Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          +CY3TWl2+NPk+VDJW/MgI/BsCCFTP1bn43ZP9aZ8YVg=
Subject key identifier:   6E:94:CC:A5:93:26:9D:32:06:E7:65:14:CC:B4:5B:A5:2C:78:3E:63
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019DA52FC9936C32FCF21196A94E704E6C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          0262
Signing time:             Sun 19 Apr 2026 10:01:05 +0000
Manifest this update:     Sun 19 Apr 2026 10:01:05 +0000
Manifest next update:     Mon 20 Apr 2026 10:01:05 +0000
Files and hashes:         1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: nJgHu6iCCwPzq7L7Mt7Fc2D0ih/LF7olu4MQw8mXH8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:c9:93:6c:32:fc:f2:11:96:a9:4e:70:4e:6c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Apr 19 10:01:05 2026 GMT
            Not After : Apr 20 10:01:05 2026 GMT
        Subject: CN=6e94cca593269d3206e76514ccb45ba52c783e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:7a:97:58:2e:56:18:0f:89:71:33:b4:f0:
                    7a:0d:5e:b9:d3:39:bc:42:36:b5:a7:0c:90:56:8e:
                    b7:5c:f3:b3:5d:ba:c4:fd:56:b4:e1:cd:c3:80:7e:
                    38:a8:cf:b9:8b:5c:52:dd:65:7f:68:e0:88:8b:bd:
                    be:85:aa:5a:3c:68:40:e3:d2:a1:e1:ae:3d:02:7b:
                    54:07:22:8c:02:69:85:91:8f:9f:95:14:df:8d:27:
                    b4:77:a0:8a:1a:20:4a:30:1c:9c:1f:d6:a7:1c:4a:
                    a0:52:c6:b9:b6:7a:f4:10:87:d7:8b:86:8b:c6:5a:
                    02:69:3d:e0:fa:9d:d9:f4:10:90:12:85:6b:cb:0c:
                    4d:ea:f5:cf:32:93:1b:90:15:61:31:8b:4e:2c:ff:
                    94:e0:93:4f:e7:b3:d4:f6:bb:98:2d:df:cd:a5:cd:
                    3d:07:8a:25:6e:04:d4:00:4b:fb:08:10:d0:62:4c:
                    e2:75:98:44:b8:d1:c1:90:29:b5:cb:2c:11:35:d6:
                    11:eb:ef:e2:21:98:80:c0:40:55:0e:48:e6:1d:b6:
                    d0:48:58:4e:69:50:cd:05:17:93:cf:cc:bb:4a:6a:
                    a2:95:df:ef:97:45:95:a5:d8:fa:93:bc:74:ff:03:
                    c9:00:37:af:71:79:f9:1f:a0:19:7b:6b:c6:09:1f:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:CC:A5:93:26:9D:32:06:E7:65:14:CC:B4:5B:A5:2C:78:3E:63
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:32:53:e5:b1:ef:2c:e3:9c:b6:4a:c3:ba:0d:fb:11:cb:
         9a:f8:b2:7a:07:2f:f1:8e:a2:53:e2:3a:87:93:92:24:87:20:
         e6:54:8a:e4:9e:0e:cc:d5:df:5e:b5:6e:94:2c:ca:bd:c3:1d:
         ae:6c:8c:c4:2c:09:f6:56:7c:55:5e:df:c5:3e:71:30:79:37:
         51:86:4a:31:25:1c:61:a8:bb:43:53:3a:67:fb:35:13:11:32:
         cb:e2:9d:ab:ff:ea:d6:f9:4f:ed:96:c6:c4:5d:3d:32:95:0d:
         cf:14:12:82:10:d4:a4:1f:52:c6:70:e1:6a:dd:1e:0f:63:b3:
         71:c9:42:a5:04:85:63:a1:da:71:60:fb:1a:b4:7b:13:94:e6:
         b7:f1:03:09:08:3e:d6:06:e4:da:ce:22:fa:e9:96:b2:b2:39:
         88:e8:67:ec:cf:78:c1:f6:02:8a:4f:d3:94:17:0d:6f:96:8b:
         56:83:1a:d0:9a:e9:f2:53:c3:9c:e5:26:33:53:e9:22:76:db:
         64:b2:ca:00:dd:26:61:32:87:66:d0:fb:98:cb:92:57:7d:f0:
         3d:88:76:94:99:4f:04:03:ab:8c:e8:52:eb:94:30:d5:da:2c:
         de:2c:51:50:c9:2c:5a:3c:0d:a1:80:8d:7e:95:2d:ec:37:7a:
         ac:c6:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:53:02 2026 by rpki-client