0f:9e:ba:4a:20:0e:b1:02:65:7d:6b:d3:ef:0c:
         1b:6e:9c:9c:b6:91:3e:22:07:17:09:63:f9:12:b3:d9:26:9d:
         fa:a0:ab:1f:e4:79:35:c0:1c:8d:6e:82:6c:75:a0:f0:e6:f6:
         a8:d6:c7:11:c6:ab:2b:f2:49:0c:40:d5:a6:16:85:be:48:08:
         a5:30:26:1d:f2:6a:7e:ee:04:01:a1:40:d3:a2:72:1f:73:46:
         ed:f4:e0:c1:1f:ee:9e:69:74:13:89:6f:c6:8b:59:36:23:c7:
         c3:57:31:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:09 2026 by rpki-client