Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
File:                     wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft (raw, json)
Hash identifier:          cX3VEHmCjUB2yjtFugDtNk7/HZEP/zAPyhH57Y3lT6s=
Subject key identifier:   D9:CB:EB:D0:61:9D:DF:5F:76:D5:33:78:A9:D0:5E:FF:82:F0:E2:F3
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Certificate issuer:       /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial:       01A0C8FD65A574EBE6B9764CCF3F7C720FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 12:00:44 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:44 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:44 +0000
Files and hashes:         1: 6QZ4R2A_br-AcMpCIptaGsFZuKI.roa (hash: gZhODUJ4vU2+zNho/O0be2JHcSYu+xewzTmC2xtBHn8=)
                          2: E4duTqIaMUC_PH3sfa1zQAUEVFs.roa (hash: 9NCC7QMqphIaXml0T1PxuYd+QPPMSSE78/Qddy/z5U0=)
                          3: Es-P_bdxjcTCOpzJlBfusPdxWF8.roa (hash: 3Ormem72O/mCAM9pP5kCR7lMJ8Mol6CBrDFrWlq7SlQ=)
                          4: RBwtXgNp1Q4LCtej7liwA1uRHL8.roa (hash: jeL1xkGCboYpk4S8u1rJoAKAp1kQKkdexLIj48FRokw=)
                          5: wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl (hash: q79vagDHZLaV6JsclPMq2NdcXGcEE1IEnvGeFfpLTFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:65:a5:74:eb:e6:b9:76:4c:cf:3f:7c:72:0f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
        Validity
            Not Before: Sep 22 12:00:44 2026 GMT
            Not After : Sep 23 12:00:44 2026 GMT
        Subject: CN=d9cbebd0619ddf5f76d53378a9d05eff82f0e2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:50:50:e2:2f:24:e0:88:09:a2:ee:95:76:
                    a5:c7:6c:db:12:a1:45:2f:95:66:3a:58:b0:51:0e:
                    fe:71:69:c4:8f:d4:5d:ec:34:44:fd:aa:b5:27:3c:
                    c8:bc:d3:87:03:b4:eb:81:4a:33:31:84:80:ef:bd:
                    96:52:d9:ae:10:96:1b:80:bb:a1:aa:bf:6d:55:ef:
                    9c:48:48:83:b6:c1:d0:09:77:c4:31:e3:0e:ef:da:
                    3a:5a:fd:8c:5d:9d:ba:1e:ca:9c:fa:17:4b:45:bd:
                    85:6d:dc:36:da:46:60:36:61:b6:46:d1:90:fe:be:
                    d9:b6:ec:91:f3:25:91:ec:06:17:5f:3d:1f:c6:c7:
                    97:a1:b9:db:d8:d5:7b:7b:17:07:f8:96:fd:a0:af:
                    25:0b:20:4f:a7:bb:70:2f:0b:5d:b8:5b:22:59:c9:
                    6d:c5:d9:07:55:87:03:c3:fe:cb:d9:c4:f4:7e:a2:
                    bf:71:29:3d:be:23:80:d5:a0:9d:33:cf:7f:b4:d2:
                    0b:83:f6:f8:df:25:c0:b7:46:bc:17:46:58:0a:2f:
                    36:45:77:43:6c:29:3f:2c:c2:71:e4:fe:83:0b:d4:
                    d7:ad:06:eb:1f:d0:35:5d:3e:98:b3:a7:e1:34:7a:
                    7f:a0:ca:f8:2d:fc:a7:a8:f4:2a:57:55:e4:8f:d7:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CB:EB:D0:61:9D:DF:5F:76:D5:33:78:A9:D0:5E:FF:82:F0:E2:F3
            X509v3 Authority Key Identifier:
                keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:f1:07:fe:b2:6e:cc:5c:e1:68:cb:4d:95:68:49:47:cd:
         be:68:0a:69:a5:17:13:28:02:e9:46:cc:8e:7f:d5:91:b0:73:
         13:43:9f:73:3c:6a:1d:c5:4c:e0:4d:61:ed:6d:a0:bb:90:3c:
         3e:e7:f5:67:d1:c0:20:e8:fc:f5:05:e0:51:66:79:5f:53:51:
         19:db:27:31:06:df:df:db:ab:d0:fd:c3:f5:ff:22:76:da:09:
         d6:ba:b4:69:d3:ce:99:36:7b:c0:9b:74:b9:90:a1:23:62:bc:
         ad:e8:cb:73:31:d6:4c:b9:d7:0d:2b:7d:ae:a8:5d:b6:3f:fc:
         8e:e0:8d:d4:4b:df:72:42:35:d1:9c:24:f1:73:c4:70:3e:e0:
         6d:63:73:e2:83:60:d1:99:42:f5:f7:66:2d:f2:bd:f8:6f:ab:
         44:01:1d:26:13:4d:ea:1e:44:79:44:31:a8:84:48:f9:0d:64:
         0b:37:39:12:7a:82:59:11:43:22:13:40:32:10:91:da:2e:ab:
         f6:42:39:8c:55:bc:68:35:fa:5d:64:67:9e:6d:a6:7a:c2:6d:
         39:80:61:73:cd:bb:04:27:3b:e3:33:47:82:bc:c8:b0:42:8c:
         a9:fc:21:b5:2a:0c:88:b6:fd:dd:5d:fb:40:ee:04:c8:79:e0:
         c0:a3:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:30:32 2026 by rpki-client