Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File:                     wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier:          5XM+hq3oDbN8PnlxA1V6eU/RdMxWE/8j5cZ5C+tGc3U=
Subject key identifier:   FB:8F:8D:10:F4:9B:1C:CF:B6:ED:7E:BD:E4:F4:F8:B7:67:27:AB:E7
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019EC03676BE691123668F4A4F63C7177A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number:          0E12
Signing time:             Sat 13 Jun 2026 09:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:55 +0000
Files and hashes:         1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=)
                          2: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=)
                          3: 5ICsFrquvX49HjEzOQU7S93GVkQ.roa (hash: dNzwPe5ZKIgncVs1sWSuSbTrhXj7p0vAUSyPZCigSn0=)
                          4: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=)
                          5: 8lPw_ga_FoSSpmboRwfajYdx-go.roa (hash: JloEp5W3jYXSF6n1lKX3TTBhUm7QwMzhp+1X0sR8wMg=)
                          6: 9RXrdD1qJMf_8xNn3HnZaLopyak.roa (hash: KfZruuWMflD9yqrnDRJtXO3IL4kig+hFeQaQ1JiQO/w=)
                          7: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=)
                          8: M1q9NGALl_5zWyIsBUUB6ElwUw0.roa (hash: P6viUgEvhrKdeTf5i8KPv7U8+f6vJ2sUgXvC3nzTpOU=)
                          9: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=)
                          10: V42io8cq8zQKQdPK66TLWyxMvQo.roa (hash: 7zu2S4XiIMWZaxqY+pP0AdKwRrR3cESyJ4NVWsEAG0Y=)
                          11: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (hash: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8=)
                          12: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=)
                          13: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=)
                          14: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=)
                          15: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=)
                          16: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: dl0BxyAMVXu445rV2H6IQoOc5s/6ktcbVenLahfktls=)
                          17: y5E7xH2oBenvjr2Fyw8V03Q0FEo.roa (hash: SoIINjgYLbI2mAwDLnhQS6K4Jz5ozkLCQLksrjcHRIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:76:be:69:11:23:66:8f:4a:4f:63:c7:17:7a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jun 13 09:00:55 2026 GMT
            Not After : Jun 14 09:00:55 2026 GMT
        Subject: CN=fb8f8d10f49b1ccfb6ed7ebde4f4f8b76727abe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:90:90:9b:65:9e:ae:23:c6:5c:ac:2a:cb:
                    68:85:79:8f:bc:08:90:ee:4d:20:f4:9f:51:26:aa:
                    d7:46:b0:5e:aa:33:fa:c5:ca:10:70:5d:d9:db:0c:
                    82:e2:fa:17:85:2e:4d:6a:39:ec:14:bd:95:50:85:
                    fc:b0:79:e5:e3:ce:31:89:bc:cb:b9:bf:7b:c9:12:
                    fe:cb:3e:3a:f9:12:47:25:41:e7:eb:97:77:d4:fe:
                    03:c9:92:6a:2b:bf:2f:6a:f9:4e:5c:59:a2:b8:43:
                    af:16:d0:6b:0f:29:f0:cd:3b:9f:46:fc:1e:c8:40:
                    77:2e:69:bd:bf:6e:eb:8a:aa:f3:cb:86:39:63:50:
                    2e:08:44:e9:52:40:fe:45:8b:03:4d:57:5d:2c:66:
                    ee:0a:83:69:47:0e:d7:00:18:bb:b8:33:65:d4:60:
                    64:f7:c9:29:a0:35:27:ed:e9:6f:77:cd:61:bf:a0:
                    c6:d1:68:85:c5:90:67:a1:45:ab:e3:57:80:2e:24:
                    40:71:09:a3:6f:4e:e3:a7:f2:52:e9:70:b4:1f:df:
                    9c:9c:b7:1f:9e:e2:df:4c:8f:91:3c:ba:6e:d8:e4:
                    29:d6:1b:7a:f4:5a:5a:97:ae:55:c7:74:1c:f0:d2:
                    67:ca:7c:1f:c0:c2:53:87:69:ea:96:35:8b:6b:c6:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8F:8D:10:F4:9B:1C:CF:B6:ED:7E:BD:E4:F4:F8:B7:67:27:AB:E7
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:90:1e:e4:d6:fd:ea:92:23:10:9b:07:09:a0:11:c3:3b:5f:
         1d:6f:d7:a1:c2:b2:3a:5b:6c:3b:8f:f4:0c:4d:22:7c:6b:55:
         fd:94:85:a4:51:a9:82:42:ee:ad:c4:9a:62:d4:7c:1a:0e:a3:
         d3:69:15:90:05:73:44:df:aa:24:6d:2d:fc:51:54:ca:67:23:
         04:4f:be:f9:e2:bb:b9:9b:01:9a:21:70:bd:b4:8a:66:13:fb:
         6d:48:5c:cd:cb:06:ad:c8:94:43:3f:d0:87:9d:e7:f1:8d:ad:
         f7:3c:4e:1d:82:95:2b:5e:3c:86:94:86:3e:9f:38:ff:a7:6a:
         30:50:fa:64:83:9f:b6:d5:d6:c4:29:54:48:e9:bb:06:c9:18:
         5c:12:47:b7:c7:31:69:28:ea:98:1e:6f:de:e3:49:40:48:00:
         8f:ec:68:e4:72:3c:80:20:ed:e0:4b:1c:7b:4a:8c:ae:0a:c2:
         f7:32:2d:25:b5:19:58:2d:e1:39:9b:a5:ce:5b:88:ad:4d:17:
         65:94:ef:0b:f4:83:1a:a6:5d:42:83:06:8f:bf:6b:c2:7b:89:
         38:ba:9d:28:6b:e3:55:45:0b:f8:ae:15:09:67:24:fc:d0:b7:
         ff:28:89:c4:02:ac:25:f7:f4:2e:ae:37:39:2d:2d:8a:a4:20:
         fe:dc:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:00 2026 by rpki-client