Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
File:                     WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft (raw, json)
Hash identifier:          xyRtsyopw4fJ99CHC2xrPSidi3GixplxB2p+FrYntoo=
Subject key identifier:   6F:4A:E4:E4:61:B9:EB:8F:57:CB:30:9A:64:C2:19:C7:FB:F1:2A:2B
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Certificate issuer:       /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial:       01A0C66A2D26BE590963A8E6312FE8E15353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:00:42 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:42 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:42 +0000
Files and hashes:         1: 8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa (hash: UTaNMd3CEd0lWrDH+fieqbIVnu1cLWotgckfZ6yVE20=)
                          2: WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl (hash: UsLHax4PFKNrDtnlXfu5XK96iqK9/1+JS1TLNXCYy64=)
                          3: _5WF2PQCdHfSB17pJupjN-FIiNc.roa (hash: Ya29FAa0OUkvMPvOrcq7snCU9GLA5RS5i5UVH+eGNFE=)
                          4: s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa (hash: IH63TUzfzMb/SQxlsB7kB/bwWUNTCvlV00UxXhSJjuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:2d:26:be:59:09:63:a8:e6:31:2f:e8:e1:53:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
        Validity
            Not Before: Sep 22 00:00:42 2026 GMT
            Not After : Sep 23 00:00:42 2026 GMT
        Subject: CN=6f4ae4e461b9eb8f57cb309a64c219c7fbf12a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:82:4a:1f:57:a8:47:5f:b8:22:b3:70:31:
                    39:2f:0d:62:b2:34:52:40:bc:c5:a3:c4:0a:80:fd:
                    3d:92:87:eb:8b:d5:89:d8:9b:2b:ea:a4:5f:e7:0d:
                    83:a6:5c:c4:97:69:f8:45:3d:e3:bd:dc:dc:de:5b:
                    03:1f:13:83:2d:16:c1:6c:31:54:61:e7:8a:c6:ce:
                    be:2b:be:62:a5:33:34:e2:07:29:39:fd:e4:6a:38:
                    f3:49:bb:9d:be:4b:0c:15:99:37:8b:7f:ef:99:45:
                    30:37:ad:01:dd:68:d3:aa:c5:38:86:03:49:69:24:
                    e4:c0:f1:90:c0:d3:67:33:4a:59:1a:62:31:d8:78:
                    d2:c7:d7:22:d0:1d:64:61:76:bd:26:a1:45:61:d4:
                    0e:40:1c:ce:41:ca:4d:43:42:07:7f:a1:69:09:78:
                    57:88:b8:d8:64:5e:6c:47:db:2d:d5:07:59:3c:16:
                    7f:62:34:53:4a:08:57:64:27:94:a9:31:8d:c8:40:
                    09:31:71:a2:e5:31:6c:8b:3b:5e:ce:1b:55:62:a9:
                    aa:b7:37:8b:8b:b3:f2:32:e9:29:70:c9:e8:d8:a0:
                    a7:76:2b:23:3e:d2:05:a6:dd:a7:19:55:ec:d5:76:
                    a3:02:52:28:03:03:bd:c4:8a:30:5f:cd:43:2a:a9:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:E4:E4:61:B9:EB:8F:57:CB:30:9A:64:C2:19:C7:FB:F1:2A:2B
            X509v3 Authority Key Identifier:
                keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:60:83:4c:22:8e:f7:2d:5f:42:00:6a:8b:13:9b:92:d8:
         a7:e3:a6:3e:f2:99:a0:af:d6:9c:a4:de:d6:c3:2a:69:91:05:
         f7:2c:51:d8:b2:89:8d:bb:ca:a8:4c:b6:89:7b:61:93:67:86:
         dd:e4:c7:57:67:6c:7b:79:ee:d5:bb:6a:a7:17:75:b8:4a:e5:
         27:4d:87:f6:42:53:3b:1d:24:d4:7f:f9:fb:8c:2a:14:df:a7:
         79:16:61:4b:f2:b1:11:ed:ec:5f:62:6e:eb:98:91:6a:a5:91:
         18:97:d4:92:5d:2c:49:fa:0e:14:14:ef:6b:9f:76:91:06:85:
         7a:e4:d8:37:33:72:7d:09:37:df:92:7a:fc:9d:11:20:e5:9f:
         0d:d1:c9:df:4e:ec:99:27:22:27:0d:d8:6c:63:d2:a0:f5:e4:
         e7:1b:05:fe:c8:f9:88:34:b1:9a:98:94:70:cc:d3:7b:aa:b8:
         c6:d4:3b:67:09:bc:57:35:43:b3:a8:a4:c4:cf:fb:47:12:50:
         82:96:52:53:28:9a:db:f4:6a:0a:56:2b:b1:b5:b1:a4:6e:ae:
         37:74:12:d9:f8:43:86:cb:66:f7:ca:6a:e7:2a:4c:ee:df:48:
         52:7c:a7:f1:b9:53:3a:44:5f:54:b8:60:17:50:9b:86:54:b5:
         31:01:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:42:59 2026 by rpki-client