Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          K0yUesAyzWdwcab+LNJC27+R5iiUfxq+uzKMOcExAFs=
Subject key identifier:   8B:65:C5:D6:06:77:ED:FB:F2:B2:D3:EF:B0:B6:C8:C7:EF:08:C9:A6
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       019FAA19939301C1D5B5142C06B44E14858C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 19:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:30 +0000
Files and hashes:         1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: RPrD62FvYhFSQNNH93uu/Exx/tKCWm79PIrFlpvXlfI=)
                          2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:93:93:01:c1:d5:b5:14:2c:06:b4:4e:14:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Jul 28 19:00:30 2026 GMT
            Not After : Jul 29 19:00:30 2026 GMT
        Subject: CN=8b65c5d60677edfbf2b2d3efb0b6c8c7ef08c9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:ec:8d:19:1d:3d:9c:26:d1:46:23:26:65:
                    98:b7:d2:c4:e1:05:79:1d:35:a3:df:5e:86:91:0d:
                    6d:8f:a7:93:14:75:31:e7:fd:c9:ff:3b:75:69:e3:
                    b1:51:b9:64:4b:ff:94:57:48:71:be:9b:c4:55:58:
                    d8:3d:77:05:19:e9:e2:03:42:ef:3d:fc:32:da:9a:
                    85:f8:84:d3:f1:dd:db:0e:c1:eb:07:e2:84:ce:51:
                    d6:9d:6c:d6:d2:95:b3:95:36:82:79:31:64:a5:02:
                    0c:c0:5b:42:79:d4:63:c2:89:d4:ec:c7:19:50:a4:
                    53:60:9e:ee:75:a9:a0:d7:a4:93:60:c9:58:70:3c:
                    ee:49:eb:93:64:04:29:4e:ba:e4:41:a0:7a:07:5b:
                    36:b5:4d:ec:b8:04:88:e8:a8:0c:f7:ca:4f:98:ba:
                    cf:96:a2:66:8d:9c:8b:2c:67:53:8c:d4:76:ac:03:
                    d0:57:6d:45:d9:84:a8:8b:eb:f4:48:69:b1:14:dc:
                    88:34:d7:54:59:99:67:e3:f7:f3:2f:47:b5:6f:a7:
                    01:b4:1b:00:cc:f7:ca:1c:d7:87:7a:d8:fe:74:2c:
                    59:5d:56:b4:5d:6e:71:f2:88:a4:03:18:0b:7c:f5:
                    91:d5:30:2d:ef:c9:30:77:9b:3d:75:fb:e8:3e:ed:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:C5:D6:06:77:ED:FB:F2:B2:D3:EF:B0:B6:C8:C7:EF:08:C9:A6
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:98:65:b3:83:7c:58:96:de:68:c0:fd:dd:1a:36:9e:83:
         02:9a:46:98:de:f1:49:9f:0d:55:14:83:2d:6b:1a:6d:1f:1e:
         3d:dc:42:fe:a6:d1:49:1b:85:6f:21:04:3d:d8:9b:15:99:04:
         7e:6b:9e:46:e5:f1:d8:04:fc:62:40:e0:5d:f0:a7:25:0e:7a:
         d2:d9:ef:8d:bf:0c:4e:3b:25:92:33:8e:55:f0:02:5f:46:8e:
         41:4d:85:71:ec:03:96:a2:12:1c:e4:00:44:a8:dc:06:fc:3f:
         ee:14:10:01:33:6b:87:a2:49:9a:e2:4d:cb:67:0e:13:51:50:
         73:76:89:38:fe:d6:ca:ad:ff:77:81:8d:b0:f7:7d:d2:ae:3c:
         5e:63:b8:d7:b0:9d:1b:c8:48:dd:7f:cd:d1:87:33:3e:ff:43:
         41:98:14:1f:2d:51:73:db:1f:9a:ed:68:1e:b8:03:78:f5:a9:
         0b:2e:ce:78:b2:89:f4:6c:db:93:ea:91:60:4e:ea:22:24:1a:
         15:d1:c2:30:94:79:20:ec:f1:e6:12:bd:db:f7:88:f4:20:e7:
         16:f2:ab:59:ab:3a:64:bf:e0:46:5f:6b:4d:8c:20:8d:13:66:
         7f:83:88:41:65:9b:f5:99:45:6a:b6:c7:46:59:68:0b:0e:77:
         e8:4c:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:03:51 2026 by rpki-client