Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          +0mJLB18RSh7eC/tzIu2xgujS4K8ubKHEEH1WriRB1U=
Subject key identifier:   97:CE:D9:2E:24:A3:6B:4A:18:A3:E1:62:B9:8D:BE:CD:27:7D:5B:BE
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       019EC1B731A2879F6DA100CBC6B7DF7869F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          18C2
Signing time:             Sat 13 Jun 2026 16:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:08 +0000
Files and hashes:         1: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: Ur1oUFrdgkGhkTQ3v/NuUNz0H3fk2QhFsAXSlfzFtHU=)
                          2: uXS0bdbFdOHb6Fis6v93sRggyKI.roa (hash: 5dDzWf7HGqV8pXI0aYhhoLgb4jJbNqsLqa/M4syFKfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:31:a2:87:9f:6d:a1:00:cb:c6:b7:df:78:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Jun 13 16:01:08 2026 GMT
            Not After : Jun 14 16:01:08 2026 GMT
        Subject: CN=97ced92e24a36b4a18a3e162b98dbecd277d5bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:04:fa:69:82:00:67:4f:32:23:29:bb:2e:
                    67:23:20:b9:2a:49:ea:8e:f7:9c:ae:86:3c:1b:dc:
                    94:57:18:ce:e0:23:f0:46:ed:58:7f:b2:6b:e9:d5:
                    1d:ff:b7:02:99:94:70:98:cc:59:d7:2f:6b:48:9c:
                    92:b8:7c:e9:12:bd:2c:6a:41:23:b2:0a:ec:d8:f5:
                    86:d9:55:32:da:a5:ba:ea:3a:ef:d7:0a:06:d7:5e:
                    ec:60:74:28:ea:6b:f9:35:53:1b:20:96:b7:e7:99:
                    e7:f4:cc:19:95:45:33:18:7d:82:19:78:ca:19:29:
                    83:72:ff:a0:9c:69:12:18:28:10:2d:20:04:d9:0f:
                    63:34:be:c0:81:08:c1:24:b9:c3:6b:21:35:19:a1:
                    f1:0c:8b:77:82:82:13:f8:95:85:9a:32:32:e2:f0:
                    92:16:3a:c5:25:14:c9:d7:52:19:53:26:8b:9b:84:
                    1b:15:6e:93:ac:ed:c5:90:a2:94:74:9d:8c:8e:39:
                    17:44:3a:14:7b:d5:5d:42:a2:45:6e:d1:ee:64:e4:
                    b4:83:93:b1:a5:0e:e5:26:a3:d8:49:68:ba:5c:b0:
                    a5:7c:41:2a:76:f5:41:8f:72:0c:e9:2f:78:14:64:
                    d8:5e:42:73:17:38:03:a1:9a:62:47:0d:f1:82:4c:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:D9:2E:24:A3:6B:4A:18:A3:E1:62:B9:8D:BE:CD:27:7D:5B:BE
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:da:62:03:7d:28:79:da:ed:43:07:8f:ff:a7:42:ad:2e:
         9b:1a:53:82:4d:ba:c0:55:48:3c:cd:24:1b:5c:f6:ea:c3:a1:
         c2:4a:ca:17:15:05:81:ed:40:ea:21:ad:3e:3b:2c:e8:f0:38:
         e3:9a:9a:56:f8:7a:62:92:54:ea:a0:81:9a:fa:bb:22:af:c7:
         bf:00:e4:b1:b1:69:a0:9e:38:aa:3a:25:c5:06:55:44:01:76:
         da:be:d4:03:e1:78:18:36:91:7c:7c:d6:f4:53:fd:29:03:22:
         ab:8c:f7:e9:c2:5b:ad:e9:f4:6b:4f:e9:f5:c9:8e:1d:2b:0e:
         f9:81:ff:a9:e3:4f:5a:68:5b:87:93:25:c0:b5:da:f7:d8:a5:
         d9:d4:90:d8:97:e8:ca:f1:46:5b:c8:9a:c0:06:b6:f8:e8:b6:
         14:62:e6:3e:01:a7:de:1e:3e:4b:0d:9c:06:47:7d:68:fa:34:
         b3:31:1f:f3:46:3c:6a:1d:70:5e:61:9a:cc:c0:3c:23:79:7f:
         cd:c9:48:1e:4b:6b:f9:49:e4:1c:6c:d5:e4:3a:3d:c7:ba:52:
         5f:60:bc:5a:b4:04:3f:f9:68:bc:08:ad:0b:a8:63:33:66:0f:
         b4:37:ce:24:f1:40:d0:69:11:29:48:03:47:82:3b:66:e6:60:
         bd:a0:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:54 2026 by rpki-client