Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          KsAcWs/KD+0nnne3Hf+gz56YebdVMgqHc/I5OGSY2Sw=
Subject key identifier:   3F:54:79:B4:85:8A:EB:69:9B:2B:51:AD:1B:16:28:10:D2:37:C4:30
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       019EC22478FB5EC7BC66283265569AE8EEE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 18:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:30 +0000
Files and hashes:         1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=)
                          2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=)
                          3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=)
                          4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=)
                          5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: xYj94V+lJ1cd/wVBvMFHRHWhw7ZuNn1r2rwx5+TI9Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:78:fb:5e:c7:bc:66:28:32:65:56:9a:e8:ee:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Jun 13 18:00:30 2026 GMT
            Not After : Jun 14 18:00:30 2026 GMT
        Subject: CN=3f5479b4858aeb699b2b51ad1b162810d237c430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:a7:f3:2a:f2:93:44:7d:26:42:e0:ef:5e:
                    05:8b:9b:3d:c8:bf:a1:75:ef:7e:2e:56:59:d6:f7:
                    77:ec:99:76:fe:0e:ac:71:73:82:67:9a:8e:37:32:
                    50:1d:71:b8:22:f5:3e:59:13:6a:b0:d2:df:c0:93:
                    05:7a:0a:34:80:4a:e1:e7:a2:b8:36:ae:c2:6f:2f:
                    ae:c3:83:4e:00:84:89:30:d5:95:f8:50:44:c7:ae:
                    ff:02:29:3b:ad:91:2f:01:cc:1a:6d:43:b6:62:a8:
                    53:da:3a:56:64:19:5d:65:57:35:7a:0f:d7:bb:06:
                    a2:1b:52:6c:10:6a:db:8e:ed:1e:78:55:e8:39:2d:
                    37:0d:13:bf:c1:ec:3d:9c:3d:d1:b9:52:31:88:75:
                    38:7c:9e:e9:86:a2:45:ce:6d:34:1e:90:55:19:ae:
                    21:ca:f5:ca:2a:42:2b:cd:8e:2f:79:09:9e:c3:52:
                    8b:b7:f1:c2:b0:28:b5:bf:6d:b3:f0:70:38:c9:e9:
                    99:6e:1f:39:8b:58:51:3a:62:05:f7:c1:0a:77:75:
                    32:f7:5e:d3:85:9e:62:29:32:72:da:0c:d1:d6:c8:
                    48:a8:ec:99:0f:c3:b4:b0:64:1d:2d:54:be:02:b8:
                    44:6b:1d:6a:3b:74:23:22:ca:71:5f:9e:3a:e1:01:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:79:B4:85:8A:EB:69:9B:2B:51:AD:1B:16:28:10:D2:37:C4:30
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:e3:e5:17:44:77:2f:91:f5:32:55:1a:36:ec:ff:3b:5a:
         d1:20:48:46:4f:dd:8b:1a:1e:94:84:5f:81:1f:a1:df:e3:aa:
         eb:65:98:88:0f:8f:d7:da:00:84:47:62:17:0f:91:9e:50:79:
         dd:1f:79:27:0c:80:96:bf:0d:7a:3c:17:81:e1:6b:62:a1:14:
         53:bf:f0:d5:09:84:50:d9:e7:a4:61:b1:c8:96:ff:14:83:e5:
         53:4a:1e:f2:13:1b:10:2a:f0:ad:fe:9f:de:44:8c:bd:c7:ad:
         b7:29:0e:9a:77:25:af:49:53:63:af:8a:02:d2:cc:ee:c6:a1:
         2c:29:7e:82:a8:f4:b7:07:f8:4a:d6:d1:32:4a:97:53:44:f9:
         66:90:6c:e8:6e:12:c0:0a:94:37:a8:44:a6:4c:46:c0:61:42:
         99:48:1f:91:4d:36:8c:1c:37:54:8d:2b:dd:f5:b2:38:f0:7e:
         fa:ba:19:0a:36:57:d0:df:ec:6b:01:5e:74:85:25:55:11:51:
         f6:b1:4c:2f:11:4e:04:2e:62:8a:16:a1:27:b5:3f:38:6a:08:
         75:93:9c:83:20:44:d6:50:25:b3:ff:32:36:27:34:ff:07:79:
         b2:8b:48:52:8d:76:8d:d7:47:2d:9c:fc:e0:48:13:b7:1f:75:
         db:15:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:50 2026 by rpki-client