Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File:                     wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier:          L9Bi3OMyF5HPiXI4+SiuaL9t16dPnXWBBnXmv8mE118=
Subject key identifier:   68:DE:1B:16:65:7D:47:B6:6D:6F:31:7F:BB:02:BF:4F:FF:65:2D:79
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer:       /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial:       019F141C7BBF19C5E8EA6E37D308A73A61DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 16:00:38 +0000
Manifest this update:     Mon 29 Jun 2026 16:00:38 +0000
Manifest next update:     Tue 30 Jun 2026 16:00:38 +0000
Files and hashes:         1: iT1-zXlrjYa55ZvQVt6NmIOQm5I.roa (hash: TsRJtIg/mzMDY+LVA2YyZfX1z4fLu7FY3DeWJy1KmLg=)
                          2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: NuiI4e2J+kLON6k2LP7ijkLhvDEPRUgEq1orwIdVKSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:1c:7b:bf:19:c5:e8:ea:6e:37:d3:08:a7:3a:61:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
        Validity
            Not Before: Jun 29 16:00:38 2026 GMT
            Not After : Jun 30 16:00:38 2026 GMT
        Subject: CN=68de1b16657d47b66d6f317fbb02bf4fff652d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:63:d2:b8:60:a1:e7:19:03:bd:b6:eb:d8:
                    4b:4a:58:d6:4f:cd:5d:7b:1b:1d:1b:af:ac:de:5d:
                    77:49:aa:48:c2:8f:d2:75:c3:31:f2:8e:e8:36:57:
                    13:9d:16:d8:3a:27:a9:17:18:38:7d:eb:b8:89:3c:
                    e3:ce:37:16:34:93:d2:a1:93:e8:f7:ca:cd:1f:1a:
                    2e:b8:4c:73:bf:d8:99:61:4d:bd:59:b5:fd:67:bf:
                    a0:4e:c3:f1:6b:68:18:31:3c:1d:bb:26:a4:9a:bf:
                    98:91:38:c0:0b:a8:86:33:07:9e:58:8e:ab:a3:18:
                    40:ed:6d:cc:9c:24:d6:9e:b0:0f:7c:a8:77:d4:ec:
                    13:2f:12:a5:e3:44:37:70:35:47:ac:ec:dc:1a:fa:
                    8a:29:c3:ca:18:79:1d:41:c6:44:d8:37:f9:c1:58:
                    da:84:4f:d8:23:d4:60:ba:cf:d1:13:01:74:b7:37:
                    10:da:f4:99:e1:88:f2:8f:1d:e5:f4:44:e3:78:06:
                    92:c6:d3:e5:47:14:f5:1a:45:a9:3e:f0:15:5c:c1:
                    dd:f1:ee:0c:0e:2f:b2:74:75:fc:a1:ec:94:4d:a2:
                    64:cd:f5:14:8b:ed:ea:f1:5f:c2:0e:1c:71:a1:48:
                    f5:c9:83:37:ab:2e:32:3c:7f:1d:8d:f3:e1:19:6f:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:1B:16:65:7D:47:B6:6D:6F:31:7F:BB:02:BF:4F:FF:65:2D:79
            X509v3 Authority Key Identifier:
                keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:2f:4d:83:d2:38:03:7a:8f:88:64:c4:b8:75:70:5e:2d:
         15:25:e9:76:2f:44:f3:44:9b:0d:6c:cb:29:b3:9b:0d:6f:7b:
         a4:a6:61:22:22:f9:1d:a3:37:ae:91:25:f8:bd:bf:e0:97:c3:
         0f:a8:97:7a:48:d3:5c:f7:3d:d7:62:39:ed:fc:91:be:e8:79:
         73:82:1b:9b:59:93:98:0c:e1:5a:f3:ef:ce:62:0f:d1:ff:6d:
         a4:48:1b:1c:89:98:71:72:d1:98:d5:3f:a5:66:02:1b:ef:f2:
         a3:f4:db:b6:43:5f:01:0d:b0:6d:1a:62:dd:b1:52:38:fb:7e:
         fd:36:26:f4:83:fa:a6:53:21:d2:2d:33:a1:83:0a:7a:a0:43:
         fc:ca:31:a5:ef:a9:5d:cd:81:e0:89:00:e8:d0:24:82:36:b9:
         ea:8a:5f:08:bc:c4:f3:65:66:1b:b0:b7:82:71:1b:ba:b4:1e:
         c6:7d:06:8f:c8:af:75:61:15:2f:32:cf:a5:db:d2:77:b9:67:
         b3:49:8f:9d:78:e4:b7:a3:31:87:45:7c:1a:d4:f3:48:1f:fb:
         09:a0:12:1d:f5:b7:b9:1e:8d:bc:6f:e4:b5:08:db:1b:ac:6e:
         01:78:45:73:aa:bd:db:c2:f1:3b:7e:69:db:db:09:11:a2:6c:
         af:d0:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:11:37 2026 by rpki-client