Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
File:                     wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json)
Hash identifier:          L1JTf+gXvd4goXb441VjX5II8JGnmqlWrSp+6tkp7Z4=
Subject key identifier:   88:EC:FE:D9:92:D9:35:AD:6B:75:18:FB:2E:14:14:CB:DE:D1:FE:B5
Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
Certificate issuer:       /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Certificate serial:       019EC17F8FAE37BB11F05E5EC6BF9BE4D8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
Manifest number:          01E0
Signing time:             Sat 13 Jun 2026 15:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:22 +0000
Files and hashes:         1: pwR2uuhLQb704CaTl-JhUr6tQUw.roa (hash: WST6jplxdqOcMqOOJtSBgG40d9NpmMZJxxHB0hC7zBU=)
                          2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: Kyj3mX5PI32RXsHUmxE43n6Kqqt0NoJyBd+NIlEPB0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:8f:ae:37:bb:11:f0:5e:5e:c6:bf:9b:e4:d8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
        Validity
            Not Before: Jun 13 15:00:22 2026 GMT
            Not After : Jun 14 15:00:22 2026 GMT
        Subject: CN=88ecfed992d935ad6b7518fb2e1414cbded1feb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:c2:c6:de:f6:e0:cd:96:14:c5:ff:2f:03:
                    09:ee:e4:4c:99:65:bc:b4:f4:b6:bf:29:65:39:aa:
                    b5:21:3a:00:20:b8:88:9a:3e:a2:ca:50:84:83:51:
                    61:bf:82:40:31:4a:cd:1a:95:f5:7d:22:c3:88:1c:
                    a6:c4:41:03:0c:65:7b:f0:a0:99:87:31:a1:c8:e2:
                    0d:9b:1f:a3:63:02:d4:87:90:cf:09:9c:91:e6:db:
                    5f:9e:9d:9e:c3:f2:e3:b5:97:47:00:1c:3c:cb:55:
                    0d:05:0b:77:53:a5:f0:46:74:62:06:5a:c8:44:d6:
                    9b:a0:f6:dc:73:42:76:69:ab:d9:de:c7:ed:0b:58:
                    25:aa:e4:1b:db:06:cf:73:cf:c6:d2:61:2a:a7:3d:
                    6e:18:0a:a6:1a:79:1d:08:47:74:94:4c:92:87:4b:
                    76:47:2c:0e:60:cf:62:b2:c6:9c:cc:50:22:fd:1f:
                    24:5b:23:a7:51:f4:bd:a3:e1:65:d8:d5:8e:24:27:
                    22:6f:63:34:03:02:59:47:8c:03:dc:d2:d3:4d:a6:
                    17:2d:b0:32:d9:6d:ff:bd:ae:fe:82:f5:fb:6e:37:
                    b7:cc:79:e2:8b:7b:3d:25:91:c6:2d:99:c5:7f:0b:
                    60:16:6f:01:d9:9f:29:d1:72:0e:33:87:e8:92:52:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EC:FE:D9:92:D9:35:AD:6B:75:18:FB:2E:14:14:CB:DE:D1:FE:B5
            X509v3 Authority Key Identifier:
                keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:45:fb:13:b7:cc:23:c2:3d:b0:67:6e:87:59:c0:74:0b:26:
         44:37:8a:b8:ba:91:d3:64:3a:12:7d:e4:12:0b:71:dc:46:01:
         cf:86:f3:59:12:20:15:67:86:0d:0e:3a:91:29:40:f7:68:c7:
         63:78:89:70:bd:93:3b:f5:3d:83:f8:f3:24:81:95:9e:6a:6f:
         bd:d3:a3:1e:c1:c0:92:a2:41:f9:bc:d3:d0:7e:8f:5d:73:84:
         a5:e5:91:fc:3d:b0:c9:96:a9:73:0f:23:1a:a7:e6:76:99:8c:
         b3:43:82:f2:42:6f:4c:22:8f:5d:cb:d1:ce:98:36:76:84:f4:
         26:68:59:1d:ab:81:37:31:2c:f4:57:ce:0c:f9:49:85:4e:b2:
         00:c4:c6:ef:89:ed:17:62:1c:aa:bc:fb:f1:ba:a1:c5:da:58:
         02:9e:52:9e:e2:bb:75:15:35:91:99:f9:f3:77:2c:51:53:b9:
         80:ad:91:97:f4:30:a8:f0:07:91:d9:40:e4:84:e0:10:6d:c4:
         64:fe:ea:36:f3:46:25:5b:7d:53:82:b1:a8:b1:72:d0:34:d8:
         70:2e:2f:de:cb:70:53:88:e6:47:54:36:a9:58:8d:cb:06:8a:
         88:39:f9:c1:2c:09:c1:9c:59:c4:e9:5a:08:57:9a:63:dd:b2:
         52:5a:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:28 2026 by rpki-client