Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File:                     wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier:          mlNNO3hvHt4HbUvm6OBxPSKBD9dp9pyZMnC2edFpYOM=
Subject key identifier:   D7:A2:5C:E4:1E:DF:15:81:A9:62:18:E8:C5:35:52:0A:E2:29:B5:E1
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer:       /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial:       019EBF238527162CCCBA0FF6A1CF9A042543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number:          0BD2
Signing time:             Sat 13 Jun 2026 04:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:36 +0000
Files and hashes:         1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=)
                          2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: 0/Ls8s70cTDPeKfUwkjA80DTbbXOoOZq/GGA5aucVuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:85:27:16:2c:cc:ba:0f:f6:a1:cf:9a:04:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
        Validity
            Not Before: Jun 13 04:00:36 2026 GMT
            Not After : Jun 14 04:00:36 2026 GMT
        Subject: CN=d7a25ce41edf1581a96218e8c535520ae229b5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:e5:5a:7b:95:7d:24:42:42:c4:78:d0:dd:
                    2b:fc:a8:f5:d0:b8:96:3b:8a:09:1f:c0:fc:68:a6:
                    6e:39:d2:14:39:22:30:42:d6:e4:48:c3:e1:6c:d6:
                    7f:bb:5b:51:f1:b6:d8:82:8b:28:4f:08:ed:d0:7f:
                    f7:aa:e8:bf:d3:22:b7:c0:8f:5f:ed:ac:63:66:dc:
                    be:07:f1:b1:8f:a8:63:19:38:3b:df:72:e8:f4:82:
                    e1:6b:b0:f2:fa:46:7c:a2:44:d3:43:53:56:1c:5f:
                    87:3b:97:ef:5a:a6:94:14:a2:cb:9c:37:b3:8b:c7:
                    b3:29:bf:3b:88:3b:03:cf:de:0b:a1:db:1e:e6:e9:
                    f3:58:6a:09:9b:d4:8c:aa:35:a2:5b:1a:1d:47:5a:
                    58:d6:8a:9b:0a:d2:fa:57:94:82:19:cd:e9:78:0d:
                    34:9a:f8:e9:9d:07:13:69:0c:44:11:ae:0b:95:00:
                    26:e5:c1:2e:2c:c9:ab:ce:f1:c0:7a:ff:26:32:50:
                    36:8f:8e:43:71:a5:09:f6:c0:46:93:ca:4c:19:5f:
                    ac:c0:75:69:71:17:d9:32:96:d6:05:bc:a5:6c:ae:
                    77:77:f9:54:07:f0:8e:20:be:6a:20:47:12:7b:45:
                    49:9b:3c:ee:a0:33:02:55:77:b7:d2:b5:65:f9:78:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A2:5C:E4:1E:DF:15:81:A9:62:18:E8:C5:35:52:0A:E2:29:B5:E1
            X509v3 Authority Key Identifier:
                keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:34:8a:12:68:ba:59:32:f3:18:6c:5b:3a:e5:1b:88:1f:
         32:de:55:53:54:b1:4f:a5:fb:45:98:70:96:4a:4a:f9:80:8b:
         97:24:86:a0:25:da:86:03:60:3e:4a:1d:82:60:cf:a5:15:25:
         3a:88:ce:6d:16:bb:61:b1:2c:6f:62:ac:27:81:97:5b:01:30:
         a2:e1:fd:a0:ef:a8:6e:71:ae:4e:68:d9:dc:c5:c4:60:dc:7c:
         ac:95:51:a6:07:1d:43:81:9d:d9:49:94:46:bc:42:e7:ec:cc:
         4b:2e:94:1e:72:e4:fc:96:7e:c1:66:ac:a4:4b:f4:b0:a5:56:
         a9:df:dc:1e:8a:a8:6e:11:6c:f3:49:bc:4c:bd:75:c1:20:9c:
         cb:32:cb:86:5e:bf:07:70:23:88:5b:14:dc:3e:8e:d7:33:0d:
         7f:21:e1:a4:d8:9c:a0:27:ac:1b:32:99:30:ac:aa:fb:8c:52:
         7a:22:79:c0:41:e4:36:93:72:24:86:05:c7:34:0d:b6:ab:1c:
         46:13:4e:55:35:e6:5b:8c:bb:3c:be:42:0e:22:14:a0:e3:f6:
         28:8a:56:f5:66:91:e2:11:b7:82:b1:2f:4e:54:f7:60:02:e1:
         6b:6a:a6:11:ff:c2:d6:fe:c8:a1:53:35:d7:71:5c:37:98:36:
         40:c5:15:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I4UnFizMug/2oc+aBCVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNmNiNTY0MmU4N2Q0ZTRlMDMwOTA4NDIyOGUyOWU2OTk5
ZWQwYjcwHhcNMjYwNjEzMDQwMDM2WhcNMjYwNjE0MDQwMDM2WjAzMTEwLwYDVQQD
EyhkN2EyNWNlNDFlZGYxNTgxYTk2MjE4ZThjNTM1NTIwYWUyMjliNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrnlWnuVfSRCQsR40N0r/Kj10LiW
O4oJH8D8aKZuOdIUOSIwQtbkSMPhbNZ/u1tR8bbYgosoTwjt0H/3qui/0yK3wI9f
7axjZty+B/Gxj6hjGTg733Lo9ILha7Dy+kZ8okTTQ1NWHF+HO5fvWqaUFKLLnDez
i8ezKb87iDsDz94Lodse5unzWGoJm9SMqjWiWxodR1pY1oqbCtL6V5SCGc3peA00
mvjpnQcTaQxEEa4LlQAm5cEuLMmrzvHAev8mMlA2j45DcaUJ9sBGk8pMGV+swHVp
cRfZMpbWBbylbK53d/lUB/COIL5qIEcSe0VJmzzuoDMCVXe30rVl+XhfywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeiXOQe3xWBqWIY6MU1UgriKbXhMB8GA1UdIwQY
MBaAFMBstWQuh9Tk4DCQhCKOKeaZntC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTct
MDdjZjBiMzNhODQ5LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTctMDdjZjBiMzNhODQ5
LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRY0ihJo
ulky8xhsWzrlG4gfMt5VU1SxT6X7RZhwlkpK+YCLlySGoCXahgNgPkodgmDPpRUl
OojObRa7YbEsb2KsJ4GXWwEwouH9oO+obnGuTmjZ3MXEYNx8rJVRpgcdQ4Gd2UmU
RrxC5+zMSy6UHnLk/JZ+wWaspEv0sKVWqd/cHoqobhFs80m8TL11wSCcyzLLhl6/
B3AjiFsU3D6O1zMNfyHhpNicoCesGzKZMKyq+4xSeiJ5wEHkNpNyJIYFxzQNtqsc
RhNOVTXmW4y7PL5CDiIUoOP2KIpW9WaR4hG3grEvTlT3YALha2qmEf/C1v7IoVM1
13FcN5g2QMUVvg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:42 2026 by rpki-client