Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File:                     wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier:          IHhzTMXhPQuKPuNVKX9b6AFqWwjJR2as8ana04NgU9o=
Subject key identifier:   12:76:07:C5:2E:42:60:A2:1A:5C:CF:A3:50:79:7F:0C:1B:3A:FD:68
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       01A0C4E9270DF65EF820775365B8A9B57884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number:          0AF3
Signing time:             Mon 21 Sep 2026 17:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:09 +0000
Files and hashes:         1: R84wROoCeZRCPbUs7Ib0UyTuxC4.roa (hash: Q6YMEZButrOoIhObHP4dYcfrrzpuagES1oIBIzupcEU=)
                          2: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: kTQGGmCx97bYg2u2zVqu7KkNRUAIyeNdhGDFNxVV584=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:27:0d:f6:5e:f8:20:77:53:65:b8:a9:b5:78:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Sep 21 17:00:09 2026 GMT
            Not After : Sep 22 17:00:09 2026 GMT
        Subject: CN=127607c52e4260a21a5ccfa350797f0c1b3afd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:58:f0:b6:f4:06:c3:31:54:c2:10:5a:49:
                    06:65:c8:20:83:2d:8a:96:4f:99:0b:73:7f:20:9e:
                    22:06:ba:54:bd:1a:7b:56:d6:4e:3b:23:f6:8c:44:
                    c6:b4:5d:cf:f3:60:b9:6b:3b:56:1f:97:ca:eb:ee:
                    2d:d4:13:ff:d2:5e:c7:f9:48:ed:06:87:14:b9:2c:
                    c2:b9:86:27:aa:e4:52:54:1f:d2:22:aa:8b:77:d1:
                    76:03:0f:cb:f7:7a:8a:4e:50:e6:08:3c:1d:1b:2a:
                    31:06:f3:5e:d4:31:93:83:fa:64:f1:6b:61:24:5f:
                    93:90:81:51:1a:b3:a2:2b:96:23:6b:14:15:20:15:
                    60:6b:87:e9:74:65:a0:40:f3:f9:07:36:d9:f8:e8:
                    86:a7:d0:1b:38:dc:27:04:30:5b:40:64:24:33:fe:
                    6a:99:f9:10:6d:c6:34:5e:14:29:ea:9c:9a:ef:14:
                    56:87:29:21:e5:24:5a:12:ed:45:d8:5e:78:2a:22:
                    3d:f5:1b:c1:5e:b3:ed:ba:af:2d:13:d3:25:d3:82:
                    e4:93:1a:60:bc:64:62:16:8c:5a:69:2e:d2:d2:01:
                    e3:ba:14:b6:b7:c9:41:ef:59:8c:a3:ac:cf:5f:82:
                    5d:8a:c5:d5:3c:ea:b6:5f:42:b7:87:c1:65:a1:d0:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:07:C5:2E:42:60:A2:1A:5C:CF:A3:50:79:7F:0C:1B:3A:FD:68
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:41:1d:52:b8:a1:e5:09:bc:d3:91:02:f1:0c:a8:dc:ec:4c:
         b2:22:83:a8:2a:87:d5:84:a5:f0:4f:b6:9a:3e:0d:44:2d:f5:
         14:89:17:56:3a:b7:41:af:64:6d:d3:65:7b:97:d4:7f:99:b6:
         08:63:5e:ee:19:7b:fd:e8:83:9a:88:b9:b0:09:30:0b:a4:5c:
         94:82:92:33:74:26:9a:3b:04:ca:5a:08:e9:a2:71:7f:88:9d:
         c9:ca:34:9b:49:74:ab:90:06:f6:ed:51:5c:44:22:be:71:e8:
         6e:34:d9:aa:05:53:98:21:f7:0b:61:26:1a:6c:1e:62:05:d0:
         40:94:b4:3c:68:f0:0a:d1:ef:3c:80:1e:0a:c2:82:81:bc:a8:
         7d:b9:c5:03:45:81:b9:37:6d:0e:39:47:a5:92:9c:50:4b:8f:
         a3:3f:6a:5c:91:57:ca:9f:7c:fa:09:11:93:5a:53:b4:ce:88:
         98:33:85:f5:7f:75:19:03:3f:9c:c5:2c:07:41:6a:c0:46:9c:
         76:f4:c7:df:9d:6f:81:4b:ec:d3:32:ab:9e:15:40:d5:77:a5:
         04:35:bf:1f:c6:d4:8d:f0:15:a3:f0:ba:59:92:e3:72:43:d7:
         b1:bb:a6:6e:33:cc:d8:6f:5d:01:44:ee:05:3a:44:31:fb:88:
         60:7b:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:53:38 2026 by rpki-client