Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          WdHVc4BT9uKSx8CeMmInAe3kcNbH498qcqfH6F2buFs=
Subject key identifier:   08:6C:D4:70:89:85:48:58:FA:21:48:9C:7E:F0:AB:5F:B4:28:96:1B
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019FA9756E8D042C9296409B1C61EDC44DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          07DB
Signing time:             Tue 28 Jul 2026 16:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:12 +0000
Files and hashes:         1: L0vpPIy9GAPm6JtjRB5DBUq_p0c.roa (hash: EcWoApG1dXP+QttkNlbBQ/q//CNUzWl0bsqOIr50D2I=)
                          2: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          3: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          4: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          5: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          6: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: jpkcT/GGE7tNqPK4ajLofkRU1avZ28HSTW3gbuYxW5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:6e:8d:04:2c:92:96:40:9b:1c:61:ed:c4:4d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Jul 28 16:01:12 2026 GMT
            Not After : Jul 29 16:01:12 2026 GMT
        Subject: CN=086cd47089854858fa21489c7ef0ab5fb428961b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:bd:52:60:07:eb:f9:9c:49:92:25:df:ae:
                    ca:7a:b9:1b:f7:33:2c:bc:93:74:23:dd:15:80:de:
                    aa:e5:00:19:bc:cd:7c:85:c9:7e:92:37:84:47:a0:
                    70:ef:32:6e:8b:c1:aa:de:14:75:85:fe:20:4f:1d:
                    6e:51:22:a1:51:fe:ed:8b:8f:a5:35:ca:c7:40:1f:
                    ab:3f:82:0e:c9:d3:bc:28:a6:f5:6b:6b:ba:a1:86:
                    8c:2f:11:7d:e9:9f:c7:56:a8:a8:62:92:83:1e:02:
                    51:76:67:dc:db:e0:af:39:c8:a5:44:fd:47:4e:83:
                    61:db:32:4e:5e:68:aa:86:db:87:ae:fb:73:83:06:
                    e5:b9:74:52:6d:17:13:50:b6:77:8f:7b:3b:97:8f:
                    7e:b5:33:73:8b:d5:c4:3b:61:9f:f6:69:2d:eb:01:
                    4a:84:73:74:e5:15:5f:ed:3b:0a:83:19:f8:5e:55:
                    3e:4e:19:b3:3d:c4:cc:56:8c:33:b6:71:9f:1b:5a:
                    3f:4a:9d:ca:00:58:1b:cd:7f:26:b5:d3:82:17:a5:
                    48:7e:b2:7f:f3:bc:41:5b:eb:ec:b1:0f:be:05:95:
                    6b:3c:88:73:50:cf:50:cc:d4:22:ef:00:01:f8:fd:
                    d7:e0:e2:32:63:47:78:9b:da:72:e0:aa:3b:b3:23:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:D4:70:89:85:48:58:FA:21:48:9C:7E:F0:AB:5F:B4:28:96:1B
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:23:46:a8:14:08:18:0e:41:f6:b9:3b:f7:e0:b5:fe:03:e2:
         dc:04:b4:cf:f9:84:69:1e:d7:5d:61:38:72:f2:10:b4:6c:fb:
         56:29:c4:ed:44:cf:3f:ae:d6:fa:a8:e2:b7:19:34:ad:66:1d:
         e0:a1:c9:61:c8:bd:42:a9:82:1f:2d:54:63:44:a0:b8:6c:9b:
         a6:9b:7b:9b:fb:b6:4d:2c:2e:7d:22:01:26:d7:ed:c4:0a:ad:
         ce:31:ae:93:7e:f5:6c:82:39:c1:cf:c9:0b:90:0c:b4:76:2d:
         43:60:75:25:1c:50:93:5e:5a:2c:79:91:0b:05:54:7c:99:a5:
         93:27:d5:f1:2e:e2:eb:b1:e6:0e:04:ff:38:4b:d9:08:db:f6:
         0d:b5:d9:1b:99:4f:0a:cb:46:3e:24:55:d9:d3:7d:ff:47:dc:
         23:f3:7d:1e:e0:81:f3:a9:20:66:b8:82:6f:a9:76:49:af:f3:
         bb:9c:f1:ed:66:48:32:29:90:ca:7a:1b:9d:0e:f7:ec:c3:b6:
         d4:ca:69:11:9b:93:8e:6b:fa:2c:89:81:67:7e:3b:40:12:60:
         6c:6a:0e:2a:6f:7d:67:67:e9:30:f1:5d:6f:70:9e:bf:9d:20:
         63:24:52:a5:2e:6d:46:4f:4b:33:10:02:95:52:26:bf:51:17:
         7c:b6:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:01 2026 by rpki-client