Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          qG4LVFhWJAdiMsj+7j3QdCqpFCrciZFlVMGJ4+qFsZg=
Subject key identifier:   EC:79:F5:20:24:CB:3B:A6:A4:7C:B9:E0:E2:30:F0:7B:DD:1B:5F:1A
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       019EC2923C49B7C634380FA66AF64895539F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          07EC
Signing time:             Sat 13 Jun 2026 20:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:24 +0000
Files and hashes:         1: KGrdlGc_X6Hki0LeSOU3SUEjdJY.roa (hash: xgbr933ze/YCtvnJPl14XndSL5VHe/+W5p0SIc3yhsI=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: wMiY2rF9xNwKghSUQwlBIgR1lFL5LYh7fKPL8x4Bo4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:3c:49:b7:c6:34:38:0f:a6:6a:f6:48:95:53:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Jun 13 20:00:24 2026 GMT
            Not After : Jun 14 20:00:24 2026 GMT
        Subject: CN=ec79f52024cb3ba6a47cb9e0e230f07bdd1b5f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:c4:19:df:b4:68:b5:7b:30:e7:1e:1e:f9:
                    a1:67:f5:5a:fe:fc:e5:3a:ab:41:ee:f1:75:d0:55:
                    6e:d3:6a:f9:51:9d:49:c8:e5:82:0c:39:72:e6:86:
                    0a:33:9a:4d:a4:33:5b:be:79:b7:50:11:3a:de:de:
                    ba:58:26:4a:2d:a3:35:62:c5:ec:d4:9f:db:e7:69:
                    38:aa:eb:09:2b:d9:e9:27:b0:f8:15:19:91:42:d9:
                    bf:e6:90:ab:00:db:75:80:74:cc:ec:70:ef:e4:e6:
                    f6:f3:41:aa:9b:9a:4e:17:45:2d:1f:16:39:ae:dc:
                    cf:16:f1:bb:e0:03:85:29:e3:8e:6f:01:47:4e:b8:
                    23:a4:8e:6a:c5:de:f7:a6:34:13:d7:0c:db:1d:d8:
                    da:ed:75:63:36:32:60:50:ce:9b:ef:07:66:35:59:
                    78:cd:66:5e:7d:2a:ef:84:14:79:40:35:59:66:02:
                    30:a5:35:d4:f1:05:14:a4:ad:7b:62:89:e8:a4:35:
                    ed:2a:c2:9d:b0:12:46:2a:6a:9d:5f:57:15:7d:b3:
                    70:c0:1c:a8:2b:59:fb:fa:a5:70:c6:4c:67:8e:d0:
                    52:b3:88:ea:b1:bd:8c:8a:70:fa:da:af:51:4c:0f:
                    dc:53:d9:8d:d3:cb:86:63:e8:d7:5d:ba:0d:20:0b:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:F5:20:24:CB:3B:A6:A4:7C:B9:E0:E2:30:F0:7B:DD:1B:5F:1A
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:a8:ab:4f:ae:15:be:1c:5c:69:8b:91:e9:b3:f6:38:d1:
         e1:36:e9:33:e4:5d:e4:96:b3:e3:cc:d2:08:b1:00:2b:f3:95:
         e5:2d:91:9e:57:ca:a0:28:e9:79:22:77:14:a0:e9:8b:ac:2c:
         0a:16:2d:1c:fe:43:ad:01:cf:17:1d:ae:3a:40:a4:de:a0:a0:
         2e:ee:c4:89:8b:14:75:af:1f:49:9f:3f:a1:a3:eb:71:93:07:
         9b:e7:60:b9:36:ae:41:16:9b:d7:ef:ad:3d:b7:36:b1:d6:b1:
         43:12:fa:8e:49:d3:59:50:0b:1d:6f:fc:38:c6:10:34:09:01:
         8a:6e:56:52:ad:51:1a:9e:64:56:72:31:6b:a7:54:a3:c4:32:
         db:e7:b6:5d:7e:91:a2:cc:4b:99:f7:68:f1:46:af:c8:e1:06:
         d8:2f:75:ba:db:bf:b1:c4:d0:5e:0e:51:95:3e:dc:98:a7:e8:
         9c:e6:54:4f:7c:e0:b1:4d:35:c2:fa:f3:b5:54:ea:0e:16:be:
         5d:bd:da:ca:61:51:d5:64:0b:a8:90:f2:46:b4:c1:7b:5d:ac:
         23:0b:1b:c0:17:65:51:85:d8:07:ab:4b:74:30:ba:c2:7e:82:
         a3:e6:6b:f6:e8:8d:5f:3f:d6:58:73:a5:27:c0:c6:84:5f:d3:
         90:af:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:22 2026 by rpki-client