Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File:                     WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier:          hWVg4S6l2E3A92R4nfUG7VeMSgxHYGsdCcfjUVRknos=
Subject key identifier:   3E:A4:9E:94:B4:6D:15:3A:EB:0B:60:8E:41:5A:DA:3B:BD:88:97:AD
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer:       /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial:       01A0C47C607BD43912DF24B4B2B64E039749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number:          14C6
Signing time:             Mon 21 Sep 2026 15:01:20 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:20 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:20 +0000
Files and hashes:         1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
                          2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: HkCtYarT0qncUHJUeuQJdS0OL1w/kc/y4tMUAmFsxRk=)
                          3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:60:7b:d4:39:12:df:24:b4:b2:b6:4e:03:97:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59877720c014688494ea6910c83474de13e99802
        Validity
            Not Before: Sep 21 15:01:20 2026 GMT
            Not After : Sep 22 15:01:20 2026 GMT
        Subject: CN=3ea49e94b46d153aeb0b608e415ada3bbd8897ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:1b:af:50:bd:66:7c:e2:00:6a:51:c7:6c:
                    7e:db:7c:16:25:7d:66:37:07:e5:b5:a3:d8:02:04:
                    0d:10:dd:c1:c4:d7:95:90:fa:ff:da:a7:5a:2b:68:
                    d1:49:5b:1b:57:96:b5:76:94:ca:29:bc:9b:5e:9c:
                    b2:a7:22:92:ba:c4:ef:4d:89:f4:30:13:1d:da:71:
                    37:53:a3:91:79:80:7b:e7:ea:65:f7:09:24:52:95:
                    f3:b7:3b:36:7e:f3:77:dc:a8:cc:77:32:7b:46:72:
                    86:55:62:cc:64:7c:73:cc:2a:2b:5c:a5:39:e7:55:
                    e7:18:59:52:9d:f3:2e:da:8e:fc:37:73:2c:c9:04:
                    91:2e:2a:d9:07:e0:51:1f:b6:4b:f8:18:81:3b:7b:
                    6b:02:34:18:45:8a:7e:ff:93:43:e0:24:00:50:86:
                    5c:95:b6:84:66:2e:b2:a7:af:67:9f:4c:8b:7f:a2:
                    50:4e:af:1b:c3:ce:c8:73:1a:9f:a5:5d:25:16:4e:
                    fd:73:d9:3e:b1:ef:3d:f0:19:4c:b8:82:62:ff:71:
                    09:9a:32:e5:f0:c2:2a:11:31:e5:69:2c:b9:0c:57:
                    12:81:69:d9:8a:b7:ed:97:f9:0a:0e:6f:7c:0c:c9:
                    30:e6:8f:b3:c8:82:53:c3:23:2d:0f:96:56:68:ea:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A4:9E:94:B4:6D:15:3A:EB:0B:60:8E:41:5A:DA:3B:BD:88:97:AD
            X509v3 Authority Key Identifier:
                keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:83:4e:76:cd:f8:2b:db:11:4b:b9:6b:16:74:64:56:8f:
         eb:30:94:a0:00:7a:18:67:71:f4:ea:ac:74:be:ea:50:ed:06:
         0e:f8:92:fb:d5:d8:31:2b:73:6a:e7:d4:91:41:c9:e0:3e:86:
         b2:6b:51:23:1f:6d:01:a7:c6:3c:0d:19:75:8f:1c:46:46:cd:
         5c:a9:f5:16:b0:8f:49:07:ac:d5:55:fc:d0:69:06:3e:91:3e:
         d4:4c:ad:da:24:9c:36:23:ed:cc:6a:65:f7:6b:af:25:1c:2c:
         05:e2:bd:a8:6e:dc:1a:7f:f5:5e:2f:a0:28:38:17:98:16:c4:
         27:6d:ab:4b:33:13:37:ee:37:e8:07:df:3f:9d:39:92:85:a7:
         86:44:7f:60:e3:63:b2:70:d0:74:58:33:4a:ed:ed:f2:ee:54:
         0e:0a:5a:b4:af:18:45:0f:e5:fa:ea:2a:4a:91:73:78:77:e8:
         27:30:e6:1c:17:63:f2:b3:7f:15:45:2a:63:8b:33:cb:e1:c1:
         df:2c:99:53:68:2a:03:47:ec:31:3f:1b:c2:6b:ac:8a:e2:94:
         99:5b:46:a2:d4:09:e9:10:d3:e3:8e:98:cf:06:7e:f5:c7:8a:
         1c:11:8d:14:a2:ad:55:22:44:11:67:78:16:f0:af:88:e9:2c:
         12:fe:5b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfGB71DkS3yS0srZOA5dJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl
OTk4MDIwHhcNMjYwOTIxMTUwMTIwWhcNMjYwOTIyMTUwMTIwWjAzMTEwLwYDVQQD
EygzZWE0OWU5NGI0NmQxNTNhZWIwYjYwOGU0MTVhZGEzYmJkODg5N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIcbr1C9ZnziAGpRx2x+23wWJX1m
NwfltaPYAgQNEN3BxNeVkPr/2qdaK2jRSVsbV5a1dpTKKbybXpyypyKSusTvTYn0
MBMd2nE3U6OReYB75+pl9wkkUpXztzs2fvN33KjMdzJ7RnKGVWLMZHxzzCorXKU5
51XnGFlSnfMu2o78N3MsyQSRLirZB+BRH7ZL+BiBO3trAjQYRYp+/5ND4CQAUIZc
lbaEZi6yp69nn0yLf6JQTq8bw87IcxqfpV0lFk79c9k+se898BlMuIJi/3EJmjLl
8MIqETHlaSy5DFcSgWnZirftl/kKDm98DMkw5o+zyIJTwyMtD5ZWaOq3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6knpS0bRU66wtgjkFa2ju9iJetMB8GA1UdIwQY
MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt
NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk
LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdODTnbN
+CvbEUu5axZ0ZFaP6zCUoAB6GGdx9OqsdL7qUO0GDviS+9XYMStzaufUkUHJ4D6G
smtRIx9tAafGPA0ZdY8cRkbNXKn1FrCPSQes1VX80GkGPpE+1Eyt2iScNiPtzGpl
92uvJRwsBeK9qG7cGn/1Xi+gKDgXmBbEJ22rSzMTN+436AffP505koWnhkR/YONj
snDQdFgzSu3t8u5UDgpatK8YRQ/l+uoqSpFzeHfoJzDmHBdj8rN/FUUqY4szy+HB
3yyZU2gqA0fsMT8bwmusiuKUmVtGotQJ6RDT446YzwZ+9ceKHBGNFKKtVSJEEWd4
FvCviOksEv5btg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:20:53 2026 by rpki-client