Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
File:                     wGDUbR2ARrTXTk2BWBjI42We2-k.mft (raw, json)
Hash identifier:          FXlBxJxUY5FXjjZtkwDZ7cApY5hFoEqAIqDrbld3ObA=
Subject key identifier:   B6:64:29:56:04:E6:35:8D:0B:66:DE:D2:4D:59:65:2A:71:12:24:BA
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Certificate issuer:       /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial:       01A00FCFD60DA9CE823F09F7B9701C9423C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
Manifest number:          86
Signing time:             Mon 17 Aug 2026 13:01:13 +0000
Manifest this update:     Mon 17 Aug 2026 13:01:13 +0000
Manifest next update:     Tue 18 Aug 2026 13:01:13 +0000
Files and hashes:         1: 25BBiDR8yUw_giFf8TVIFyZVcZE.roa (hash: PFZc2HRYy/c/JYp6Cc+Y2LgsM9oiJMXKoNebC6wZE1g=)
                          2: 31lsna3coaCho9f79M74rSiM-2E.roa (hash: TBV2V1tUQJQMVD10TW8IiOUNmV5p9zslLqp5axtwP2I=)
                          3: 6FldpB1KoXc7_rrbP39Bq9_huL4.roa (hash: 5Vb3gZ/NsexkVgsk+CP2UCmvORvkYkLH2dzKg9YvTyk=)
                          4: 6b4J6K1sIf4sh3TpTzLA50H2i9E.roa (hash: RvgEHSjIu9PJXTVwxwLo6zFt2f3A1tUMgoxPmAagYDE=)
                          5: E3ArwYEYz0p1tRS8NTnF_SeY2mM.roa (hash: bB/yiMf3cVw3gozrgLlQJJ6kEroSsFqqldiMXLpOlrc=)
                          6: EA0sYoEkGY--aXg03FYbjJMjc6E.roa (hash: 0QWqzxwOE1IAJYpUFvg8vxdtj+8qJzVTMZwsPgQDB/s=)
                          7: FUkJHIVrFrlOWEZn3NYUiH6k_bc.roa (hash: vGaTybYdhyeaOAPwcCS7Uix9cUhClZLn4jQWoTrNwYQ=)
                          8: HqEUGRjIUWCN-LoAJsgZNzQAcd4.roa (hash: W/hTNd+CTOSx3Lh1BPJBrH8fFi7uRtJSQMLg5YF9pWU=)
                          9: JLgS3ea-gXLnY_fNVgZM8WZ4JTk.roa (hash: +LLMdRS+BhQRnC0uf970cLATXLhRpqfVBqBMrYlx/ps=)
                          10: NobYJ4d_NstOs2IhETvVadUkk5Y.roa (hash: eYjXAuqpGQTsoa+ekmFSgIVX7NhmdX4g74QpsVMafUI=)
                          11: PfpKG9L9nw21zDeclBkBtIdO1Qs.roa (hash: gpC8SL/cXbSFWb5uAYLLH5P0ilNgbgl7FKWZOdyr4Rg=)
                          12: UF7nVm9scUYnV2F4_P566_oR5eU.roa (hash: cHdcPaTpZ9jvrLJDB7MPi+kPvFYXEaI/2uGw6f2VRpA=)
                          13: WAFx-v2RXmaZLOBwMaqQUhR68Hg.roa (hash: F7zvdeotN/wvvVo3wtr87UCpey+LkxUq55KDc9CtUsY=)
                          14: ZJU7Yn4OgFwV3EgkepnbW9hDIvE.roa (hash: Ft3uRd5+wQwQpXyYcn2mZoa56Wj4aO+sy2PGLzCpZ5w=)
                          15: _88cGpAaOxlQ618khySC8ZG-OMs.roa (hash: HCqofKIP/L4h4ZD05S9epNf111ZQ+OjdA9CD8fobtxE=)
                          16: e1JjC5WFbTioA0QO0B4nYiY-3-0.roa (hash: kjrs8TwJGxPvEvD0Gp9V75aup5Hzu1MHVeUZcnwwG/0=)
                          17: igS0cFT4bKmQza7xOsMautMBrdc.roa (hash: vIQ5BdqmbroBvvs0jFLKd4x/xCXV8VFIeeqQ7LxGMsY=)
                          18: ijX-wbrRsGA1oH7vIX-da-hg2o4.roa (hash: eYGuJmx/1NokgHZ4ALtPE2iWk9VkyPXdAtlC+gC9/G4=)
                          19: o5Wsg4siqOQAMErJNWMe7zLJp7I.roa (hash: 2yvV6ahub2ug8311gJTOGJY3WDPvZfi12idbZBLq/Fo=)
                          20: pdmOgxQCMQy4q8RBOWk8jUUUPOk.roa (hash: lkyyCZk1iYJ84UbKknek5JQ+JBGp0Xaxfyamk1cul+0=)
