Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
File:                     W8JyS6H1jw-yOew59uGgnVgJRFg.mft (raw, json)
Hash identifier:          VyP0HbPvfoYtjld98Oiti3dhFVYHROMZgEddW75TmN8=
Subject key identifier:   10:F4:8B:27:56:98:55:9E:0E:D8:B4:B3:8E:98:63:BE:88:61:57:1D
Authority key identifier: 5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58
Certificate issuer:       /CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
Certificate serial:       019F29246CEC94CCD93849C5F787EFA36B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
Manifest number:          0A
Signing time:             Fri 03 Jul 2026 18:01:20 +0000
Manifest this update:     Fri 03 Jul 2026 18:01:20 +0000
Manifest next update:     Sat 04 Jul 2026 18:01:20 +0000
Files and hashes:         1: 1_cbd91siaKvf9bZfnMNGMXekDs.roa (hash: oApWa2Po6QpwY0bFHzrByL4PHHcG7yvJrrV17eY2uxs=)
                          2: JpauRmDmCbHFVnVEUgKKhJVZS6o.roa (hash: xuDXXboJS3Rx8iTCxFhoV4xpzws2mEM5Qz8xariIxSc=)
                          3: W8JyS6H1jw-yOew59uGgnVgJRFg.crl (hash: VXWOusKyNF3A7CHLlCv69jbLNPUtx4hppiX0dmW+3to=)
                          4: nedAvjSTHRfCA6BQnYMOfjHM510.roa (hash: 0jHmyuD0j5L3+e/aCv3nj2pmKJJFa3QQUJhop86jMVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:24:6c:ec:94:cc:d9:38:49:c5:f7:87:ef:a3:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
        Validity
            Not Before: Jul  3 18:01:20 2026 GMT
            Not After : Jul  4 18:01:20 2026 GMT
        Subject: CN=10f48b275698559e0ed8b4b38e9863be8861571d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:b6:64:bf:09:1b:7d:67:92:a5:2d:03:b4:
                    03:dd:c4:a5:f5:29:57:ff:e5:a2:b4:82:dc:67:9d:
                    2a:72:1b:9b:59:33:82:80:ab:a8:df:59:58:28:af:
                    97:49:25:2a:c6:aa:0c:d7:3b:fc:e7:0c:b9:18:ef:
                    b0:56:44:0b:41:1e:49:74:6f:e8:b2:e4:dc:07:fb:
                    a2:45:8f:65:89:bc:fc:f9:1a:2d:04:ce:d8:8e:11:
                    77:24:e1:f4:7f:84:b0:1e:96:7d:47:fa:a0:ac:32:
                    7f:a3:c7:39:98:8d:31:2e:98:f5:d3:d6:2f:56:81:
                    6d:a4:68:1c:24:65:33:78:48:60:c8:98:ce:b0:9d:
                    64:35:07:61:e4:e9:c8:49:3a:a2:f1:a1:71:bd:fc:
                    11:35:8b:57:b1:aa:75:22:0d:82:97:31:2d:e7:0d:
                    52:78:76:53:01:13:f4:98:9c:93:46:15:41:bf:81:
                    a0:49:18:9a:90:fa:9a:0c:6a:e0:55:ae:fd:ae:e3:
                    fd:9d:1d:9d:cd:b0:06:c8:76:11:38:bb:16:cb:99:
                    d2:b4:0c:be:1e:30:33:40:91:75:ff:9c:2d:9f:55:
                    a2:23:da:81:f7:30:96:56:c8:e1:18:74:fa:33:61:
                    53:22:0e:62:08:41:3a:9c:ce:cf:36:ff:90:e3:e4:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F4:8B:27:56:98:55:9E:0E:D8:B4:B3:8E:98:63:BE:88:61:57:1D
            X509v3 Authority Key Identifier:
                keyid:5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:b9:63:01:01:c9:9e:3e:d4:41:15:4d:77:53:3a:a1:d8:
         04:ea:21:3f:e5:c1:d8:07:3f:4a:3f:1c:b4:14:b6:a7:50:29:
         af:e2:c9:e4:da:2e:95:17:b6:4b:98:9d:b8:96:d7:b0:12:4d:
         40:cf:3b:13:ec:6e:a3:b6:98:68:54:78:8c:1b:00:b6:b7:57:
         9c:ff:63:3a:ac:e8:14:76:da:69:7a:db:26:47:91:06:b8:05:
         ca:f3:7a:2e:b9:a5:17:81:02:5f:79:c5:49:b2:a8:62:24:92:
         8d:b4:6d:fe:23:97:ef:81:a9:e0:de:51:04:50:75:be:56:11:
         c3:68:3d:e9:3a:1e:4c:4a:6f:e2:32:82:5d:2f:ed:4b:b0:68:
         24:8c:b8:89:5f:9a:50:3a:6c:42:e5:a0:78:cc:4d:03:0d:9e:
         dd:53:3a:b2:e8:54:82:b9:09:fc:cd:f1:80:97:d5:88:7a:49:
         62:37:79:bd:d7:13:69:ed:b3:8c:cb:d9:44:1b:00:0f:da:9c:
         77:e2:b0:0c:ca:52:55:bb:0c:3d:3d:ca:7b:b9:2d:46:35:9d:
         eb:a7:ab:a6:64:e4:7e:d8:30:08:e9:e1:d8:df:c0:15:a0:02:
         ca:4a:53:57:0f:bf:0e:53:a8:2f:50:37:ed:e4:7c:42:7e:1f:
         5b:a9:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:53:04 2026 by rpki-client