Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File:                     wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier:          GDyj7dFDZGwBQYuTH9INDG9sfXehP6T8VVMus2qqOSU=
Subject key identifier:   16:7C:10:9A:57:31:D7:E0:8E:54:8A:37:50:00:5D:19:AB:CE:48:F4
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer:       /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial:       019D992B9C969E4236DDA7507BFCEE6403F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number:          05C7
Signing time:             Fri 17 Apr 2026 02:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:05 +0000
Files and hashes:         1: 0lgng2rjDy26wvLpufoJ44YGSa8.roa (hash: Sp2gMQIGghJdGnoU3YO/ErS7zVxVldScly14Bqy0M6k=)
                          2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: lrO9aSp+SV+q8c1kdpbqS33viFBp3hbB8GfkPuQxWL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:9c:96:9e:42:36:dd:a7:50:7b:fc:ee:64:03:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
        Validity
            Not Before: Apr 17 02:01:05 2026 GMT
            Not After : Apr 18 02:01:05 2026 GMT
        Subject: CN=167c109a5731d7e08e548a3750005d19abce48f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:20:d8:66:12:ef:0b:70:73:06:9f:29:dd:
                    0a:e6:fc:e3:4f:cb:63:83:df:dc:0b:76:ad:fb:cc:
                    0a:74:6d:b6:d6:34:9b:7c:6b:0c:99:d3:5c:ea:de:
                    85:a2:ca:41:b9:ab:8d:95:b8:de:3c:94:58:60:b8:
                    f7:b9:50:68:36:76:39:02:65:4a:9a:2c:df:30:48:
                    62:13:e4:aa:81:49:e3:68:04:cc:b1:a3:d7:d1:25:
                    32:99:9e:9b:c3:b0:84:5a:27:c1:d9:55:37:f8:20:
                    34:4f:15:b6:2f:73:d1:42:47:69:01:48:2e:91:32:
                    d9:48:8d:05:4d:04:ce:09:e5:0a:7f:39:b2:47:5c:
                    fc:68:74:5d:8b:cd:0b:6b:d5:05:9a:9a:c6:de:09:
                    a6:47:f7:6f:3a:f8:7e:53:18:46:53:e8:b9:e9:3b:
                    52:6c:a1:8c:5f:ad:36:4f:d8:88:b2:fb:5b:48:36:
                    53:1e:bd:ce:fb:a1:16:b2:06:28:f7:33:a2:60:50:
                    85:af:8a:8e:cd:f2:45:e0:e1:1a:fd:38:d4:20:29:
                    f2:08:8f:9d:ad:4c:bf:fa:af:87:3c:f4:09:24:68:
                    07:fa:e1:0e:11:70:94:6c:75:9a:04:5b:85:f9:16:
                    2c:7b:ca:6f:be:d9:0d:67:92:96:92:ca:4a:be:70:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:10:9A:57:31:D7:E0:8E:54:8A:37:50:00:5D:19:AB:CE:48:F4
            X509v3 Authority Key Identifier:
                keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:81:ab:87:99:0a:d9:46:f6:92:05:22:87:d1:c7:54:11:ad:
         e2:b6:19:fa:04:65:b1:d5:9c:6e:55:1e:b4:96:7c:17:25:a1:
         b8:ea:3b:f1:09:fb:dc:54:99:d0:7b:49:11:fc:9d:67:b7:1b:
         b0:bc:98:7f:64:4e:1f:97:0d:96:a4:04:b9:b6:79:2b:93:6f:
         53:0a:37:68:50:4e:1b:73:ea:73:65:b2:d1:49:e9:5a:b2:df:
         a1:a7:4a:75:71:65:a5:3b:16:22:f1:89:fc:79:1a:6f:b9:c2:
         1a:7e:7d:8b:17:d9:79:e2:f6:ce:3b:57:5c:9d:2d:66:ee:32:
         24:88:04:41:28:fb:5e:72:04:ea:77:5b:1d:a2:f5:26:25:0c:
         e1:72:33:47:79:4f:bf:12:5b:09:01:68:da:e0:c6:89:51:a8:
         5d:5c:48:10:b8:39:ea:c3:c0:45:cf:10:d9:ef:bf:c1:32:97:
         9b:60:49:54:b7:c8:1e:a2:61:09:a3:36:ca:03:6e:ae:96:74:
         31:10:b0:5a:8a:fb:63:e4:c4:c2:fc:fc:d9:ad:14:67:0a:62:
         8a:a2:ab:32:46:9e:5d:33:ee:58:2e:84:0b:a8:45:42:6b:56:
         5e:2a:cf:2d:54:56:9c:07:50:7c:be:3b:34:8f:dc:ef:65:45:
         a0:10:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:32 2026 by rpki-client