Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          Up65U1suII+0s2lSnDrO7AUCnvAYnOwvzoE3tPuRoCc=
Subject key identifier:   C2:31:24:06:AB:9E:05:CD:BF:20:04:AE:08:E5:9A:8E:96:63:B7:2F
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       01A0841C46D9ABD5327535701ACA8792AD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          157A
Signing time:             Wed 09 Sep 2026 03:00:40 +0000
Manifest this update:     Wed 09 Sep 2026 03:00:40 +0000
Manifest next update:     Thu 10 Sep 2026 03:00:40 +0000
Files and hashes:         1: Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa (hash: iHuFlOzhqVh9TVA/RdSn3C6VoHbo7FF1nq7e3/ScdEM=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: 7aOVeHFw4L03P9qY77hQw1PXE/rob39MVkf427PKXLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:84:1c:46:d9:ab:d5:32:75:35:70:1a:ca:87:92:ad:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Sep  9 03:00:40 2026 GMT
            Not After : Sep 10 03:00:40 2026 GMT
        Subject: CN=c2312406ab9e05cdbf2004ae08e59a8e9663b72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:41:2c:b5:df:fa:c2:7a:7b:e9:54:e2:a3:
                    80:98:e2:b0:a5:65:53:ed:24:5e:ad:40:2c:92:c0:
                    65:b6:17:18:13:e4:72:4d:14:52:51:ac:bc:fd:7a:
                    11:12:3d:e0:2f:c0:36:d9:4f:ef:07:98:c9:b7:0b:
                    97:ad:44:85:13:b2:ba:aa:1f:7a:0c:25:c7:28:64:
                    92:b1:d9:34:88:53:bc:ce:f1:66:23:57:71:53:33:
                    67:cb:a4:96:43:90:41:05:d7:5b:1d:3f:92:b9:1e:
                    87:95:f5:90:05:0f:72:91:33:05:72:ee:b5:b7:5b:
                    e5:1f:c2:02:f0:3a:57:7a:33:fd:fc:8e:96:b9:5c:
                    6f:07:04:aa:25:e5:be:30:8a:19:3a:7a:a2:98:16:
                    50:42:ae:ee:9c:7c:a1:aa:eb:f0:d7:f2:83:f3:6f:
                    36:31:e2:33:35:80:39:9e:39:55:cf:23:15:6f:ca:
                    03:60:3f:4c:f8:6c:f4:9c:af:af:08:af:79:01:17:
                    04:82:e3:98:42:53:ab:74:09:c6:70:72:f1:41:f9:
                    68:2d:4f:29:3a:d9:86:4b:60:c5:e6:ec:41:ab:42:
                    08:c7:4a:d9:1f:95:5e:77:ad:10:ef:89:b1:7b:b2:
                    49:ff:d3:ef:c5:fb:d7:18:12:a5:1c:8b:1d:c5:48:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:24:06:AB:9E:05:CD:BF:20:04:AE:08:E5:9A:8E:96:63:B7:2F
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:a7:f3:93:ee:4b:ee:3b:ca:fa:dd:02:71:d0:17:f1:d5:
         1c:fe:64:83:1f:08:9f:67:dd:1d:72:a6:19:84:00:da:4f:ee:
         e6:32:7e:a4:a3:0e:47:5b:40:be:dd:ba:c4:7d:7f:f7:a4:8d:
         ee:a1:f4:4e:02:51:94:8a:f2:f8:73:9a:17:0c:30:24:d3:b7:
         77:03:4a:71:57:56:92:74:aa:76:9b:91:45:5f:6f:a3:80:d9:
         66:ac:59:f3:dc:42:c8:a3:e0:53:47:36:4d:7e:67:ba:75:d8:
         37:e7:5c:8d:b6:59:92:2f:27:19:4d:d5:84:09:32:5c:1a:d7:
         0d:b9:64:5b:e1:13:88:ef:51:ca:4d:09:26:26:38:3e:97:fb:
         b8:37:3d:b7:eb:0f:fa:20:78:28:a5:58:68:e2:7d:73:2a:23:
         db:14:3a:72:36:5c:c6:5b:ab:e8:a0:a9:c9:18:c9:e7:cf:14:
         81:5a:91:ca:84:9f:42:d4:34:e3:21:00:3f:6a:f4:a9:d3:1b:
         52:1b:ea:9a:f2:85:02:ab:2e:03:a0:66:ea:9d:95:b7:2c:73:
         c5:2f:ae:67:7c:1c:8a:a2:ad:ff:0c:ca:2f:12:72:30:cd:27:
         e0:0e:42:ca:e9:00:a0:e0:18:e3:58:02:33:8e:4d:3a:4a:35:
         cf:64:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:44:44 2026 by rpki-client