Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          EryleAimIKFnnVeYZsWgZtmYeYVMrZvGX8SRr1At9vo=
Subject key identifier:   6F:FE:5D:84:1D:3B:5E:F6:56:12:70:33:84:AC:DA:DD:EE:B7:9B:CC
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       019D977468493BF5A3CBB63DF29E97BDE679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          0583
Signing time:             Thu 16 Apr 2026 18:01:21 +0000
Manifest this update:     Thu 16 Apr 2026 18:01:21 +0000
Manifest next update:     Fri 17 Apr 2026 18:01:21 +0000
Files and hashes:         1: B-ORof5U5KffpAVQvuFpkPz0N4c.roa (hash: 7Bdce+7dVfpsrP9CGNTqOXrt+QvlnjsVsauoFzbSuFo=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: 9Y1yup2eE62pGLCGn6IZ6eGVEciDVoc6+crQezS2IjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:74:68:49:3b:f5:a3:cb:b6:3d:f2:9e:97:bd:e6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Apr 16 18:01:21 2026 GMT
            Not After : Apr 17 18:01:21 2026 GMT
        Subject: CN=6ffe5d841d3b5ef65612703384acdaddeeb79bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:e6:99:b7:f8:22:f5:2f:bb:e2:73:d0:f7:
                    6c:08:e5:b5:a2:f8:18:cc:8f:29:78:8c:bb:61:f2:
                    48:a6:ea:80:59:70:73:d4:8e:11:c9:70:bf:a9:2a:
                    57:f5:1b:f8:a4:e3:b9:4f:7b:55:02:c0:2a:a9:41:
                    c0:1d:9b:2d:f6:69:2e:c2:5d:9a:80:15:e0:81:ee:
                    ed:3b:78:4e:ce:0f:2d:57:d3:78:91:eb:81:14:fc:
                    7a:33:69:ff:91:22:be:9e:c3:82:6e:ca:67:d2:06:
                    6b:23:c3:23:a3:18:0b:dd:1f:07:41:70:a1:50:e6:
                    ea:4c:46:0f:df:e2:ae:9a:0d:7b:98:19:a7:d1:9d:
                    fa:4f:4c:f0:ef:3b:48:7b:66:86:8d:cd:91:56:1f:
                    87:4e:4c:e1:0e:8a:a6:d9:21:a1:2b:93:11:9e:ee:
                    a3:d3:eb:15:85:70:2a:ab:70:20:b2:e5:0b:30:78:
                    8e:39:c7:f6:e8:bf:c4:fa:18:15:78:35:cb:60:66:
                    59:05:88:bc:b8:e5:58:92:de:70:ec:5a:52:a5:e5:
                    4d:77:be:cd:16:df:93:08:1e:a9:b8:60:95:03:fd:
                    17:d2:55:83:45:42:96:a2:86:b6:08:d1:d4:30:84:
                    4a:0e:75:51:3b:e3:cc:7f:cb:11:34:8f:c6:a6:45:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:5D:84:1D:3B:5E:F6:56:12:70:33:84:AC:DA:DD:EE:B7:9B:CC
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:74:8e:51:ee:bf:ea:48:5a:bd:65:a9:25:21:57:3c:d0:2d:
         6a:3e:b7:bc:74:e1:06:fa:bf:2f:99:62:34:19:74:2c:23:09:
         bb:22:ff:0b:3c:6f:14:2d:d1:93:b5:86:32:40:0b:f1:b6:ae:
         57:4c:37:65:24:8c:41:0a:f2:a7:af:fb:7a:b9:0a:a4:fa:36:
         7f:09:cd:a4:ec:d7:31:03:b9:a6:c9:c1:ea:b5:69:fa:c8:dd:
         c3:05:31:63:69:d4:78:f9:e8:0c:38:0b:d7:4d:fd:aa:0d:4f:
         8b:52:dd:5c:3d:8f:94:6f:cd:a9:88:1c:5c:f3:ef:f0:41:8e:
         34:c4:b6:3c:d5:fe:f5:95:89:7d:7c:a0:d8:81:e0:08:5f:fa:
         bb:6b:55:14:a8:ce:9c:ed:31:27:cf:31:58:a7:74:54:2f:57:
         c1:01:ad:b2:6d:58:11:6c:43:78:1c:2e:c3:5f:3e:a1:52:a4:
         ce:56:3f:e5:ce:6a:7f:1f:93:91:3f:fb:92:fe:0a:09:82:0b:
         75:3f:53:14:f2:41:7f:5d:d9:3a:35:fd:0d:11:e8:09:79:e5:
         79:68:62:77:4d:2c:d5:02:0c:f6:43:aa:97:62:4b:af:68:a2:
         3f:a9:f1:59:d1:63:73:3a:d2:96:93:74:5e:5c:5b:7a:05:48:
         d0:f0:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:14 2026 by rpki-client