Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          6fnGXAPkH0J2sYQH6SQE0NdZxLriqcZGeYPO1UtnUMQ=
Subject key identifier:   7A:1A:0E:88:AF:9E:C6:CE:36:A8:E2:5F:7A:2C:28:8E:D0:BB:54:41
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       019EC06DA6FCCD17B732D9B39F940CE1F730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          0E0C
Signing time:             Sat 13 Jun 2026 10:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:12 +0000
Files and hashes:         1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: bsEEE7h0GiMSNQnA8eiT1lVm+FsF/wiKAxgyw6DFRQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:a6:fc:cd:17:b7:32:d9:b3:9f:94:0c:e1:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Jun 13 10:01:12 2026 GMT
            Not After : Jun 14 10:01:12 2026 GMT
        Subject: CN=7a1a0e88af9ec6ce36a8e25f7a2c288ed0bb5441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:60:02:07:cb:3c:b7:4d:a1:55:c9:4d:7d:
                    c0:30:6e:5a:b8:9e:35:68:0f:9a:cb:b1:44:32:4a:
                    81:c5:48:ea:18:a7:e9:79:e1:f2:14:b7:33:49:a4:
                    1c:28:a0:f4:21:80:3c:8b:d5:b7:0a:02:fe:97:28:
                    88:9f:11:41:75:78:a2:95:24:4e:0e:7b:3a:8c:00:
                    9f:20:95:18:de:a3:0e:9a:95:d3:99:88:91:34:0c:
                    ab:56:7a:aa:90:24:49:28:33:9f:27:34:8c:68:6e:
                    ec:67:b7:fc:2e:4f:99:f1:ca:ab:95:33:87:8f:ca:
                    f8:e4:49:50:65:16:32:c4:7c:cb:8e:f1:51:d0:88:
                    8b:11:05:02:e0:7e:42:67:91:08:a1:40:04:0f:be:
                    a1:df:ce:27:bc:e2:7c:79:ec:0b:c8:b6:67:79:1b:
                    74:36:33:e2:88:81:53:7d:37:41:6d:ad:cd:3a:bf:
                    1e:cc:d1:c7:b8:1d:90:74:3e:45:7c:12:46:11:e6:
                    70:b7:a2:92:27:92:60:55:3e:36:38:77:54:45:8b:
                    94:d0:7a:e2:e4:c2:1c:4c:d0:19:89:85:06:49:82:
                    46:3f:66:1a:ad:3f:46:fc:5a:f8:42:95:de:94:0c:
                    1f:cf:03:f8:ce:69:c5:f5:0d:7b:21:8d:b3:33:e5:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1A:0E:88:AF:9E:C6:CE:36:A8:E2:5F:7A:2C:28:8E:D0:BB:54:41
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:48:17:ec:61:18:30:fe:fb:11:40:55:7f:ce:35:44:51:8d:
         fa:fc:db:cd:0e:df:1d:25:9b:55:a2:93:38:50:65:22:46:11:
         48:2c:e4:3e:55:04:bf:30:7d:01:3b:b2:7b:4f:e0:2a:c2:b2:
         ae:d0:80:6d:34:ee:56:46:a1:7c:a4:1b:83:c4:67:dd:e3:58:
         2a:d3:73:0d:89:57:49:ab:df:b2:2a:10:7e:f3:59:bd:37:43:
         1d:68:5b:ab:b3:0a:61:43:fa:90:47:1c:e4:cd:3d:44:4f:74:
         9b:6e:e5:8f:fd:d6:a7:82:9d:81:63:dd:71:42:54:25:51:49:
         44:37:91:e0:a3:ee:49:59:2e:e4:5f:ec:c2:4d:7d:b0:5c:3f:
         86:5d:b0:65:6b:65:2c:ac:74:94:43:64:35:cd:d4:bb:9e:ec:
         85:98:02:b7:45:7e:f5:3e:0a:b4:d6:cf:df:a8:3f:16:29:36:
         b7:a4:55:f9:9b:15:44:03:a6:bb:86:53:3c:da:2a:65:e7:19:
         6e:ce:ae:8a:35:84:61:98:7a:78:02:54:4d:03:63:32:81:c5:
         45:5a:c0:99:2f:61:e8:d3:3c:8b:1e:61:a3:87:29:6b:00:09:
         5f:e5:81:25:f4:0d:b4:10:33:c3:57:64:49:03:e3:8c:d7:7c:
         b7:83:e3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Abab8zRe3Mtmzn5QM4fcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4
NDgyNWYwHhcNMjYwNjEzMTAwMTEyWhcNMjYwNjE0MTAwMTEyWjAzMTEwLwYDVQQD
Eyg3YTFhMGU4OGFmOWVjNmNlMzZhOGUyNWY3YTJjMjg4ZWQwYmI1NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsxgAgfLPLdNoVXJTX3AMG5auJ41
aA+ay7FEMkqBxUjqGKfpeeHyFLczSaQcKKD0IYA8i9W3CgL+lyiInxFBdXiilSRO
Dns6jACfIJUY3qMOmpXTmYiRNAyrVnqqkCRJKDOfJzSMaG7sZ7f8Lk+Z8cqrlTOH
j8r45ElQZRYyxHzLjvFR0IiLEQUC4H5CZ5EIoUAED76h384nvOJ8eewLyLZneRt0
NjPiiIFTfTdBba3NOr8ezNHHuB2QdD5FfBJGEeZwt6KSJ5JgVT42OHdURYuU0Hri
5MIcTNAZiYUGSYJGP2YarT9G/Fr4QpXelAwfzwP4zmnF9Q17IY2zM+VOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoaDoivnsbONqjiX3osKI7Qu1RBMB8GA1UdIwQY
MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt
MjI2Nzk2OGI2NTJmLzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm
LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUgX7GEY
MP77EUBVf841RFGN+vzbzQ7fHSWbVaKTOFBlIkYRSCzkPlUEvzB9ATuye0/gKsKy
rtCAbTTuVkahfKQbg8Rn3eNYKtNzDYlXSavfsioQfvNZvTdDHWhbq7MKYUP6kEcc
5M09RE90m27lj/3Wp4KdgWPdcUJUJVFJRDeR4KPuSVku5F/swk19sFw/hl2wZWtl
LKx0lENkNc3Uu57shZgCt0V+9T4KtNbP36g/Fik2t6RV+ZsVRAOmu4ZTPNoqZecZ
bs6uijWEYZh6eAJUTQNjMoHFRVrAmS9h6NM8ix5ho4cpawAJX+WBJfQNtBAzw1dk
SQPjjNd8t4PjZg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:12 2026 by rpki-client