                          21: wFXMySld0SQGDvYjm8QPsMmxH0o.roa (hash: dh285VQW167J+uosYSUr0PO4nnL7HODt9EN6xHE8tLk=)
                          22: wGDUbR2ARrTXTk2BWBjI42We2-k.crl (hash: tEf45ymXlg4uoXlbToPqhsGSn/iNNS9Nm+BwfamTsjg=)
                          23: yJ8vgY2GCL4dBcDLaaGn1ZWFVbY.roa (hash: w+ietJkW8qQyZK8LO9nTo6u2RA3gOV2lOERyuxwNOvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0f:cf:d6:0d:a9:ce:82:3f:09:f7:b9:70:1c:94:23:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
        Validity
            Not Before: Aug 17 13:01:13 2026 GMT
            Not After : Aug 18 13:01:13 2026 GMT
        Subject: CN=b664295604e6358d0b66ded24d59652a711224ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:22:33:fd:72:58:41:26:56:a6:2d:97:d2:
                    d5:a1:f9:cb:fa:b2:57:88:53:ce:ca:99:0d:9f:d2:
                    e7:df:11:e8:cf:1a:ea:21:29:0b:70:f9:76:45:9e:
                    e2:c5:36:fd:97:14:94:e9:17:ae:57:04:ab:53:b2:
                    55:48:65:b9:68:ce:35:3d:3e:60:1f:7e:52:41:59:
                    f2:94:36:ea:36:5e:14:d7:d0:43:6c:ee:6e:8d:a0:
                    e4:f5:6a:52:cf:73:3a:20:40:be:ea:9a:21:e4:00:
                    70:c4:c3:92:89:05:47:9d:a1:5e:a1:42:65:e0:ea:
                    2a:7f:07:16:c4:d6:22:1c:bc:cd:2b:c5:a8:7f:b9:
                    6a:86:be:4f:f7:e4:76:60:09:2e:32:bf:4d:e7:c1:
                    11:e5:06:37:16:bd:5c:e2:2b:4a:13:ea:3e:6c:b8:
                    22:33:b5:7d:ec:7a:7f:da:95:0c:aa:47:4e:83:85:
                    9e:0c:76:38:9b:d6:5a:bb:0f:3c:d5:a1:88:0d:58:
                    7d:96:37:17:18:86:6e:9d:90:05:cc:57:76:fc:90:
                    dc:82:97:4b:eb:fd:5d:d4:ed:1b:1a:98:0f:f9:f8:
                    be:cd:57:93:00:cd:64:92:b9:b9:c2:6a:de:9a:3f:
                    6f:bb:a3:db:1c:80:ff:6e:08:40:9d:ed:5f:e6:3e:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:64:29:56:04:E6:35:8D:0B:66:DE:D2:4D:59:65:2A:71:12:24:BA
            X509v3 Authority Key Identifier:
                keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:45:9c:2e:58:18:98:a1:c0:dc:55:03:63:d8:bf:4e:00:42:
         dc:c7:97:c8:28:31:8e:6a:b2:64:e8:b6:b4:47:00:2c:1a:29:
         e3:02:c2:4c:a6:99:19:8d:52:8c:b1:3f:a8:b1:38:68:f2:b1:
         3c:2a:0f:42:b7:c9:ea:4e:4f:b5:19:3f:b1:ba:e5:82:96:b4:
         5c:a1:e0:ea:ab:a7:fb:c2:f1:c2:41:ae:7a:44:8f:cc:08:aa:
         b0:4f:0c:f1:ae:e1:9f:c1:bc:de:c0:a3:6b:9c:ca:0a:78:ab:
         8e:63:19:67:50:37:6f:ae:d7:46:fb:83:84:a6:cf:95:11:5d:
         d5:b3:67:84:be:3f:9d:5d:f9:35:9c:1b:58:46:2b:66:c0:8b:
         54:34:16:d5:e3:38:a0:3d:3b:42:91:37:65:af:5a:5c:8d:a0:
         b6:41:86:55:35:04:7a:d6:3e:0e:40:5d:2f:18:53:96:b2:55:
         95:65:3e:58:5c:50:04:11:e9:33:82:6e:a3:a8:be:5c:f5:bf:
         22:1f:9e:22:b5:77:78:5c:86:b7:8e:ad:7c:5e:ec:66:95:74:
         0d:87:c6:f7:b5:8d:1d:1c:37:1a:be:12:be:64:0a:70:6b:69:
         ea:ce:60:7f:12:cc:b3:dc:b9:e7:47:e9:73:03:bb:0b:97:80:
         7e:3b:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:15:32 2026 by rpki-client