Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          cWNpPCCvtGmMqYLtuPxzBMq8US6MtHv+DXN9Bn+fnwE=
Subject key identifier:   02:F5:E4:3B:53:44:E1:DE:BD:77:D1:BD:39:C6:77:E3:EF:A4:92:68
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019FAC7603716FBE3BFDEE17AB1FA06B844F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          036F
Signing time:             Wed 29 Jul 2026 06:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:42 +0000
Files and hashes:         1: W9NokyXaMzMGQz2rT0ueVLsJj_c.roa (hash: H8qWbLTHoDh177+NLvlgjLRNqnjZkh6wnZIU1T8Kptk=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: TydYT0Qo9ox2kArs7nrfu9pHFWd+RiL5lb8EBBhY3xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:03:71:6f:be:3b:fd:ee:17:ab:1f:a0:6b:84:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Jul 29 06:00:42 2026 GMT
            Not After : Jul 30 06:00:42 2026 GMT
        Subject: CN=02f5e43b5344e1debd77d1bd39c677e3efa49268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:76:cb:51:3e:72:da:9b:ed:83:46:ee:b7:
                    bd:3a:6c:27:4a:e9:3f:63:cd:31:96:12:53:cf:8b:
                    45:14:eb:2d:b9:9d:40:77:cb:a6:b5:cf:3b:57:cf:
                    bd:37:3c:b0:80:a1:b7:47:12:1f:29:0d:f7:e4:76:
                    69:7a:36:29:72:16:94:6e:8a:3d:45:75:47:62:52:
                    38:4a:6c:31:ae:56:7c:fa:e4:65:a4:28:77:05:83:
                    cd:68:de:f8:a6:87:70:63:50:2d:3a:44:91:c1:cb:
                    d8:d4:04:5e:0a:b9:c4:44:67:5d:02:29:5f:d2:df:
                    20:06:d8:e5:c0:50:c2:58:61:fc:bd:db:c4:ad:cf:
                    85:50:88:2d:b1:c9:c9:bc:66:12:ab:bf:b2:33:e0:
                    7c:e8:81:95:3c:21:68:ae:8a:59:d3:d8:e7:1e:d2:
                    c6:27:ae:09:21:e4:b2:e4:95:94:fa:d7:2a:c6:4d:
                    34:5f:17:c2:c3:ed:40:30:e9:a0:77:61:c4:c1:cb:
                    df:93:dc:2d:66:eb:6a:77:91:46:24:90:78:56:f0:
                    8c:61:e1:b6:7c:17:2f:f7:28:48:f5:4f:1a:ac:66:
                    df:b9:18:40:03:95:36:30:33:e2:3d:d3:25:cb:e4:
                    59:b1:83:79:53:17:d7:73:66:45:f4:7c:60:ef:d9:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F5:E4:3B:53:44:E1:DE:BD:77:D1:BD:39:C6:77:E3:EF:A4:92:68
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:8c:7a:97:08:0f:e1:9b:31:c4:54:9f:4d:44:6a:54:db:d4:
         95:56:0e:55:69:92:05:9d:d2:7f:4f:04:d0:db:47:52:13:3d:
         8d:a1:19:54:1b:2c:4a:49:21:fb:9a:e9:23:d7:02:27:32:ba:
         a3:2b:1e:74:7e:70:46:d4:9d:23:3d:4e:4b:d2:30:e0:86:61:
         8c:0b:7e:58:8d:d8:39:d2:f1:0c:c1:67:bd:2e:29:51:18:95:
         24:2a:88:bd:3f:84:e1:03:a0:50:07:84:8c:0c:1f:e2:7d:a8:
         d2:da:7d:70:34:db:56:90:5d:62:10:90:99:0a:fe:ed:64:8b:
         5c:0a:a3:77:83:75:c6:24:49:c1:18:00:61:cf:fa:e7:1e:6f:
         b3:8e:73:6b:c7:44:b0:d3:af:0a:11:01:62:48:29:8c:81:ed:
         20:8d:2d:12:b7:7f:eb:4d:f4:6f:55:55:09:bd:e5:4c:4b:a4:
         3f:4a:83:41:fe:3a:80:74:3d:51:c3:2c:65:53:48:2d:fc:05:
         23:c7:e5:fa:d1:21:52:d6:b0:ea:99:cf:db:1a:5d:aa:62:5f:
         61:d2:4b:b5:7d:d9:69:d5:37:9e:ba:59:6b:b8:23:6a:96:bb:
         b0:b6:85:64:42:59:9d:0e:3a:a9:9f:14:40:ec:88:9d:f4:52:
         17:bb:ff:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdgNxb747/e4Xqx+ga4RPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYwNzI5MDYwMDQyWhcNMjYwNzMwMDYwMDQyWjAzMTEwLwYDVQQD
EygwMmY1ZTQzYjUzNDRlMWRlYmQ3N2QxYmQzOWM2NzdlM2VmYTQ5MjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZ2y1E+ctqb7YNG7re9OmwnSuk/
Y80xlhJTz4tFFOstuZ1Ad8umtc87V8+9NzywgKG3RxIfKQ335HZpejYpchaUboo9
RXVHYlI4SmwxrlZ8+uRlpCh3BYPNaN74podwY1AtOkSRwcvY1AReCrnERGddAilf
0t8gBtjlwFDCWGH8vdvErc+FUIgtscnJvGYSq7+yM+B86IGVPCForopZ09jnHtLG
J64JIeSy5JWU+tcqxk00XxfCw+1AMOmgd2HEwcvfk9wtZutqd5FGJJB4VvCMYeG2
fBcv9yhI9U8arGbfuRhAA5U2MDPiPdMly+RZsYN5UxfXc2ZF9Hxg79lYaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL15DtTROHevXfRvTnGd+PvpJJoMB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYx6lwgP
4ZsxxFSfTURqVNvUlVYOVWmSBZ3Sf08E0NtHUhM9jaEZVBssSkkh+5rpI9cCJzK6
oysedH5wRtSdIz1OS9Iw4IZhjAt+WI3YOdLxDMFnvS4pURiVJCqIvT+E4QOgUAeE
jAwf4n2o0tp9cDTbVpBdYhCQmQr+7WSLXAqjd4N1xiRJwRgAYc/65x5vs45za8dE
sNOvChEBYkgpjIHtII0tErd/6030b1VVCb3lTEukP0qDQf46gHQ9UcMsZVNILfwF
I8fl+tEhUtaw6pnP2xpdqmJfYdJLtX3ZadU3nrpZa7gjapa7sLaFZEJZnQ46qZ8U
QOyInfRSF7v/oA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:09 2026 by rpki-client