Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File:                     rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier:          lLs78ZQWnt2M6/SGLWF65FFpsI/1JcH1zcl9tSIlZyc=
Subject key identifier:   84:C2:F7:45:5C:AC:3D:08:8F:C2:87:E3:62:D6:19:27:67:36:20:DA
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer:       /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial:       019ED5755B39E2C1032F554A26CBFCC8B912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number:          082E
Signing time:             Wed 17 Jun 2026 12:01:38 +0000
Manifest this update:     Wed 17 Jun 2026 12:01:38 +0000
Manifest next update:     Thu 18 Jun 2026 12:01:38 +0000
Files and hashes:         1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
                          2: PfsR9OcnQ4S_HWSHexwSv7eZV3U.roa (hash: L9T3aJ5Whx4/WHc/mYYWTiVL3q32wwganw2KXtvSvcc=)
                          3: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: NSIVsmc+Awy43XPEApiQVL6Nuf1PLXNhb+jD8f3yV3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:75:5b:39:e2:c1:03:2f:55:4a:26:cb:fc:c8:b9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
        Validity
            Not Before: Jun 17 12:01:38 2026 GMT
            Not After : Jun 18 12:01:38 2026 GMT
        Subject: CN=84c2f7455cac3d088fc287e362d61927673620da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:75:b9:a5:1b:dc:2b:cf:ec:09:24:27:78:
                    48:1d:bd:02:3f:21:da:6a:d2:d6:4f:62:16:d4:53:
                    41:df:4b:e0:6a:71:08:d7:63:ef:91:18:f2:d3:29:
                    b9:a8:d8:1a:69:e2:b9:af:5d:d2:e2:e5:65:10:c4:
                    20:2b:d7:2b:88:b3:63:34:65:eb:59:c6:8f:89:d2:
                    8b:77:eb:d5:36:9e:75:3a:9d:1f:15:db:32:58:f9:
                    16:7d:03:85:c2:2c:fd:bc:f0:7b:bf:b8:93:4a:e0:
                    30:31:13:ec:2a:20:c2:3b:4c:91:ff:5f:a7:29:e8:
                    f3:26:48:92:03:fb:f9:6a:6a:d4:00:99:98:af:15:
                    bc:9e:f8:20:8e:8d:69:85:10:f1:a0:0c:06:45:88:
                    5a:93:b5:97:ba:45:2a:40:d0:f6:44:eb:09:37:43:
                    8d:c1:0b:0e:a7:39:6f:96:4a:92:30:8d:81:36:54:
                    36:49:e8:57:38:04:59:aa:cf:3c:8a:4d:fa:3f:fe:
                    c3:0e:2d:15:e3:b8:1a:73:00:c6:63:8c:3f:f3:3a:
                    18:21:12:f1:e9:50:31:1f:44:ba:f6:bb:fc:12:5d:
                    a4:b4:0c:aa:81:79:05:a5:fc:7f:42:39:27:52:30:
                    76:d5:e2:16:96:5c:e1:61:b4:aa:5d:98:2c:7c:14:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C2:F7:45:5C:AC:3D:08:8F:C2:87:E3:62:D6:19:27:67:36:20:DA
            X509v3 Authority Key Identifier:
                keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:3a:af:37:86:1c:9a:94:ab:c3:d5:8f:48:e5:8e:be:14:
         30:c5:1f:0d:d9:8d:79:70:2d:82:ce:09:67:40:37:86:80:6d:
         1b:bc:d2:7e:1e:79:2e:ac:99:c6:8f:c4:90:a9:d9:76:23:f1:
         ee:b3:53:b0:22:95:b2:86:c9:94:28:43:ca:7a:57:29:ff:f4:
         93:f6:4c:a6:ee:35:9b:e8:54:5e:2e:48:e8:46:fa:89:e5:10:
         26:5c:41:05:65:5e:66:1b:ea:05:0e:52:d5:6c:69:ae:7d:81:
         7d:bf:b9:67:08:b7:f7:7f:e0:5f:b3:38:f6:1a:58:06:5b:c3:
         a1:52:43:26:cc:05:d0:46:cf:46:91:88:63:f4:25:f0:e1:e4:
         5f:c6:e9:74:da:d3:7a:9e:69:33:1f:96:68:d2:16:a8:56:19:
         27:c1:13:de:33:8a:ff:bf:76:40:53:cb:ef:1f:3d:33:53:f3:
         da:90:55:82:f9:16:6f:be:05:e8:ff:27:ed:5d:fc:ed:c5:89:
         45:c7:86:47:d3:8c:41:68:61:2c:dc:41:9c:e2:49:d8:ef:70:
         4e:47:a7:15:1a:bd:b6:03:d9:de:a3:45:37:66:0c:88:f8:12:
         45:d9:c0:70:d3:b1:d0:28:38:24:3a:1b:f9:ac:3e:e0:5a:95:
         58:c1:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:38:35 2026 by rpki-client