Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          V+TpTRf4pKzpwmBySbIqTSwk9Vzc7WmUcGUlThkp+FQ=
Subject key identifier:   19:98:1E:B1:71:A7:DC:D5:6D:DB:07:0B:80:8C:5B:37:34:A4:8C:14
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       019EC25BE62CD5DC30F90D3CCEBAAEF7C168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 19:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:02 +0000
Files and hashes:         1: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
                          2: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
                          3: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: 5bJlhwiwPGAMH9fTwhXFvyDCTsmKopPrJziowjN54Tc=)
                          5: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
                          6: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
                          7: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
                          8: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=)
                          9: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:e6:2c:d5:dc:30:f9:0d:3c:ce:ba:ae:f7:c1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Jun 13 19:01:02 2026 GMT
            Not After : Jun 14 19:01:02 2026 GMT
        Subject: CN=19981eb171a7dcd56ddb070b808c5b3734a48c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:e7:93:94:0f:06:c8:c2:26:2f:02:86:a2:
                    b0:d7:24:00:0b:f3:1c:07:f5:32:4f:53:ff:d7:4c:
                    7a:07:fe:0f:d5:41:9c:c7:5a:90:b7:48:71:67:c9:
                    08:2a:99:69:03:01:72:ac:72:a9:63:97:ed:25:bb:
                    69:28:8f:87:ce:eb:53:ca:18:67:ba:ab:d7:4c:9e:
                    94:bb:9e:23:fe:15:58:95:61:4f:71:28:dd:43:41:
                    05:d4:64:cb:8b:e2:f6:64:86:c8:52:13:df:20:b8:
                    8d:79:12:13:fa:db:c8:51:f6:2a:88:0d:59:43:60:
                    23:5a:57:9b:df:0c:58:fe:3f:dc:b9:51:ce:69:20:
                    4d:e1:df:49:cb:b4:42:f7:70:74:50:7e:c4:10:3d:
                    f2:70:70:c2:8c:1c:6c:c4:0a:95:d2:25:0a:54:63:
                    cc:ed:39:ff:1b:4f:22:5b:04:87:70:90:ea:64:89:
                    45:cd:01:b5:33:be:ce:fc:05:dd:4a:b9:f3:58:7f:
                    84:09:9b:db:42:0c:b8:bc:2d:09:e2:ad:5e:19:3a:
                    6c:5b:26:1b:6a:c2:4a:00:5c:8e:c9:05:f3:08:ec:
                    82:74:8b:f9:78:0c:e4:7e:ae:87:9d:0f:2c:df:aa:
                    0f:61:74:b9:87:89:3e:e5:52:a4:5a:f6:fc:d4:70:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:1E:B1:71:A7:DC:D5:6D:DB:07:0B:80:8C:5B:37:34:A4:8C:14
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:18:8a:85:d2:5b:ae:59:c6:aa:19:d2:47:0c:9e:61:f8:05:
         68:9a:6b:b4:0a:b6:f5:0e:21:0f:83:e0:54:6c:76:38:66:6e:
         e4:3f:ab:07:00:b9:64:4b:a7:4a:fa:37:f8:85:cd:23:53:bc:
         6e:63:cf:7c:0a:cc:56:98:a0:a0:53:a4:88:b8:86:dc:44:e3:
         11:17:8c:4f:16:e9:08:f3:1c:c8:08:21:79:f6:6d:dc:e3:a0:
         ad:69:f9:44:13:34:07:b1:50:37:4f:12:9f:b0:78:86:13:e2:
         0b:7b:98:ac:21:f6:53:29:4c:09:02:da:f9:cf:42:a0:b5:c9:
         11:5e:e6:62:05:d6:49:fe:ac:af:47:ed:a4:77:1a:ed:c2:13:
         85:44:af:f7:03:75:ce:f2:75:95:36:c6:8b:9e:1e:04:21:e3:
         d9:85:39:5f:b3:12:77:de:b7:b4:cd:d6:93:d2:d8:52:ae:85:
         14:df:d0:f8:5e:55:3d:1a:36:96:b8:15:f7:9d:28:94:1c:84:
         48:a5:85:eb:04:04:ba:12:db:ad:8e:bb:4d:ee:92:64:83:35:
         45:28:90:c5:fc:d7:89:6d:de:7d:ee:c8:13:3f:4e:4e:45:e6:
         fe:73:b6:dc:e0:dd:0f:04:20:88:bc:b3:bc:59:a3:f9:c9:e5:
         39:53:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:14 2026 by rpki-client