Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File:                     mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier:          J/nZrPFYmZahM4kMAD7omn0C3GHE5oHWnBXCdrufzsM=
Subject key identifier:   11:01:FE:49:93:5D:CC:03:B3:E2:7D:C1:CC:43:4F:69:36:CE:B8:1D
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer:       /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial:       019E9DAAF3DB4CE10F5DFA41B18B8794F88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number:          15DB
Signing time:             Sat 06 Jun 2026 16:01:26 +0000
Manifest this update:     Sat 06 Jun 2026 16:01:26 +0000
Manifest next update:     Sun 07 Jun 2026 16:01:26 +0000
Files and hashes:         1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
                          2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: VsL0QUR0Hg3jtRS2DeTp8ykoI5sFvY2yUetlNljFKbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:aa:f3:db:4c:e1:0f:5d:fa:41:b1:8b:87:94:f8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
        Validity
            Not Before: Jun  6 16:01:26 2026 GMT
            Not After : Jun  7 16:01:26 2026 GMT
        Subject: CN=1101fe49935dcc03b3e27dc1cc434f6936ceb81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:65:59:66:d4:1d:65:37:27:87:04:92:72:
                    c1:0b:73:9e:41:e4:5c:1a:72:dc:c9:5b:ae:91:15:
                    24:76:5c:b5:f0:1d:e6:59:64:db:a8:59:56:8d:05:
                    78:c6:02:de:ae:84:1f:9b:e4:d9:d6:f5:6a:17:22:
                    2b:45:a7:ff:c8:d9:1c:c8:3b:c4:00:f5:c6:8e:37:
                    bd:54:1f:6a:9c:45:34:89:fc:c5:95:10:7d:17:8d:
                    51:50:36:9b:45:0b:a6:68:97:06:8d:67:b3:7a:20:
                    6a:f2:d4:7a:e8:0a:5a:4c:67:d6:83:66:50:b7:a6:
                    d3:50:53:03:69:89:13:6a:56:b7:fc:75:6a:c6:0e:
                    fb:67:25:6c:5d:db:f9:ef:e4:fd:39:43:8c:9e:08:
                    f6:64:8f:a2:34:d0:60:88:99:c0:87:ae:69:b2:7d:
                    3a:a0:d4:08:8e:6d:7d:58:42:c8:22:8c:51:de:62:
                    fe:d3:01:87:17:ae:91:13:2e:1c:1b:1b:54:7b:11:
                    3e:c2:39:90:9e:1f:f6:fd:92:be:83:ed:65:3e:f1:
                    8a:76:61:86:74:79:39:13:34:fa:ef:73:2c:55:0f:
                    ba:ec:e3:66:0a:b1:03:b0:e4:be:a4:ce:db:60:81:
                    92:54:ca:4d:65:df:64:5e:8a:db:52:b9:d3:2f:53:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:FE:49:93:5D:CC:03:B3:E2:7D:C1:CC:43:4F:69:36:CE:B8:1D
            X509v3 Authority Key Identifier:
                keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:91:cc:70:e9:37:51:cb:60:54:ab:96:15:00:39:df:88:9a:
         ef:e4:f8:37:9c:ec:67:86:64:63:99:06:68:6b:36:99:e0:e0:
         4b:33:a9:38:91:7f:64:f4:0b:d6:aa:1b:67:60:1c:6c:fc:d3:
         ab:73:59:ca:ac:99:74:2c:41:8e:f5:85:df:15:91:41:69:bd:
         e6:0a:36:94:85:8b:d5:a9:44:eb:b2:58:3d:a2:ce:6e:f3:a1:
         35:2f:83:73:86:d5:50:c9:55:a4:09:36:2a:96:e5:a3:28:06:
         33:55:df:1a:58:f7:5d:22:7a:32:2b:91:62:09:9f:3a:2d:7e:
         d4:82:29:84:89:1f:37:ed:2f:f7:e3:0a:e2:d3:b8:28:90:89:
         3c:eb:ca:8c:cb:58:9b:20:a3:2d:54:f3:af:30:ee:e9:5a:cd:
         e9:a9:ad:e5:88:d4:aa:7b:80:66:a2:2c:3d:81:df:d8:0d:38:
         05:e4:61:74:35:12:5e:22:f9:70:78:c1:ae:e4:45:4b:0e:2b:
         53:bf:91:2a:78:9c:96:ba:cf:86:a4:36:ed:98:20:45:bc:e1:
         0c:1f:ff:64:e1:12:b7:c6:7f:c8:cf:f0:04:52:20:e0:1e:8f:
         72:da:90:e0:15:cf:b1:5a:5c:d0:a5:bf:2c:cc:2f:19:73:bc:
         a0:f2:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:27:06 2026 by rpki-client