Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          WLNmzj8ze51pF0AG8uYJcxO20OzRrzhgvKT2O9/SP6w=
Subject key identifier:   7C:D0:F5:BD:59:17:1A:1E:46:DB:06:70:C9:AA:BA:4A:44:23:FB:67
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       019EB87C50FCB47AD04236F5D6B02054D10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          189C
Signing time:             Thu 11 Jun 2026 21:00:15 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:15 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:15 +0000
Files and hashes:         1: bkBKpNXnnhiVy0aIIWXvtrC3cuc.roa (hash: OmCalx7GnzcLWdPt18F0Wc8hXtQDqYrhzKI8QJ5ZwZY=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: uvAkiO+Y4KwRc5L+HnpTBBKfAg0kiqOOictBpC75cdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:50:fc:b4:7a:d0:42:36:f5:d6:b0:20:54:d1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Jun 11 21:00:15 2026 GMT
            Not After : Jun 12 21:00:15 2026 GMT
        Subject: CN=7cd0f5bd59171a1e46db0670c9aaba4a4423fb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:4c:65:00:78:fc:ec:b0:bf:ea:20:87:e7:
                    2b:42:37:3e:3d:bb:9b:85:af:33:7f:a0:d6:77:12:
                    da:6d:d1:0f:3a:c6:37:be:33:bf:46:d9:db:31:3c:
                    58:ac:32:59:fd:45:bd:80:52:5e:6e:53:7b:f2:2e:
                    ad:e4:38:ab:9a:0e:4e:e4:ba:df:cf:98:8f:15:18:
                    81:e6:66:60:d2:78:e1:0b:9c:98:24:85:c4:25:22:
                    d3:bf:07:d7:16:4d:10:45:6f:1d:1a:9c:f5:f5:22:
                    ab:f2:1a:17:1b:d7:7c:71:f5:a9:32:b6:b4:aa:84:
                    db:d5:e7:c1:24:5c:8a:0e:a5:2e:67:36:ca:20:bf:
                    ac:59:fe:d4:c7:c2:15:ff:ef:3f:06:3d:39:1c:72:
                    2d:0a:d4:9f:35:a5:6c:57:4c:3a:ba:cd:a6:cc:70:
                    1f:4f:40:c6:10:b3:8c:53:e8:a3:ef:96:9e:03:63:
                    20:ec:db:d1:05:f0:71:db:11:7b:39:f1:b4:c4:0f:
                    09:80:48:a5:4d:3e:0e:8a:a8:be:bb:4a:28:34:e9:
                    b8:64:88:a6:67:05:e5:37:37:5b:79:40:40:0e:f8:
                    e7:dc:34:b4:f7:b4:03:af:35:cd:aa:f6:d7:b0:d8:
                    9b:28:3f:a7:e6:9b:96:cf:d3:6d:e6:bd:c6:9b:4b:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:F5:BD:59:17:1A:1E:46:DB:06:70:C9:AA:BA:4A:44:23:FB:67
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:ec:ad:3e:9d:12:ab:b7:32:40:77:15:06:06:f1:4d:6d:
         ad:92:c5:d0:ef:14:35:3c:7b:a5:57:27:68:f2:5a:ad:08:89:
         58:a8:27:c5:c2:58:68:4b:6c:31:c1:23:9d:74:64:20:54:7e:
         d2:66:f8:cc:8a:6a:ff:f7:24:2b:a0:c0:5f:d9:ac:7b:4b:9c:
         f3:0a:03:a3:ba:fb:a1:1a:8c:89:20:90:7f:e7:eb:9a:53:0c:
         08:81:a3:30:49:c0:5f:13:5e:37:d2:59:95:a3:58:5e:aa:86:
         96:f1:38:af:56:76:6d:dd:16:5f:c4:18:ad:1d:c5:90:a8:48:
         a8:bc:e5:a2:99:3c:d4:ae:c7:34:2e:6f:f1:8c:7b:9d:c1:4b:
         89:3a:37:0a:1b:fe:70:db:d8:ac:10:7b:95:09:d8:7c:f6:fc:
         da:c1:07:8a:3c:3b:e7:6c:66:3d:da:31:44:d7:4a:cb:21:12:
         3a:6a:81:1e:bf:93:40:d4:76:08:3e:2b:6a:77:da:71:19:68:
         41:14:8b:cf:96:19:74:58:6e:e1:3b:5f:e1:25:e1:4d:ca:53:
         9d:d7:8e:c7:2c:7a:e5:4d:f1:9d:0e:4c:ef:65:0e:d0:58:ce:
         b7:98:a0:57:7c:03:96:82:35:62:e5:8b:fa:cf:d0:70:f9:8d:
         f3:f5:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:41 2026 by rpki-client