Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          nFq3TRln4dLEvek5KznYcGBYCG7cOJwlsk+dyFLrAyE=
Subject key identifier:   63:02:C1:3F:94:F8:FF:F3:0B:3C:E8:F3:83:7E:31:9A:47:74:7A:9E
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       01A0889EF1BFD9E8CCE578FCFE03429E6F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          0EFD
Signing time:             Thu 10 Sep 2026 00:01:52 +0000
Manifest this update:     Thu 10 Sep 2026 00:01:52 +0000
Manifest next update:     Fri 11 Sep 2026 00:01:52 +0000
Files and hashes:         1: 0-_RZCB8euBSCwMBqJA3rIP3_ak.roa (hash: 81pSmGizza3WAQFGP1ckvbIll7c3WwUs6dpTUPhIokg=)
                          2: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
                          3: 3hoyMf4bitt7jwJRtcUeClUis-4.roa (hash: 3Q2574IoV1+PXA126yc1/pkJvBgiZb7epxUK3jkb8bg=)
                          4: 8kDJoVug6Uf5ax4r8ngw3639iHg.roa (hash: xf5kvZ1aG6W3H2i2Lh9wSghGeoi8aMwRRohKIe9pvgQ=)
                          5: DUl7Kze2ii5Dj3w_wT6hCtzrBXg.roa (hash: gntI7hjVaF7FvmC9MyaHIMr1VAinCkuK20uR11fgWMA=)
                          6: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
                          7: LSO-QOUPfTvpfYqHqssifWh280M.roa (hash: XvmDiwKThG2Ug/B5byI0VC8SfnhIoWAypV6Cpcv32NY=)
                          8: Qy9KRB3QGK3zXMOw_VOH-jwp1cg.roa (hash: 8QsATaPXEcWA3tWk++uDPvHOlNGwIRxvnfoQCxEp5kA=)
                          9: UsP6UudqHF-LcaNEElvMFjWhDZA.roa (hash: jTg/MO8PYDPOy+aJ3dSxRvB51EQMNhywXeeLx+6Jizg=)
                          10: VhswZeBBLnP2o1l-u_vqKhkjSO4.roa (hash: xCWijCyY25UTodJ47G9fvWDYCAxmvFOsV2CoCWkyjSs=)
                          11: ZpVr-oOXRalXl3fxDT4ShZx5jMI.roa (hash: UzHcOtz9eNTUdP6Kd324OaavBXklzzooqtwDCEZLsN8=)
                          12: g4ccENpjDDFMcTMqabTHvRMj89g.roa (hash: sXW3T2BkbAqgXtL812Wn6JCJrHTI/IVO6miHUNiiBdA=)
                          13: iIL6nVJDFuWci5CooLcheZTMf7s.roa (hash: vSGUjVlcs3gy7cKIqEEw8TdVKRq+vSgm+acCn8L3TfU=)
                          14: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
                          15: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
                          16: spQgeXV6AOjuDyhFnsQEdsxnw1A.roa (hash: 0wzh+qiytub+uEJwCsew20GOacZVm4Y7Zc2HYF5LUnQ=)
                          17: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
                          18: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: CnM4MDSY+TBLv2ASD+d9ybGScewOmbWECmm7Ikc4ZaQ=)
                          19: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 00:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:9e:f1:bf:d9:e8:cc:e5:78:fc:fe:03:42:9e:6f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Sep 10 00:01:52 2026 GMT
            Not After : Sep 11 00:01:52 2026 GMT
        Subject: CN=6302c13f94f8fff30b3ce8f3837e319a47747a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:7f:9c:8a:24:a4:3e:ed:4e:80:62:21:fb:
                    8c:13:4a:cb:55:77:2c:fe:42:67:e9:09:bd:5e:ca:
                    93:1b:82:4d:00:66:bb:19:71:09:03:87:ad:51:70:
                    84:9c:1d:8d:f8:3d:9e:37:96:1e:f1:2c:56:aa:03:
                    76:29:dd:0c:12:7b:67:fe:39:57:3e:24:7e:ae:ab:
                    09:dc:da:d2:f4:60:0f:bc:b5:01:c7:1e:99:3b:c7:
                    49:0c:21:04:83:ce:04:a4:cc:f8:51:ed:70:97:61:
                    1f:38:f4:aa:eb:91:5d:0f:99:5a:c9:0a:88:55:bf:
                    bc:a4:7f:34:c4:fc:26:99:e5:97:a6:18:43:2f:a5:
                    03:f5:72:28:d0:3e:b2:42:8e:bb:6c:4d:14:3c:d3:
                    ac:db:48:87:3e:a3:63:a0:20:3d:c0:bf:86:09:8d:
                    6d:1f:3d:32:f8:2c:64:d5:65:c6:6c:cd:fc:5a:38:
                    7d:1a:38:e0:1f:8d:c2:e4:47:4f:0b:4b:3a:a6:06:
                    3f:db:b6:50:ad:d1:6d:16:fd:00:40:cb:1f:e2:51:
                    cc:ec:d6:57:81:01:1f:44:76:b0:5d:60:96:db:67:
                    ec:9b:f5:97:3b:8d:75:bc:e9:dc:7d:1a:7b:63:08:
                    f7:07:d9:89:16:23:de:6b:45:8b:3f:f1:74:e3:fc:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:C1:3F:94:F8:FF:F3:0B:3C:E8:F3:83:7E:31:9A:47:74:7A:9E
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:74:64:f4:e7:73:cf:d6:91:f7:a0:d4:de:0d:99:75:e4:
         b6:f5:ab:9b:6d:31:08:59:13:2b:e8:57:62:d8:05:de:51:f9:
         7c:f4:de:eb:b3:1e:12:7b:a9:53:7a:b2:dd:45:d5:09:60:37:
         71:ef:af:31:c9:c2:62:8c:ec:29:5e:84:07:ba:ea:75:59:a9:
         6b:f3:7f:ad:19:05:d7:da:f9:82:04:0a:ed:32:55:ca:90:9e:
         e6:de:ab:e2:c8:c2:ff:8e:55:3c:93:5b:f8:88:e2:45:bd:67:
         e1:9b:d9:0c:f9:2a:cb:ee:98:8c:a8:2f:e7:ef:5b:77:e5:77:
         60:72:14:27:12:90:3f:f3:59:13:fc:14:b3:2d:fb:8f:74:1e:
         29:9e:58:ae:a7:b2:b5:7a:6a:88:33:8e:9b:f9:77:4d:1d:a6:
         d8:23:93:a2:d6:48:b0:ca:ef:4f:69:f5:7c:b8:a5:54:d9:20:
         9b:8d:47:fc:60:7c:6e:90:1e:a7:84:f9:97:ae:b2:e4:ce:be:
         2f:4b:89:fb:0b:99:1e:4a:c2:75:1c:5c:a7:56:04:14:51:f8:
         5c:5c:08:60:ee:d6:c9:6a:20:fa:aa:a6:30:53:37:1e:78:a3:
         8a:05:84:dc:39:3e:2a:61:e2:bd:60:76:ad:b6:e7:8b:fc:82:
         7b:04:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:00:56 2026 by rpki-client