Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
File:                     CWjayzRLTY31SqN4ZT9xsL8g2l4.mft (raw, json)
Hash identifier:          mocBpVywSle2MIsaNPkKuWXwe6hMogoVg+cFmWNIcRM=
Subject key identifier:   AC:5B:4A:9C:6B:57:0C:4B:E3:E8:3B:37:98:9C:22:B3:7D:7F:71:87
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Certificate issuer:       /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial:       019FAC770942A8924FCB2322C8C277590790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:49 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:49 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:49 +0000
Files and hashes:         1: 1-xhLo3rBqSzMfxZ6-dFpNc1K-1s.roa (hash: LihR1HIwAQbrQbXQbPoW+Yyclv5FEy13WokvKT/AAR0=)
                          2: CWjayzRLTY31SqN4ZT9xsL8g2l4.crl (hash: REG3fE+9cUO3A0IDLiOx08VxFvlvmlJjgbPat3EOzX4=)
                          3: YiurtmEVnKJWoMXP_xjKmjxmVoI.roa (hash: 4ukDIvZ14L+cMrpj8UGfHFDzDuRtwpZja3ebZIwrqB0=)
                          4: rxsOsAfQCfpnPygBJXkmNU9TrA0.roa (hash: BzGan6UkCmSqoT0RpnvMGKr4jj9Z7q6ZylCSqpz2CVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:09:42:a8:92:4f:cb:23:22:c8:c2:77:59:07:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
        Validity
            Not Before: Jul 29 06:01:49 2026 GMT
            Not After : Jul 30 06:01:49 2026 GMT
        Subject: CN=ac5b4a9c6b570c4be3e83b37989c22b37d7f7187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:88:01:f3:fa:de:df:d1:25:3b:e7:ad:1c:
                    59:90:1e:2b:a0:76:5e:9b:af:d7:1b:49:7e:d8:fc:
                    bf:1a:43:c5:d1:c9:31:b8:cf:f8:2d:71:31:d3:f2:
                    9d:6b:1e:d1:c9:8d:26:aa:ee:c1:fd:fb:4d:e5:4d:
                    29:04:df:48:7b:5e:00:2a:c3:65:45:c4:3b:88:ca:
                    01:db:1d:36:37:fc:77:a2:88:0e:0f:96:cb:6a:0d:
                    bb:ea:af:2a:63:14:b2:c2:c0:84:11:e7:ea:ad:25:
                    5b:e6:a5:fa:35:76:cb:4e:e8:75:67:64:c5:fa:e7:
                    16:58:95:c5:b5:2d:22:3a:b9:56:1a:96:9b:2b:d9:
                    19:43:2d:9c:d3:b4:38:c8:72:6c:89:cc:05:46:d4:
                    26:3a:24:7b:db:c7:c3:65:1c:6e:86:cd:c1:aa:2e:
                    4b:5b:10:db:41:0b:7d:c4:04:15:7d:47:fc:61:09:
                    3b:7c:66:e2:27:19:c2:ee:ff:8e:81:95:fa:28:3d:
                    c8:e2:45:5b:d5:14:3d:45:c2:c2:87:b6:73:7a:00:
                    45:b2:cf:a9:bf:45:91:b9:41:8b:e9:19:d2:37:6a:
                    44:60:db:1c:9f:eb:6e:67:df:bf:6a:7a:cb:f9:97:
                    4a:11:c7:35:55:c5:51:ed:b3:a3:be:4b:8e:33:f4:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5B:4A:9C:6B:57:0C:4B:E3:E8:3B:37:98:9C:22:B3:7D:7F:71:87
            X509v3 Authority Key Identifier:
                keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:b5:6f:36:d4:bf:cd:d5:70:c6:3e:9b:49:72:14:4a:a3:
         6a:01:35:bd:83:ee:0d:a8:7f:d7:a3:49:86:b0:85:2b:5f:c7:
         69:45:7b:4b:4b:84:9b:9a:5d:e6:62:32:a1:63:a3:89:8b:ee:
         ee:f3:32:57:74:2f:e9:6b:20:89:31:10:30:56:47:41:e8:70:
         9d:b8:43:c7:c3:6d:71:b9:39:dc:f8:24:cc:2c:77:97:fd:39:
         f2:50:d3:22:ae:ca:c4:7b:06:97:2a:8d:b1:c6:a7:05:d4:50:
         05:39:b0:a3:2b:05:ba:e4:5a:52:01:ab:4d:91:f8:a9:21:a6:
         45:fc:02:95:7e:5b:d0:75:c4:e5:ef:96:3a:47:5f:26:10:34:
         3e:f1:19:c5:ea:da:4c:af:9d:4f:a4:b2:ab:83:f7:24:07:51:
         9a:e5:c6:7f:0a:6f:af:f2:2b:cb:1a:04:af:12:2c:22:62:56:
         fa:c4:53:b6:68:f2:6f:f3:70:ea:fd:94:be:07:22:91:85:9c:
         ff:57:74:7f:99:62:99:11:27:4e:05:1a:df:d8:09:e4:62:ac:
         c8:68:05:e4:b6:50:a4:ac:93:3b:b8:c0:cf:f0:b7:82:5e:35:
         0f:64:fa:78:3a:29:10:15:20:54:a5:f4:14:70:26:d9:64:88:
         b9:4b:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:23 2026 by rpki-client