Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          PELszvB9FOFI44wPdARL6+CTgh7ogBQC5mhY4xs+oV8=
Subject key identifier:   29:83:DF:A5:CC:8F:36:4B:B2:ED:98:90:B3:17:B4:DF:67:A5:16:CF
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       01A0C6331457A5672CAA42F7410CF2FE1278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1A78
Signing time:             Mon 21 Sep 2026 23:00:31 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:31 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:31 +0000
Files and hashes:         1: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (hash: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8=)
                          2: TURon6JiNs0lgTZSDniUslEGz9E.roa (hash: eXgvunaSwK3PiegbOluPRt7fixoWf2ckeL+bp42GNpc=)
                          3: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (hash: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: rvrBiLW3g7OUE0u0kBaMJjGVv5HAR1E5cJTOEFx7+ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:14:57:a5:67:2c:aa:42:f7:41:0c:f2:fe:12:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Sep 21 23:00:31 2026 GMT
            Not After : Sep 22 23:00:31 2026 GMT
        Subject: CN=2983dfa5cc8f364bb2ed9890b317b4df67a516cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:7f:8d:95:b4:46:0f:fd:65:46:68:6e:a3:
                    4e:75:1f:28:4c:9e:8b:5b:66:9a:b4:d8:5a:c9:38:
                    27:04:20:b6:fa:ba:78:3c:02:55:c4:29:78:ff:df:
                    b8:88:a0:b5:f9:55:93:29:4c:91:c9:17:af:7f:03:
                    9d:a3:22:f8:f0:a3:28:66:bc:56:41:73:f9:31:69:
                    4e:e1:d8:15:77:35:62:5b:18:cf:06:dc:3a:a9:36:
                    5b:3d:27:10:41:d6:64:20:40:86:c1:79:c2:44:5e:
                    36:95:d5:dd:38:14:36:63:7a:46:07:a1:45:0c:64:
                    7b:cc:02:1c:3e:d5:f3:c5:e4:63:ee:04:68:59:17:
                    07:ee:21:0d:c0:17:e6:5b:2f:2b:bf:f8:ac:21:7e:
                    f7:59:3e:bf:50:6c:b1:7e:13:c8:68:aa:06:6f:46:
                    0d:73:63:66:41:54:bc:77:28:59:fa:a2:2f:f1:70:
                    1f:9e:33:98:7f:b7:8a:90:f5:13:f5:af:b6:6d:17:
                    34:86:22:c6:6b:91:e1:26:fa:fb:50:5e:c2:0b:03:
                    26:3d:06:86:15:f0:7a:47:77:d1:47:ae:10:bf:91:
                    fd:ca:fb:63:f6:5a:3e:73:2b:e9:26:6a:ba:8b:a0:
                    d1:40:39:db:2a:f9:0f:40:69:b5:cf:12:af:ac:40:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:DF:A5:CC:8F:36:4B:B2:ED:98:90:B3:17:B4:DF:67:A5:16:CF
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:cf:04:96:1a:bb:ab:c9:44:3d:d6:c5:bf:c4:d6:21:26:2e:
         0c:8c:24:77:11:28:4c:58:76:bd:4f:3a:1c:e1:8b:26:28:e5:
         74:b9:83:01:4d:69:48:4e:54:e4:05:25:fd:55:73:9f:17:0c:
         93:b4:3d:aa:79:d0:3f:4b:1f:de:89:60:b3:39:fe:59:98:3a:
         c7:20:e2:bb:d0:d4:d2:8d:4c:70:62:ec:3f:11:7d:5e:ca:8e:
         27:e7:90:ee:8d:3f:88:c5:a4:ca:cc:82:50:35:4e:d9:af:bd:
         d9:3e:8b:0c:5f:87:50:be:da:44:39:4f:b4:0a:d7:00:be:dd:
         d8:ef:55:61:53:f3:db:f0:d9:5c:21:e8:a9:ed:2f:76:e9:25:
         b1:5d:9d:d7:82:7b:c1:6e:1a:1c:d6:14:ce:76:77:36:96:d2:
         04:62:45:ed:1f:03:f6:7e:df:bf:9c:aa:6b:c4:1f:80:95:09:
         ab:eb:10:fd:21:14:ab:a8:73:b1:a1:b2:b3:01:8d:54:44:ff:
         86:0f:c1:9e:dd:c5:25:4e:f1:32:3c:1c:c6:d7:11:6c:ec:32:
         0f:f5:26:5e:47:40:71:97:fc:77:f2:62:2a:2c:f9:b0:7b:7c:
         a6:b2:6d:63:40:e4:30:36:8b:9d:22:4a:03:16:91:77:8c:61:
         b2:52:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:08:09 2026 by rpki-client