Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File:                     8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier:          Hf0oXjAn6Haq6056uG9HQgJklI1HDjLA4jm7iG6ENjY=
Subject key identifier:   19:20:7C:2F:3E:14:18:9F:1B:B6:A0:CE:D2:D4:D6:D6:36:62:CD:51
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer:       /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial:       019EC14937D7555CFF89D7495C8C0DF0A3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 14:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:01 +0000
Files and hashes:         1: 8A44F-HK4brDvcdx38UFaUUZrxg.roa (hash: J1l91xAYUMrUVrPKe9o7rX2U+//nR5fojqbrmgbxxMA=)
                          2: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: 2amDMuw0o0FQ6uf1WyuXjhwTcKVFcGZhYLCfUPPm0Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:37:d7:55:5c:ff:89:d7:49:5c:8c:0d:f0:a3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
        Validity
            Not Before: Jun 13 14:01:01 2026 GMT
            Not After : Jun 14 14:01:01 2026 GMT
        Subject: CN=19207c2f3e14189f1bb6a0ced2d4d6d63662cd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:94:50:40:06:08:20:14:44:32:73:97:42:
                    13:7c:7d:c1:7a:b5:70:04:15:93:b9:83:66:7b:bb:
                    f1:5c:b9:5a:0b:e3:1a:10:4c:20:43:e0:6f:75:b3:
                    02:f2:99:4b:59:55:d5:94:23:b9:8f:1e:fa:b6:4c:
                    f8:78:ce:c6:5e:60:b5:e3:fc:5e:2c:a8:fe:3d:c5:
                    99:57:6d:8f:c3:51:22:87:33:a4:d6:9d:66:4f:6d:
                    d5:bc:d1:b9:69:bb:6f:0e:f5:43:a5:63:f5:bc:e2:
                    d4:b5:91:77:c6:d9:ca:44:3b:84:cf:0f:ad:c9:f0:
                    19:4d:52:b1:ad:ba:b1:95:7a:ce:67:67:c8:07:60:
                    23:6d:f9:91:af:84:80:1a:d0:75:46:6d:6b:fd:97:
                    c1:a9:42:8c:f8:6f:3a:bc:80:32:a1:02:89:3d:21:
                    a6:e7:94:98:18:20:52:ff:2c:50:48:d8:93:13:46:
                    07:53:bc:ee:aa:da:59:7b:b6:a7:38:50:cf:40:58:
                    c7:27:08:95:d7:4b:9c:91:58:92:c8:93:0c:3d:2b:
                    3a:75:a8:53:00:eb:8e:68:30:b0:11:9a:d5:5d:3f:
                    f0:fe:46:be:3a:a0:51:e7:b1:d1:db:7b:90:a2:be:
                    09:78:50:b8:7b:8d:e7:4d:2d:b9:5f:df:fe:55:7c:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:7C:2F:3E:14:18:9F:1B:B6:A0:CE:D2:D4:D6:D6:36:62:CD:51
            X509v3 Authority Key Identifier:
                keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:8d:34:20:28:6c:0d:e7:71:5d:81:94:0c:a5:ba:93:3c:
         5a:c6:31:d6:10:a7:13:73:21:93:ca:9a:42:a0:d1:6d:62:a5:
         b0:eb:9c:ae:85:53:67:f1:27:69:78:3e:af:c4:f1:69:b7:37:
         c7:28:0e:42:b6:57:f5:0c:4d:d8:76:13:ae:69:a9:71:52:c7:
         fb:db:17:61:bc:2f:ed:39:30:59:f5:38:a8:c5:c9:12:a3:cd:
         c4:b8:06:a5:2c:d7:43:10:32:f9:28:99:8b:2d:b4:47:8e:6f:
         69:d1:6e:7f:86:d4:ad:93:32:ba:8a:bf:66:88:0b:e9:a3:ec:
         b7:05:b9:9d:88:f9:0e:25:89:4d:93:3f:07:6b:a0:d4:02:f7:
         ed:e0:c0:85:b9:1f:ff:6e:9e:cb:89:1d:1c:1f:2b:ca:a0:90:
         0f:cc:03:18:a4:2e:07:39:8a:52:1c:79:dd:de:5b:05:1a:59:
         a9:5b:77:45:a5:75:89:cd:27:f3:8f:c5:0b:79:ff:17:40:0f:
         29:3f:1c:fd:6e:b7:8c:1c:4e:1f:ec:46:a7:45:5c:22:23:99:
         e0:2f:94:66:f8:b1:e9:50:5c:1c:0c:d9:f9:02:2a:14:c9:05:
         0f:81:2e:c8:17:ed:de:8d:25:29:a1:83:96:13:94:de:17:bc:
         60:ae:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:13:57 2026 by rpki-client