Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          4YSJ/QW6gpbWsLecwbMjVLCCm+wpqH2AVyENSqtxXcI=
Subject key identifier:   0F:1F:55:9C:6D:C7:62:02:0A:2A:3B:34:0B:00:E7:A1:F4:4B:8C:8C
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       01A0C3D6A0B64C6620AB0937DC8E8B078B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          16E6
Signing time:             Mon 21 Sep 2026 12:00:17 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:17 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:17 +0000
Files and hashes:         1: 6-cD7PwZNNg8B5NEI6cnS9qsYws.roa (hash: EYqd8s/hHYel0xQm6Q8ZXtIUTI9f5VFJlpaewnbnCgw=)
                          2: OOHuoxQHwcTPw0lmXeoWsx3MPDs.roa (hash: 0adogDb33iNZDpARqzB5nWTOkYnidB5h7S3awTSepJY=)
                          3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: bh1MrhTn1IazpxjXBqnAjDQkhfl6bF/Tnp9O4gAkAww=)
                          4: zHZaUGL1PgevIY9huCaPmQ1rgRA.roa (hash: ncKaZ+bqsMAHSDw8fyhXbISTNBW6FE6m6Rhkmp7c75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d6:a0:b6:4c:66:20:ab:09:37:dc:8e:8b:07:8b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Sep 21 12:00:17 2026 GMT
            Not After : Sep 22 12:00:17 2026 GMT
        Subject: CN=0f1f559c6dc762020a2a3b340b00e7a1f44b8c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:0e:ff:8f:ab:af:15:be:ba:f4:ce:c7:bb:
                    58:4d:ca:5b:b0:f8:ea:f2:ce:ce:0c:25:9d:3b:fc:
                    a1:99:28:e3:85:3c:b7:a1:c8:ff:e2:24:6d:55:3f:
                    0a:cf:58:e5:5e:ab:a1:20:9c:23:53:91:fa:84:6b:
                    07:c4:77:46:90:5d:5f:59:f3:1d:19:71:3b:98:af:
                    9d:fa:15:d9:1e:e2:65:6a:f9:23:5d:b5:39:bf:d4:
                    33:65:1a:37:11:70:0e:3f:4e:87:a4:a0:c2:fe:3c:
                    04:7a:e2:a7:89:9d:20:c3:70:f5:17:99:03:a5:1d:
                    69:1a:4b:d0:97:65:77:96:b7:86:13:17:96:47:c8:
                    14:d5:6e:f7:d2:95:65:8f:80:3c:0d:31:41:65:a1:
                    97:a8:7d:f5:95:35:70:90:6a:91:3b:d9:cb:41:1c:
                    b1:96:ac:3b:91:0c:d5:d1:97:fa:41:d4:88:f1:bd:
                    08:35:c4:ba:8b:ac:e8:77:ca:c6:88:6a:a5:ae:d7:
                    b1:6e:c8:0e:5f:88:6c:f5:45:8d:55:68:8b:86:e3:
                    53:e6:d4:68:f9:e8:15:bc:48:ff:27:cc:9a:d1:9a:
                    eb:34:73:24:89:ed:b2:4f:94:90:fd:1d:27:d9:8c:
                    ce:75:70:29:3f:7a:fa:49:e8:da:d9:c1:2d:e1:3f:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1F:55:9C:6D:C7:62:02:0A:2A:3B:34:0B:00:E7:A1:F4:4B:8C:8C
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:10:71:9d:fa:fd:34:65:60:4c:9e:5e:b1:b7:49:89:ac:
         87:3c:26:38:66:f6:1d:4b:83:4c:bc:17:4a:37:aa:3b:de:86:
         ae:ce:80:69:0f:51:df:45:bc:75:5e:d1:3f:c3:bc:aa:b4:25:
         83:5e:f7:40:66:30:f1:bb:74:63:0e:d7:71:a1:2e:2b:48:98:
         4c:44:be:02:50:1c:9f:8a:a5:7c:21:77:5a:9e:1f:37:2d:cf:
         54:db:90:49:1d:76:79:9b:90:70:d3:e9:f4:35:de:81:e3:2e:
         e7:3a:d5:4c:4a:5e:17:53:2e:cf:af:5d:33:3a:04:02:55:ed:
         4c:18:2d:7e:9a:5d:d0:4d:7d:e8:1a:c7:02:8c:f7:5f:5f:8a:
         d8:5f:88:5a:ed:0d:88:79:eb:f4:39:7b:0a:f3:cb:98:e7:dc:
         70:00:92:0e:0c:07:56:8d:10:41:e3:eb:59:94:05:f5:d7:19:
         26:4b:45:59:88:ba:fd:0e:b4:6e:63:ac:c2:21:bf:90:7a:24:
         31:75:b8:04:a5:68:0e:f6:07:79:55:86:a1:7a:40:19:a0:db:
         57:40:c7:e4:f7:38:75:06:6c:ce:2e:51:b8:0a:89:eb:24:80:
         8a:e6:33:67:86:fd:e7:07:1f:e3:c8:c4:7b:47:5c:22:7e:b2:
         61:39:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:55:52 2026 by rpki-client