Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          qHVESckcPBqdSgAY5J/37DQEmsGJeqlBJmJ0vovFY0k=
Subject key identifier:   17:DE:59:2F:27:14:E2:0F:5F:47:19:5F:42:7C:14:E4:99:1D:31:4C
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       01A1C631CB5D624AB93AE62BA800F97A0E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          13FF
Signing time:             Tue 10 Nov 2026 16:01:54 +0000
Manifest this update:     Tue 10 Nov 2026 16:01:54 +0000
Manifest next update:     Wed 11 Nov 2026 16:01:54 +0000
Files and hashes:         1: 8XEzSk8CvDfLkSMnM2czmx_ulWg.roa (hash: 40hPE/BqPPQ7BBdeMCvpBaKM0QkTjFWRsFW8s0ufoAc=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: 0lroAdWNKTHtBluEMeovMev5mH2VDZ/4Xp/5jWRab5E=)
                          3: _Dc_bdIAZYdrEnNJICuszN__3rw.roa (hash: AzuIghqugc9hzzBm4Id+ZUX9fazI5NRXP0v6O6ZJMDc=)
                          4: kRwhJc9YP7PBT_VxjXqr6kKnSig.roa (hash: sdwxFkjlQepYKbUeVajivy+Ki1wWl6h3Im8+Blt6i98=)
                          5: t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa (hash: UydhtoR4+IQ54e3x5h5+w3ijtAQlUzFvVelsUAahRqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c6:31:cb:5d:62:4a:b9:3a:e6:2b:a8:00:f9:7a:0e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Nov 10 16:01:54 2026 GMT
            Not After : Nov 11 16:01:54 2026 GMT
        Subject: CN=17de592f2714e20f5f47195f427c14e4991d314c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:b2:4a:21:90:2a:82:36:d5:07:46:e9:2c:
                    46:24:11:2b:2e:38:1a:61:d2:c4:05:77:2e:b5:20:
                    20:d3:bf:82:65:b5:fc:86:72:6a:43:92:51:96:13:
                    b2:90:e3:80:bf:c2:df:9b:49:80:85:29:ba:7f:aa:
                    ab:07:2e:94:cd:f9:9e:06:fc:12:fd:24:2e:e2:50:
                    a2:32:36:1f:ed:b8:8d:98:ac:60:df:5e:99:12:1e:
                    8b:7e:2d:12:7d:2b:97:75:19:51:36:3c:c0:e0:80:
                    0d:9c:8c:34:03:30:11:f9:80:3b:d9:58:be:4e:84:
                    9f:b6:08:1c:db:1d:47:f5:66:d1:2b:86:02:c4:39:
                    af:f6:ca:57:e7:74:58:0a:1e:93:06:64:10:e8:72:
                    10:ee:2e:21:79:e9:a0:55:a2:00:e6:63:f7:39:0d:
                    52:6e:92:01:7f:0f:fd:22:f4:01:aa:ad:70:8d:cc:
                    22:ed:82:c1:dd:fa:0f:8e:61:34:ba:a0:6b:fe:a6:
                    d1:16:b8:73:79:8a:14:1e:83:7e:95:72:48:19:da:
                    90:ab:6f:15:42:55:09:b6:41:85:ee:0a:1c:c6:5e:
                    b3:9c:6d:d7:23:a3:1b:85:43:1a:a4:4c:b1:da:f7:
                    1a:c2:b6:97:d4:a4:14:2e:11:6d:a3:45:b6:a8:ac:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DE:59:2F:27:14:E2:0F:5F:47:19:5F:42:7C:14:E4:99:1D:31:4C
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:fd:75:c9:09:f2:42:27:72:ff:39:15:0f:7c:95:f8:ef:
         88:3c:b4:c3:e1:f5:c4:64:6c:03:e0:fd:0a:ec:2e:ec:6a:14:
         5a:63:3e:c2:9f:70:96:96:52:00:cf:6f:e3:5d:c2:0e:f7:2c:
         d3:bf:01:83:84:dc:d2:f4:e5:ab:e6:1f:01:64:08:68:fa:14:
         10:ba:07:67:ba:91:21:45:05:6f:8f:bb:20:87:77:d4:19:ad:
         2b:8b:69:2c:13:ee:db:0f:e3:3b:e3:49:43:08:b0:d9:eb:81:
         dd:74:08:c2:d6:2b:2b:56:eb:8b:4c:87:e1:2f:bb:87:cc:fb:
         6d:2a:ab:86:fb:b7:58:53:38:43:fc:4c:4e:56:2a:dd:a5:99:
         11:8d:ef:a8:fa:be:29:e1:79:65:6a:a6:89:cb:21:16:db:88:
         65:20:c6:8b:ba:86:cc:97:56:28:82:1d:24:1b:7d:bd:b4:58:
         f8:bb:7e:d6:2e:8f:eb:00:64:58:39:07:60:b8:89:b3:0f:32:
         64:93:46:cf:3e:48:b1:88:48:1d:0c:27:f7:90:93:1b:9a:b8:
         53:0a:40:44:52:be:b6:5f:1e:92:05:38:07:3f:d7:e3:f8:52:
         e3:be:bf:b3:fe:98:6b:7c:6c:8c:11:0c:e3:d8:e2:f7:9a:62:
         c7:6a:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 23:10:59 2026 by rpki-client