Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          65/MR4WpGBHKBfgiH949oiaCeDIxjknYc/4FNJsK5WY=
Subject key identifier:   77:DB:9D:48:65:37:88:58:5E:8B:53:07:50:AD:22:25:70:6C:3A:A0
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       019FA9ABC355DC489DA0F8E9CFDD200F8F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          1323
Signing time:             Tue 28 Jul 2026 17:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:33 +0000
Files and hashes:         1: CaF9jDRtHy3skgKS7QCnXm4PI7A.roa (hash: V9ZLClAO25ZfSnTZeTYg00I4twtSynvhNaSIPSAPlv0=)
                          2: bSfoqAesrmojtDNBxt2VZHxOHqI.roa (hash: Z7b9r8p1AdR9DmR8LmSnmnhIJm2T4hKdRLt3c111qtg=)
                          3: puvvxkuyGGm9hRKcVBF60FM3T20.roa (hash: 859vc/MnpuH2XD8iZDZO4+LCLxVjdb1X9+4Sxo2qG9k=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: Uk3BZON/mGOPY4fLGyc1TkktZ7ifutQrAe6a9EYqZEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:c3:55:dc:48:9d:a0:f8:e9:cf:dd:20:0f:8f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Jul 28 17:00:33 2026 GMT
            Not After : Jul 29 17:00:33 2026 GMT
        Subject: CN=77db9d48653788585e8b530750ad2225706c3aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:83:84:1f:2e:cd:8e:78:a2:10:f7:f8:9f:
                    2c:dc:55:2a:08:3b:cf:d8:62:39:ab:74:fc:aa:60:
                    55:de:5b:75:1d:e5:1c:26:35:3e:6c:fb:a7:61:6d:
                    33:38:0d:1c:c1:e4:35:39:54:92:c8:61:71:50:45:
                    90:a3:16:5f:5a:8b:ff:88:b1:9a:b4:78:0e:ec:89:
                    13:56:78:41:d4:96:97:d2:a1:6c:fe:91:70:69:09:
                    6e:f6:08:92:80:3e:c9:f9:68:b5:7d:1c:a3:e6:2c:
                    97:12:c8:ce:e6:59:ec:9a:64:e3:56:6e:ac:7d:63:
                    9d:03:bd:d4:8d:48:7d:73:47:b3:89:94:ba:47:ec:
                    cb:5b:3d:dd:25:16:d5:1e:cc:af:3d:83:82:65:c0:
                    41:e0:72:f9:4a:d1:d3:cc:70:48:35:e7:34:cf:75:
                    13:24:89:f9:5d:e9:91:d0:ac:44:f9:78:20:4e:b4:
                    b8:f1:de:0a:89:f3:d6:8a:15:44:e4:c3:32:f5:f7:
                    b8:cc:3f:23:f9:e3:2a:a5:e0:55:0c:62:a8:ff:f3:
                    2c:12:e3:1d:ca:46:3f:05:f0:2a:98:16:e9:3a:2c:
                    53:bb:8a:5a:67:7b:ec:d2:19:75:68:c3:c6:03:b2:
                    95:a8:8f:e7:26:2c:c7:30:3d:6e:b9:62:3e:8f:fa:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:9D:48:65:37:88:58:5E:8B:53:07:50:AD:22:25:70:6C:3A:A0
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:0c:5a:4e:cf:e0:d7:9f:83:76:3a:27:6a:60:e5:1a:9d:
         b5:83:20:0a:69:ee:29:02:84:00:62:f7:f2:29:c0:39:02:2d:
         b7:a1:78:6e:7a:20:c0:f0:bc:f5:d8:fb:97:b5:f5:dc:93:67:
         8e:06:4d:b5:57:2f:d6:18:a9:a9:3a:f0:f2:a1:24:f6:e0:6c:
         12:79:a5:a0:39:07:3a:4b:27:83:79:04:3a:7c:9e:a6:8a:22:
         ce:66:7c:5f:a6:3d:62:5f:82:b6:a8:d8:cb:a8:23:9d:65:48:
         df:0d:7e:9f:19:8c:84:fa:3b:72:13:33:be:43:07:2c:aa:b6:
         a4:b1:90:4e:a9:73:20:60:9c:c9:19:e5:8d:6d:de:18:32:19:
         a0:42:cf:fc:78:d8:1a:0e:04:ea:7f:77:4f:5e:08:7c:98:34:
         b5:23:c2:5c:47:7d:80:88:8a:ae:f0:f7:5b:b7:d9:e7:2a:e0:
         c9:8b:1a:8f:12:fb:47:c9:52:29:3d:73:02:3a:db:4a:d7:c1:
         a6:d8:a8:ad:f1:9d:54:ce:4a:49:16:54:8d:b1:0d:d2:a3:e9:
         f4:3a:b8:b6:11:f9:bb:bd:b8:94:ca:b8:3c:2e:e5:57:c8:96:
         0f:a9:ce:61:95:f2:97:76:24:89:b0:e6:54:8e:75:01:86:37:
         0f:21:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:33 2026 by rpki-client