Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          529nrWhrrF8LopPb7vKXtXf8B1xhpeF+WHiRjxTKAJU=
Subject key identifier:   DF:1D:A0:9C:4B:00:23:66:DA:E8:D5:7A:70:C7:9D:33:48:1E:77:89
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       019EC4EEF3D5EF5B4E49E7FD47E5799DC922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          1960
Signing time:             Sun 14 Jun 2026 07:00:54 +0000
Manifest this update:     Sun 14 Jun 2026 07:00:54 +0000
Manifest next update:     Mon 15 Jun 2026 07:00:54 +0000
Files and hashes:         1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: KWupvs0Jq79RFDw9ZAo5B8z9yL7N0ZF/TuK+U5KiTpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:ee:f3:d5:ef:5b:4e:49:e7:fd:47:e5:79:9d:c9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: Jun 14 07:00:54 2026 GMT
            Not After : Jun 15 07:00:54 2026 GMT
        Subject: CN=df1da09c4b002366dae8d57a70c79d33481e7789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:38:10:1e:ec:f9:aa:64:6b:88:02:63:fa:
                    bb:f0:05:21:2b:b9:93:65:a5:17:94:82:2a:25:12:
                    1d:08:2c:03:41:44:02:a7:a6:9b:46:a0:28:f5:ff:
                    55:2f:db:66:75:28:92:c2:fc:fb:fa:c9:77:c8:f7:
                    10:26:aa:62:3c:1f:ed:04:2a:b6:59:3d:60:76:dc:
                    ec:ad:96:34:11:a1:b2:51:bd:b0:2d:3c:22:24:6c:
                    f0:a7:29:a2:d8:1a:57:6c:c0:b8:ad:d4:a7:0a:d5:
                    ae:6e:4a:ff:bc:e9:43:0c:dd:71:d8:cc:b5:62:e1:
                    a1:8f:1c:35:6f:7f:a9:4b:d8:61:96:9d:ca:89:f0:
                    5f:fb:cb:75:ac:45:94:47:2b:33:bc:00:eb:3a:ed:
                    73:bf:d7:14:90:55:63:8c:14:2c:a4:50:5d:ac:1e:
                    8f:cb:64:51:ad:be:4e:af:0d:56:8c:02:7d:92:bf:
                    29:7b:3e:1e:d0:fe:b3:5b:de:4b:7d:62:d9:23:51:
                    4e:de:7e:4e:1e:9c:d3:90:35:25:d1:4d:53:bc:1e:
                    dc:97:eb:3c:18:01:d8:f5:8e:0f:13:1d:e8:67:d6:
                    35:63:e2:dc:ca:79:5e:dc:9c:89:ec:0b:c6:84:1c:
                    f0:2f:3b:ee:e6:bb:78:e4:a8:f5:9a:db:59:e1:ac:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1D:A0:9C:4B:00:23:66:DA:E8:D5:7A:70:C7:9D:33:48:1E:77:89
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:e1:62:e5:7b:54:c4:d6:65:6c:be:ea:fc:b4:e6:ab:96:
         eb:30:00:66:e0:74:00:3f:b7:b3:d2:50:6b:d8:6d:2a:0f:4c:
         6d:53:6a:a5:31:8a:66:60:d0:44:43:bd:d5:0b:4f:c1:f8:59:
         aa:59:19:02:11:91:22:5b:d9:86:76:88:4a:81:48:00:0a:21:
         b1:9e:f4:4c:5d:d4:e5:63:60:14:89:7d:0c:53:6b:14:f8:aa:
         4d:8f:29:8f:4e:42:c9:f6:37:fe:5d:89:24:b8:da:5d:37:8b:
         75:ae:31:8c:19:f5:06:5a:dd:b5:27:28:95:83:47:7e:07:11:
         63:a8:08:50:80:fa:e6:0d:30:18:ab:00:6e:85:a2:f2:0e:37:
         ff:e0:38:94:67:5a:ac:05:42:c7:cf:89:62:0a:0a:a6:98:1b:
         80:0e:81:8c:d5:2f:b4:05:11:fe:23:ad:af:7b:2b:af:32:71:
         d7:88:f6:99:a1:a1:27:ad:be:d6:45:d9:ac:c6:5e:e9:64:d1:
         e8:7a:70:1b:2a:28:d0:10:81:b0:6d:14:ef:6f:b9:1f:d9:2d:
         6c:a8:34:45:cf:a0:ff:03:4e:f7:0c:9e:a6:1b:59:d3:12:5b:
         a0:99:e3:63:8f:a5:30:fb:3d:01:4e:d7:16:ba:74:b5:69:a7:
         9b:8b:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:34:34 2026 by rpki-client