Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File:                     W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier:          fzzc9+kf+Qs6Ap44xtG5Qh7xxP3MfbkVe2Z5dfXmlhQ=
Subject key identifier:   BC:FA:92:9A:60:D9:36:32:68:7D:0A:23:AF:97:40:30:22:2A:1E:17
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer:       /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial:       019FAA87C0CD59FD85D92D63BF9FD578EB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 21:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:50 +0000
Files and hashes:         1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: /6celuSV3cYY/nwM8babeIf+DuTu5Qgu+SQLBRkAK/Q=)
                          2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:c0:cd:59:fd:85:d9:2d:63:bf:9f:d5:78:eb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
        Validity
            Not Before: Jul 28 21:00:50 2026 GMT
            Not After : Jul 29 21:00:50 2026 GMT
        Subject: CN=bcfa929a60d93632687d0a23af974030222a1e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:cd:4f:99:0b:bd:10:6c:f4:d6:d2:87:09:
                    8a:1f:58:7e:5e:10:69:cc:21:6f:12:a0:5d:a8:19:
                    0c:31:d9:af:64:74:7f:1e:87:52:fe:11:11:e6:c3:
                    66:af:21:19:51:12:6c:5d:ba:2b:db:6a:cd:aa:b8:
                    d1:c0:3b:19:c6:40:f2:3e:c7:4b:88:7e:81:52:b5:
                    0d:fe:c7:7c:f8:b4:55:8b:20:30:b8:ef:33:13:70:
                    8f:60:20:e4:71:cc:03:28:43:40:e2:96:14:9f:f3:
                    51:a3:a6:72:b8:7b:3c:cc:7d:4a:4c:d5:a1:c0:04:
                    f3:89:c9:fb:66:3c:ac:ba:ec:33:ff:b5:64:71:b2:
                    77:d2:4f:c6:d6:f8:27:ec:0b:f2:19:02:4a:83:12:
                    a2:d2:e5:5a:e5:48:c9:21:41:a2:ab:aa:69:95:1f:
                    77:bf:8d:07:9f:6e:21:a8:0a:5f:de:7e:40:ad:cc:
                    45:9a:a3:a6:54:85:0b:64:bc:0b:42:a3:40:24:eb:
                    43:71:a5:91:24:e4:f4:de:ce:53:3c:2a:7c:4d:b4:
                    f5:3c:43:ce:f2:07:97:93:03:11:00:2f:3f:da:75:
                    7c:ae:1f:ce:62:fe:da:39:61:b3:67:e9:ff:f3:d5:
                    04:08:51:c1:be:54:ad:68:94:bc:46:cf:5a:09:0b:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:92:9A:60:D9:36:32:68:7D:0A:23:AF:97:40:30:22:2A:1E:17
            X509v3 Authority Key Identifier:
                keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:b6:b7:f5:29:3e:3a:83:a9:84:30:c3:d3:f1:4e:e9:00:
         84:0a:48:33:9c:66:d1:ca:b6:92:e5:52:5e:01:a5:27:8c:39:
         e3:66:d7:4b:db:8a:be:10:23:92:94:f0:89:43:79:5b:45:48:
         29:81:da:23:d3:0e:9e:e1:5d:e8:76:d7:1a:48:69:5f:b4:a0:
         97:ba:60:a2:29:35:cd:7e:6b:d9:e0:8a:13:d4:be:7a:7a:80:
         26:20:b4:7c:4c:66:42:7a:29:68:10:f1:3a:da:22:d6:b1:6e:
         1c:d1:10:0b:ac:ec:d5:cd:ca:3d:38:92:4e:0f:5d:fd:ab:39:
         4b:cb:c5:19:3a:93:c5:c7:53:1f:62:d4:5e:c8:34:2c:2a:17:
         9d:e5:68:27:21:9a:83:f2:ef:7f:88:e5:af:c9:95:22:c8:1b:
         19:20:cb:6f:1a:6e:13:b9:66:ba:ad:70:1d:95:39:21:92:5c:
         8f:3d:b7:90:7c:fc:bd:fa:88:3d:b3:be:1d:02:99:96:7f:18:
         c0:40:17:d4:6e:ac:42:39:ab:a7:77:85:f0:df:43:3e:61:9a:
         de:05:59:14:a2:d6:00:ba:2c:84:a8:b2:22:51:d6:69:87:be:
         90:2b:cb:ad:3b:1d:27:90:3d:93:78:e7:a8:8f:9d:b1:cc:dd:
         e9:89:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:25 2026 by rpki-client