Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File:                     wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier:          vuzowL8keaI3J/3ej08CkT77i7qxodcut3qgwQ6XO+k=
Subject key identifier:   E1:1C:2A:61:4E:1C:41:86:F5:4A:FD:F9:D2:B6:A3:23:98:03:EF:D3
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer:       /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial:       019E8DFFEAC9B0672D0627D76A8B1BF6A209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number:          0C63
Signing time:             Wed 03 Jun 2026 15:00:19 +0000
Manifest this update:     Wed 03 Jun 2026 15:00:19 +0000
Manifest next update:     Thu 04 Jun 2026 15:00:19 +0000
Files and hashes:         1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
                          2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: mbm3eg4hR32ImDwHZwDwqTjjByFJiDI8wAs0aq0ztTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:ff:ea:c9:b0:67:2d:06:27:d7:6a:8b:1b:f6:a2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
        Validity
            Not Before: Jun  3 15:00:19 2026 GMT
            Not After : Jun  4 15:00:19 2026 GMT
        Subject: CN=e11c2a614e1c4186f54afdf9d2b6a3239803efd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:ab:43:2e:86:00:94:55:2a:8c:37:77:88:
                    6e:7e:5d:9f:a8:41:a0:5a:20:4a:d8:1d:63:e5:21:
                    16:67:d6:42:5a:25:3f:e3:38:94:52:29:b3:1e:e4:
                    85:ca:21:af:33:5a:f0:21:d4:64:35:3f:bb:74:02:
                    7a:3f:65:e8:92:20:99:be:e1:f4:32:06:e8:d1:20:
                    99:e4:71:2f:e1:c6:ee:3a:3f:bb:e9:07:27:68:89:
                    13:87:33:fe:6f:38:79:a1:92:1d:e2:0c:5e:7c:de:
                    71:ce:33:0c:1f:0b:11:cb:e3:46:0d:78:2e:9f:f7:
                    89:29:2a:a8:a2:35:06:52:8d:74:17:15:6f:bd:0b:
                    43:cd:c6:79:f8:7d:c5:d7:51:dc:d0:03:fb:22:ed:
                    e1:6b:28:6c:52:83:70:41:0e:81:ce:43:02:64:53:
                    14:a2:f6:f5:e5:0d:87:a9:6e:b2:2e:cb:0b:62:74:
                    ab:dc:50:95:04:1b:1a:94:1f:1f:e1:c3:ba:06:8b:
                    e1:70:3e:db:14:ec:7e:b4:7a:cc:e8:d1:7b:46:2c:
                    1a:97:1f:2f:10:7e:61:9e:e6:42:d4:f3:d6:ee:d2:
                    39:3b:67:2e:45:b4:36:be:51:c1:16:48:68:d3:73:
                    c9:21:33:e9:6c:62:71:1e:ae:96:6a:3c:b8:04:3c:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:2A:61:4E:1C:41:86:F5:4A:FD:F9:D2:B6:A3:23:98:03:EF:D3
            X509v3 Authority Key Identifier:
                keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:55:c2:23:10:c0:e2:1e:18:b3:50:21:49:fa:ff:3f:f5:
         41:bc:82:df:57:19:6e:bb:49:31:a6:67:2f:62:47:77:3d:77:
         4f:6f:e8:a9:62:25:2b:13:0d:1d:26:bd:34:ec:55:14:3c:fa:
         2b:0a:db:69:70:a1:93:25:4e:51:37:5f:e3:da:d8:ae:9d:61:
         9e:dd:84:5f:06:6d:52:86:e3:ad:8c:57:59:68:56:95:4e:02:
         bf:77:04:4b:4c:d9:38:f5:85:d0:3a:8b:0c:d2:9f:3a:89:d0:
         9c:ac:40:69:09:a9:5f:f0:90:3b:94:41:33:fe:62:f6:77:1b:
         1b:9c:bf:79:a6:1f:c3:26:45:5b:3c:b1:27:f8:4b:a4:39:f1:
         14:ac:9c:98:0d:63:73:d5:40:f8:94:63:c8:23:fc:ee:bd:98:
         a7:09:4e:29:52:33:4c:80:7d:99:ca:79:6a:6d:7d:10:ce:4a:
         8f:85:cf:2d:22:69:4a:8e:4a:0b:f1:9d:08:d7:52:63:01:99:
         cc:b1:f6:12:ea:93:05:bb:cf:55:91:12:22:ad:ab:ad:bc:38:
         43:de:3a:2d:7f:89:76:2d:14:4e:13:e8:38:06:1c:e1:f2:53:
         bd:27:bb:4b:d1:6d:e3:78:07:6f:12:ea:8c:17:83:a7:79:ad:
         1b:b1:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:21 2026 by rpki-client