Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File:                     W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier:          DfDgQQz+K4tirgEWZyMQM1tCIOO9yid83Tr1jpV5B9U=
Subject key identifier:   09:5C:5A:D8:D3:76:A9:20:94:DF:B3:3E:AA:39:2D:36:B8:C5:40:84
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer:       /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial:       019ED5E2DFC45889BC475425D3F748E3B12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number:          05B2
Signing time:             Wed 17 Jun 2026 14:01:15 +0000
Manifest this update:     Wed 17 Jun 2026 14:01:15 +0000
Manifest next update:     Thu 18 Jun 2026 14:01:15 +0000
Files and hashes:         1: 6AdECEyUfnYbw235tYGMtHLw6Xw.asa (hash: Ay8h4movBGLpwUN8dQ7zR6CqdQIUbiESTeAG4Mdcu18=)
                          2: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: 9GWxC+XONs9dLdj06WgxD8OjYs0cB+1CZhS2tDwt76s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:e2:df:c4:58:89:bc:47:54:25:d3:f7:48:e3:b1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
        Validity
            Not Before: Jun 17 14:01:15 2026 GMT
            Not After : Jun 18 14:01:15 2026 GMT
        Subject: CN=095c5ad8d376a92094dfb33eaa392d36b8c54084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:3a:4c:20:f6:b9:da:e4:22:33:f0:52:fd:
                    f5:92:ed:19:87:c1:67:8c:19:f7:10:24:18:be:4d:
                    0b:2d:9b:07:06:5e:f6:f9:a7:2f:7f:9e:76:26:26:
                    a5:64:50:5c:80:ba:0a:66:d1:a5:f4:3f:92:05:55:
                    ff:1a:cd:a7:f9:f3:71:9b:82:42:52:86:81:01:76:
                    d4:87:29:c7:e0:3f:cb:56:d7:a8:49:96:1f:5a:97:
                    6e:66:a1:11:78:68:f8:54:48:fa:c1:50:1b:24:25:
                    e1:62:99:74:86:7a:4a:fd:8d:93:a8:fa:59:9d:54:
                    5c:f9:02:5f:59:e2:6e:b1:29:c8:da:c6:b2:d8:46:
                    73:1a:53:a8:52:ba:cf:93:7b:e3:15:c9:2a:33:f1:
                    34:a1:47:fe:8e:8d:a0:c5:23:b8:d2:fa:8c:56:30:
                    8c:16:4e:50:39:6b:42:4d:7d:66:a6:f9:7b:51:34:
                    36:81:0f:0c:f8:40:ab:5e:08:29:fe:a8:48:e9:3c:
                    da:6b:34:e6:b8:56:ae:2d:df:b1:dc:0b:c6:14:a4:
                    dd:1f:79:a6:34:8e:d7:85:16:a9:71:3b:6c:5e:c2:
                    59:fa:fb:33:11:f0:80:86:ea:93:35:b8:a7:e9:0b:
                    00:2e:c7:c8:fc:a5:39:53:f7:83:7a:c5:8c:e3:d5:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:5A:D8:D3:76:A9:20:94:DF:B3:3E:AA:39:2D:36:B8:C5:40:84
            X509v3 Authority Key Identifier:
                keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:50:7c:1e:00:6c:e6:d0:5d:87:e8:3e:cf:93:eb:14:61:
         56:ae:64:34:95:65:0a:e4:2a:ed:f0:6d:4e:cb:12:6e:61:65:
         28:d5:cc:ac:11:11:b1:31:e6:94:be:36:26:a6:be:91:83:90:
         8d:1a:0b:d4:fa:9b:8b:7f:3f:f4:2e:b4:88:32:96:a2:56:2e:
         4e:24:db:a4:54:5c:8f:ef:95:a8:cc:ba:b4:7b:87:28:61:ab:
         4a:8c:12:5f:17:b9:2c:02:59:be:98:ad:fc:f6:a4:55:89:7a:
         b7:c1:58:d1:23:7c:8e:b0:20:be:36:73:bb:6a:41:0e:00:5e:
         00:6d:46:1e:f9:04:6d:f4:32:76:09:6d:32:63:d9:17:63:42:
         de:f4:e2:a8:c5:7d:28:62:a1:94:01:91:82:d9:af:27:19:8b:
         75:3c:6a:20:b1:0d:5c:37:6d:c3:b6:f4:8a:3c:06:00:93:b7:
         66:d8:49:06:7c:ab:e7:8d:78:ac:ce:64:d7:c5:ec:c9:c0:15:
         49:a4:23:f2:d2:38:bf:fe:cd:d6:28:71:cd:ce:d5:2b:8d:4c:
         af:92:b6:7a:98:67:23:e4:5e:d5:bd:4c:a9:cf:48:03:a4:79:
         0f:88:81:a2:0a:fa:6b:02:f9:cb:62:e8:f0:c6:58:92:78:54:
         e5:56:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:43:55 2026 by rpki-client