Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          WjlTaV8TH6sVXu5zucFN5HJcIGlyDEWZq09l+eVuzGI=
Subject key identifier:   64:EA:4F:53:92:C4:14:40:23:D7:BD:F8:E8:90:67:15:AA:20:D7:42
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019FC7B6E1D25703D431D3028A4D93D5C131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          1004
Signing time:             Mon 03 Aug 2026 13:01:19 +0000
Manifest this update:     Mon 03 Aug 2026 13:01:19 +0000
Manifest next update:     Tue 04 Aug 2026 13:01:19 +0000
Files and hashes:         1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=)
                          2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: lqlLgKAF58a6kjXhOlX4wesdai8chwIH9HIDvVw55wE=)
                          3: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=)
                          4: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=)
                          5: BY4mDld_X8hCH3azNrIdkJUk3VU.roa (hash: 5iaX0LN1ARLgnFxwOqzDQkkekYgRLU/QkxFUY+A4X4w=)
                          6: JrRi-0qoMFLhRr6cb92PJhrDFOQ.roa (hash: IOBcBMl3KD2AdRrtTbfJnBEtnt8xxIivFvb7gPSo8iM=)
                          7: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=)
                          8: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (hash: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=)
                          9: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=)
                          10: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=)
                          11: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=)
                          12: f8TG-bZI-Z4nSjLzL-HsS0C_Tf0.roa (hash: 0olqv2jmyhIPEjFWu6/XmLwOWBRD4BMaKAamfg5ymBE=)
                          13: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=)
                          14: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=)
                          15: kM7jrOPFPT-6YGDlaG-RNUu4h_s.roa (hash: DfZkufVjgHYkAHiZVDL7NP6ZhRWxaaW+cyM3nOVG8nY=)
                          16: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=)
                          17: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=)
                          18: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=)
                          19: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c7:b6:e1:d2:57:03:d4:31:d3:02:8a:4d:93:d5:c1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Aug  3 13:01:19 2026 GMT
            Not After : Aug  4 13:01:19 2026 GMT
        Subject: CN=64ea4f5392c4144023d7bdf8e8906715aa20d742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:09:b5:f0:6f:36:53:30:16:1d:2d:be:87:
                    51:36:e3:8f:b5:b3:4d:9c:b6:4e:53:14:bb:22:4e:
                    93:35:c3:c0:09:69:dd:c0:36:9a:6d:fe:ad:19:e9:
                    51:57:03:08:92:2d:70:06:a0:b7:e7:31:d5:f6:54:
                    78:cb:04:ac:9d:6e:71:4a:62:63:e1:13:60:06:c9:
                    31:e9:83:4e:d3:5b:4f:c4:1e:be:1d:7a:b3:cc:98:
                    44:df:aa:14:83:64:c2:e2:8a:77:36:6f:7b:d7:65:
                    af:f6:fe:c1:bb:a7:43:a1:a0:1b:a4:a3:66:e4:84:
                    ee:6f:5f:97:0d:05:ec:12:78:cc:53:79:56:00:b5:
                    63:6e:7f:48:98:13:b9:01:b4:17:56:b3:6c:72:b2:
                    50:ca:50:1c:d8:53:10:2e:7e:77:9e:fd:7d:01:f0:
                    1b:de:aa:24:08:e3:8a:50:53:59:65:c5:db:50:42:
                    53:a4:20:fd:13:a3:2d:96:9b:07:1f:07:d6:9a:ad:
                    52:69:62:86:48:dd:4e:2e:59:f3:39:29:59:b0:12:
                    69:0c:c0:7b:d9:57:8d:47:52:31:a0:89:80:c3:6f:
                    66:20:f0:00:7a:fd:20:72:35:26:d1:0e:e3:86:33:
                    05:05:e8:f3:bd:86:f4:4c:cf:f5:03:dd:65:55:33:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:4F:53:92:C4:14:40:23:D7:BD:F8:E8:90:67:15:AA:20:D7:42
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:46:99:31:c5:c0:b3:f3:15:af:02:ab:0b:04:5f:05:08:a0:
         72:db:46:d3:29:38:5b:5b:c8:1b:e7:10:d7:3b:d2:a9:bf:19:
         a5:18:3d:fa:2d:97:0a:fd:52:c0:b6:b6:86:16:b9:ce:b2:27:
         67:67:23:fc:4e:1c:c4:22:7b:aa:08:cf:2e:ae:95:c3:e5:59:
         c0:83:d9:35:24:ff:12:66:1d:29:d5:64:f9:91:d6:a4:dd:2b:
         c4:57:47:ae:87:77:b5:4a:f4:0a:24:ae:0e:e8:61:be:5d:ba:
         29:f8:14:9e:6b:02:03:cc:18:40:70:1f:4d:ea:7c:49:ec:bc:
         e8:00:f3:5a:fa:4d:a6:41:be:9b:59:6b:69:2d:ca:df:c9:5f:
         b7:4a:a8:32:60:3e:5c:14:6d:dc:f8:d4:d7:af:de:7f:42:d8:
         9b:a0:b1:0d:6e:19:77:85:ed:28:ec:9d:fe:5d:2c:f3:43:e9:
         c0:f4:43:a3:0c:f0:b6:54:96:24:89:fb:b4:ac:46:b9:74:0b:
         86:a4:f6:8c:ea:e4:44:7a:bd:72:62:7c:e0:d9:80:e8:8f:cc:
         ef:94:17:fd:ce:89:74:7b:2a:f4:14:eb:8c:cc:29:4f:e4:91:
         92:18:a8:b0:d1:b0:d3:1d:8f:10:4e:54:66:34:30:f9:c8:3d:
         2b:4a:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 16:20:19 2026 by rpki-client