Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          etP6d8tUYqqUL0qDsXw/IJ3ciZr8duPoui6WuffrEpY=
Subject key identifier:   66:BA:9C:6B:5B:CE:DC:0D:2B:49:0A:43:5D:BF:E2:1D:64:A2:F8:B9
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       019ED4D021F41CF4152C93759B8F161FBFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          0845
Signing time:             Wed 17 Jun 2026 09:01:10 +0000
Manifest this update:     Wed 17 Jun 2026 09:01:10 +0000
Manifest next update:     Thu 18 Jun 2026 09:01:10 +0000
Files and hashes:         1: Mz8qnBphricpE-y1NgDJ85UMBGA.roa (hash: D7iDGlfFeVsE7k0g3r151vYQu3PiucDxigC9xAR74QQ=)
                          2: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: Q3IvKs88mP55YTsW9p/N7L8bZNdiUlGtVacblTlt1qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:d0:21:f4:1c:f4:15:2c:93:75:9b:8f:16:1f:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Jun 17 09:01:10 2026 GMT
            Not After : Jun 18 09:01:10 2026 GMT
        Subject: CN=66ba9c6b5bcedc0d2b490a435dbfe21d64a2f8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:0f:0e:b2:e7:49:d7:fb:ac:12:7e:bc:f3:
                    46:23:95:65:f9:1e:4a:ec:66:90:37:d1:14:6e:b7:
                    ae:e7:1a:c4:95:4d:70:8a:97:6e:4e:e2:b4:4d:a5:
                    57:0f:c6:0b:cd:6a:2b:53:88:48:45:d0:19:37:b7:
                    51:31:8a:24:2e:13:87:53:19:1c:76:d8:96:d1:42:
                    83:d9:7b:8c:3a:2e:12:fc:09:78:77:44:14:90:cd:
                    6a:cf:fc:c0:4e:3f:51:e5:77:52:b9:01:67:93:e0:
                    d6:2f:da:e2:07:62:62:98:67:d9:64:5f:26:8f:c8:
                    30:9c:8c:78:55:a8:51:a2:2f:53:f0:d5:dd:23:78:
                    77:2a:ac:f8:7a:20:82:dd:8e:09:69:08:03:bd:c1:
                    03:3a:68:3a:ef:a1:a6:f9:e0:7d:2f:a2:43:2d:c3:
                    cb:71:e5:4a:25:39:7b:0e:b4:9b:dd:e0:ff:cb:2f:
                    90:af:d3:4d:88:6c:37:8d:cf:8d:b7:ca:4e:bd:b9:
                    fe:9f:59:a1:98:fe:7f:dd:6c:d6:a9:50:d0:09:fb:
                    7c:13:b6:90:16:94:81:78:c6:d1:04:3a:09:9d:ab:
                    86:4a:a2:12:04:33:2b:2c:93:2e:06:17:fd:55:f8:
                    b0:ff:c7:9c:ef:1f:79:ea:b9:a6:53:af:f9:dc:c9:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:9C:6B:5B:CE:DC:0D:2B:49:0A:43:5D:BF:E2:1D:64:A2:F8:B9
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:73:1a:10:0c:c2:e1:e4:04:24:75:2d:3b:85:92:b9:af:
         ec:fb:11:f2:ca:ce:79:41:f2:01:53:03:86:0b:b4:f2:48:89:
         e3:5b:1d:cf:06:81:d7:83:31:6a:1a:43:1e:fd:1e:2f:37:e0:
         dd:21:4d:8f:b1:6f:dc:7d:bb:fe:1a:67:33:e5:26:37:5d:9e:
         c6:df:4d:cd:5a:72:64:c7:f9:b9:34:5e:ee:9d:5b:0f:e5:35:
         78:ed:4b:5b:d8:f0:e1:10:18:c4:dd:9b:45:cc:1c:05:44:ae:
         35:cc:33:05:53:1b:02:fe:2c:52:60:9b:e1:2f:d9:38:e3:30:
         9a:bf:1e:62:c1:53:c6:e4:1f:d7:4c:56:a4:e6:5c:6f:28:f9:
         60:ee:45:08:7d:85:67:db:5f:ca:90:99:7c:36:1d:b3:7e:1d:
         21:6b:4f:4e:92:18:33:f4:f1:4c:29:9d:e9:e2:0b:96:51:a3:
         eb:46:3a:08:e9:9f:32:a6:81:eb:8c:cc:30:63:d4:07:8e:54:
         49:49:a4:89:52:26:32:ba:e5:d0:0b:5d:4a:7e:94:24:8c:22:
         b2:c9:66:3d:a6:b8:87:26:b9:2c:c7:33:13:39:21:2e:66:c7:
         34:13:a4:16:2b:08:1a:59:43:11:e9:66:d5:7c:57:54:8f:7f:
         e7:4e:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:39 2026 by rpki-client