Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier:          2l16/k1TTAyllSz0N3djpp+sR9S9/M8E7uM+4sDPdaA=
Subject key identifier:   C0:CC:B4:DB:78:F4:EB:3A:25:B3:F2:51:A9:90:7A:5F:35:EF:39:30
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       019E9C979D0E484C6746EDF310B6CB425042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number:          118E
Signing time:             Sat 06 Jun 2026 11:00:42 +0000
Manifest this update:     Sat 06 Jun 2026 11:00:42 +0000
Manifest next update:     Sun 07 Jun 2026 11:00:42 +0000
Files and hashes:         1: Blotrpr7MpBhfTIOMAd4QzI4MTU.roa (hash: 7tg4tSbcWIkD3S9S1Cn28G+hcZYO6KUz7cO5Ike+MUg=)
                          2: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: tr3USagh4McrQoEPcW14b07RxS3zooqaWJQ73CymRQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:97:9d:0e:48:4c:67:46:ed:f3:10:b6:cb:42:50:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Jun  6 11:00:42 2026 GMT
            Not After : Jun  7 11:00:42 2026 GMT
        Subject: CN=c0ccb4db78f4eb3a25b3f251a9907a5f35ef3930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:bc:d3:62:39:aa:8c:5a:94:c1:c2:3e:2f:
                    98:9f:35:39:f5:fe:ed:5a:02:fb:4a:92:7e:72:9e:
                    73:e1:cb:68:29:90:d7:81:ab:e1:82:a3:ec:45:b9:
                    b0:06:c5:e3:26:b3:84:30:8b:09:93:1c:7d:39:42:
                    65:73:47:01:1a:4d:2c:1f:3a:6c:38:b4:42:d5:55:
                    be:4d:34:a5:5c:ab:6b:80:33:92:61:b1:10:37:f4:
                    5e:96:6d:75:ff:aa:8d:33:c0:3b:07:fa:94:14:d3:
                    3e:72:3c:2f:d9:8a:5b:09:b2:4a:33:a1:0b:18:59:
                    10:d9:72:46:21:31:8b:b4:21:73:8d:66:b4:fe:71:
                    58:86:3e:89:81:f2:3e:e9:c2:a9:70:81:00:2a:bc:
                    b8:4a:43:d3:fc:21:2c:c2:fc:65:a8:64:4a:90:28:
                    f0:6b:8e:bb:53:ed:45:bd:89:74:94:92:05:ef:37:
                    64:3b:32:22:7c:23:ad:b7:02:93:07:dc:e6:f8:15:
                    8b:8f:5a:81:41:cc:7b:d6:fe:74:49:b3:46:bc:78:
                    50:2f:27:96:3f:e2:1f:ed:74:14:07:30:5c:6e:3e:
                    28:40:ce:3a:fb:1a:b6:c3:a6:8c:21:1d:6f:4a:1e:
                    b6:43:6f:a7:f9:57:3e:1c:e6:d2:de:3b:66:02:ad:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:B4:DB:78:F4:EB:3A:25:B3:F2:51:A9:90:7A:5F:35:EF:39:30
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:fb:ef:06:1f:51:4d:fc:a0:3f:68:67:d0:45:80:d7:2b:
         78:70:2f:e2:9f:59:4b:aa:d1:6d:9a:82:63:c8:5e:bd:15:3f:
         45:56:87:31:9d:24:12:a7:5f:d7:a2:22:3b:ad:ef:65:fd:55:
         dc:d5:de:66:95:7a:09:62:9f:d7:05:47:91:8d:a7:47:a8:0d:
         f2:c1:55:bd:8f:29:f1:fd:b0:e6:97:37:8d:54:a6:1b:f6:10:
         c6:54:ae:45:e4:98:43:f7:8d:e0:2b:96:97:17:a0:23:db:fb:
         70:85:3a:e5:d9:93:61:02:c3:da:70:d5:c9:3d:89:bb:ba:0a:
         5f:f1:61:76:11:96:40:26:e7:7b:01:60:82:e9:ae:ad:ec:b9:
         40:d4:62:dc:e0:fd:ee:4c:c3:56:52:f8:77:ed:76:91:65:01:
         5e:fd:fe:83:30:02:28:7d:9a:bc:78:54:2d:a6:54:42:83:86:
         ed:97:fb:36:47:8c:e5:ec:f5:4e:45:39:24:9d:b3:62:45:52:
         8d:54:ca:c0:01:d4:78:43:62:8e:a6:bc:b1:14:75:66:63:e7:
         f0:62:38:52:c7:20:d5:ab:21:95:53:a7:97:2a:45:ed:d4:a4:
         37:c5:08:bc:6d:e5:e8:38:8b:78:80:ff:79:7f:1f:7e:b5:1e:
         8d:14:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:09 2026 by rpki-client