Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          qk08P7+OgCcGgwL5ZBQTtZ7H8be+n/x+r0wWCvQVzC4=
Subject key identifier:   7B:50:5C:21:A5:D8:54:79:8B:5B:64:C3:CD:C5:41:66:F5:35:B0:45
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       019FA2CE8B5B184DF6533988BDECA0BA7351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          1963
Signing time:             Mon 27 Jul 2026 09:01:12 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:12 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:12 +0000
Files and hashes:         1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: SqkKe73AZxUoCT3lbm8JdJxYeUIcG5L7ElOebsi/rvs=)
                          3: dZTs0EIjPnxi68tbTokfAbw6h7g.roa (hash: /Yw0GBij2t0h3+q9/KbDbCPzij5LVOg+e269LitDfx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:8b:5b:18:4d:f6:53:39:88:bd:ec:a0:ba:73:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Jul 27 09:01:12 2026 GMT
            Not After : Jul 28 09:01:12 2026 GMT
        Subject: CN=7b505c21a5d854798b5b64c3cdc54166f535b045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:fa:52:73:1e:50:a6:a7:e2:37:3f:aa:2a:
                    c5:b3:62:03:3c:b8:e3:c0:ef:86:66:31:dd:ff:21:
                    e0:f4:7b:ef:49:65:c4:47:c3:05:60:3c:7b:e9:a3:
                    86:77:4f:b2:83:ae:6d:cf:13:cb:44:e1:d7:30:64:
                    e3:26:47:92:78:a8:66:fb:45:ba:5d:c6:a6:c0:e1:
                    5d:56:80:d9:c1:45:4a:e2:67:09:bb:e5:a9:59:30:
                    e4:6c:65:a1:ba:96:9b:ea:ed:30:4a:36:1c:92:81:
                    d1:b0:a7:e0:56:7d:51:42:88:77:dd:6a:0c:d2:31:
                    4b:6b:2b:78:76:b6:74:6f:0a:e7:70:0f:8a:12:42:
                    80:b0:43:a0:64:db:be:95:40:12:04:76:fd:c0:33:
                    73:56:a2:46:bb:e0:d8:4f:23:46:a3:37:91:47:ae:
                    b6:31:14:fd:60:c6:4c:ad:7a:dd:e3:20:19:20:72:
                    2b:50:74:d0:99:c9:c6:69:ed:e0:fc:91:38:07:e9:
                    d5:01:4a:a4:da:47:b3:6e:b3:e2:8a:c3:6f:a6:d4:
                    01:ca:1f:9e:0f:ae:e4:cb:6c:eb:87:ef:c7:3c:e1:
                    36:bd:e4:44:85:86:3d:53:31:0c:80:dd:45:82:3c:
                    39:74:15:9e:17:da:2f:7e:5f:ae:c7:e7:2f:be:3d:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:50:5C:21:A5:D8:54:79:8B:5B:64:C3:CD:C5:41:66:F5:35:B0:45
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:1c:19:15:ee:54:8a:ca:9c:d1:3e:06:b6:57:83:02:f7:
         74:10:08:fe:d3:5c:88:49:fd:4d:c7:ae:56:28:3f:af:eb:e0:
         a9:c9:ad:56:57:87:73:19:d9:de:72:91:c5:65:1a:08:f5:ee:
         fd:5c:ca:1f:8d:9b:44:96:db:de:0f:11:95:8e:31:37:fc:9a:
         90:31:c1:61:8f:89:8d:72:a9:22:f3:00:b4:1b:f2:66:aa:72:
         75:58:de:f4:6f:e4:94:38:53:79:08:e3:da:31:57:bb:3a:ed:
         74:be:f0:a9:30:1e:41:6d:be:f4:96:1d:3c:1f:77:47:d3:b1:
         44:a1:39:a4:ed:68:bc:12:c3:33:5f:26:73:27:3d:91:fd:6c:
         40:5b:1b:33:4d:c9:d7:82:e3:60:36:0d:1d:2d:c2:79:85:55:
         30:4b:b2:94:73:5f:8c:a1:f3:3c:ff:5e:71:94:2e:8e:d1:56:
         75:d3:6a:d3:7e:40:18:21:c9:e6:b5:a0:55:e1:8b:20:da:15:
         79:a2:bb:9b:71:a3:4b:7b:e0:e0:ec:8c:11:e6:94:f6:12:dc:
         5f:c3:61:9d:ce:c6:74:3c:ce:a5:b7:26:c4:12:4c:03:76:52:
         0e:a6:20:3c:35:92:81:b1:ec:31:c1:b6:cd:10:2b:8f:42:3f:
         51:b2:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:26:38 2026 by rpki-client