Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          fepP8k6T0+mOdwqGm5D/KZvqUNeR+du1YE9PkiMW/KQ=
Subject key identifier:   41:E7:56:53:F7:CE:E3:60:89:40:24:DA:DA:58:86:B5:C9:88:E5:97
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       01A0BF8C0B397DE3BF06EAB8F13866057B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          1377
Signing time:             Sun 20 Sep 2026 16:00:21 +0000
Manifest this update:     Sun 20 Sep 2026 16:00:21 +0000
Manifest next update:     Mon 21 Sep 2026 16:00:21 +0000
Files and hashes:         1: 8XEzSk8CvDfLkSMnM2czmx_ulWg.roa (hash: 40hPE/BqPPQ7BBdeMCvpBaKM0QkTjFWRsFW8s0ufoAc=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: opTx0djRvbbTybGL4Zqw2yQ3bT+THSyJYqD5uL+elsQ=)
                          3: _Dc_bdIAZYdrEnNJICuszN__3rw.roa (hash: AzuIghqugc9hzzBm4Id+ZUX9fazI5NRXP0v6O6ZJMDc=)
                          4: kRwhJc9YP7PBT_VxjXqr6kKnSig.roa (hash: sdwxFkjlQepYKbUeVajivy+Ki1wWl6h3Im8+Blt6i98=)
                          5: t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa (hash: UydhtoR4+IQ54e3x5h5+w3ijtAQlUzFvVelsUAahRqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:8c:0b:39:7d:e3:bf:06:ea:b8:f1:38:66:05:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Sep 20 16:00:21 2026 GMT
            Not After : Sep 21 16:00:21 2026 GMT
        Subject: CN=41e75653f7cee360894024dada5886b5c988e597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:43:36:fe:dd:8f:68:a1:a8:37:f4:3d:d1:
                    1e:f4:68:4e:73:69:8a:be:1f:83:19:42:bd:0e:13:
                    c9:fe:19:33:b5:cb:7b:38:da:f1:d5:5c:93:65:56:
                    fc:9e:8e:34:91:7d:f1:50:d2:67:9c:e6:13:31:b0:
                    4c:3f:96:0a:18:e2:3e:ae:65:12:53:10:a5:1a:2b:
                    83:b4:af:79:f1:d2:fe:ed:da:0d:72:66:71:a3:a1:
                    80:84:c9:20:d8:e0:06:bb:1d:dc:1c:c9:f1:0f:1a:
                    a1:7b:cb:4e:a9:e0:31:fa:1d:60:4d:73:d7:3d:7d:
                    f4:fd:61:01:ec:a2:8b:6d:18:92:99:9e:ef:a5:a6:
                    ea:82:41:f0:dd:8b:48:70:e0:7a:86:ef:ab:cc:44:
                    59:c7:4f:88:df:b6:28:fe:92:e1:93:08:2f:b9:bd:
                    39:6c:5e:a7:33:c5:bc:b5:99:08:3c:70:fc:05:36:
                    6a:f6:f7:bf:bc:07:65:26:87:f0:87:03:ee:59:64:
                    9e:a0:76:9e:1f:ad:d3:3c:5f:de:e4:d7:02:cb:b9:
                    68:1b:f1:b5:9b:31:bf:ca:2e:82:3a:65:34:0f:9c:
                    3e:67:aa:68:b4:7b:21:67:24:ff:e8:42:1f:bf:89:
                    88:02:1d:aa:b6:ec:99:f6:fa:d9:45:46:dd:3c:b6:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:56:53:F7:CE:E3:60:89:40:24:DA:DA:58:86:B5:C9:88:E5:97
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:c6:24:c6:a8:6c:2c:a9:67:42:3d:44:51:96:55:51:2e:
         6a:1b:a6:98:64:1c:cb:c3:8a:38:2d:9c:0c:1c:b0:fc:91:8b:
         05:86:4d:b9:19:76:c4:24:38:a3:fe:80:8a:b0:73:ea:68:e8:
         52:38:c8:50:dd:6a:eb:11:2f:59:fd:52:bc:f8:a6:33:da:c2:
         5e:96:0c:2c:1e:e0:00:d2:f3:42:c9:6c:4a:35:94:60:51:c4:
         4d:37:c5:44:c1:0d:5e:57:cb:1f:76:3d:13:06:ac:e9:9b:14:
         c9:2d:55:f6:2a:bd:fd:47:4b:1a:59:56:fb:14:8f:dc:f9:3f:
         55:72:3d:de:ed:c1:13:bb:78:49:70:49:c2:61:28:fc:75:1e:
         57:0f:ba:db:17:7d:22:48:d2:23:fc:1b:a6:66:f0:8a:e2:9f:
         df:c1:58:ca:c4:1f:d5:56:d6:d2:23:43:ff:7f:f0:35:c5:7e:
         5b:60:1e:d0:9b:81:9f:37:dd:8c:9e:66:73:fb:2e:7b:b0:71:
         e4:5c:32:27:99:71:05:e9:1e:5c:2e:5f:c2:3e:12:e2:af:82:
         6b:07:3f:55:08:89:69:8d:77:bf:83:99:e4:28:ae:04:a4:81:
         0c:09:fd:16:3b:a7:7f:ca:fa:92:6f:d6:98:b1:eb:c4:16:fe:
         03:fb:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:16:30 2026 by rpki-client