Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          Z9IxbAnczvU/f5SW0XHosKPYz2pBKNjB8IyWcgr9jg4=
Subject key identifier:   52:E3:A2:E8:0A:9F:6C:90:34:93:53:D2:BD:54:A9:8C:99:24:91:8E
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       019EBF9105FE5A92E789C861AEEA6E8CD29B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          0640
Signing time:             Sat 13 Jun 2026 06:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:12 +0000
Files and hashes:         1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: 2ohSbkhaDMtd+exLf7L4tUU79jF+pCdvks/J4dEdzuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:05:fe:5a:92:e7:89:c8:61:ae:ea:6e:8c:d2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Jun 13 06:00:12 2026 GMT
            Not After : Jun 14 06:00:12 2026 GMT
        Subject: CN=52e3a2e80a9f6c90349353d2bd54a98c9924918e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:53:6e:4d:4a:39:19:0c:f9:b1:e2:42:3f:
                    34:f4:ff:9f:e0:b4:fc:c2:e0:98:a4:87:e2:28:42:
                    7c:29:44:25:7d:e8:6b:7a:b8:8d:13:6e:6d:32:5e:
                    68:a4:ad:31:d9:b1:02:5d:0c:2c:e3:b5:9c:cc:bd:
                    2c:f4:05:49:b3:8b:a8:4c:c3:87:c4:c8:29:a6:96:
                    da:93:cd:61:c4:04:5b:1b:e3:70:5c:7a:54:93:43:
                    9c:9e:05:88:5a:17:a7:58:bd:0d:15:e2:58:5a:f5:
                    53:dc:9f:ca:cf:af:00:dc:ff:4c:5f:3a:bc:79:db:
                    a2:f2:c7:e4:10:27:84:e1:09:9f:a0:08:f7:d8:cc:
                    ab:35:f3:42:d9:5f:51:5d:a5:4e:3e:04:4b:c9:a9:
                    4b:16:bb:89:37:71:72:84:30:68:d2:ec:72:0d:f8:
                    c3:0d:a4:f5:f9:2b:72:02:be:86:91:9f:ac:b6:a3:
                    4a:6c:e1:1c:ac:73:e8:c0:80:8b:97:64:ac:3b:f9:
                    33:ea:0b:90:71:02:fa:2a:43:00:91:01:70:03:34:
                    06:2d:b7:b9:be:e0:50:d6:ae:30:2b:a1:54:c2:62:
                    37:7c:b2:5f:cd:ae:aa:8a:27:ff:9f:ee:6d:e2:0d:
                    a2:37:92:b9:80:82:17:f7:21:f2:f9:18:e3:a0:4d:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:A2:E8:0A:9F:6C:90:34:93:53:D2:BD:54:A9:8C:99:24:91:8E
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:19:7c:76:18:09:08:44:fe:bf:ec:f3:50:ff:e7:11:67:
         6c:15:c6:36:f7:d2:6d:f2:6e:2c:5b:73:54:a6:db:98:6c:25:
         f8:f6:94:3f:b8:30:7a:65:3d:32:04:45:9a:73:c0:ad:b0:84:
         a5:1d:27:6f:e1:c2:16:c4:dd:c0:87:41:4f:2a:05:4b:53:de:
         b1:75:e5:5f:74:d8:79:f5:42:65:48:b0:de:f8:c1:df:48:25:
         be:52:d0:de:50:f5:4b:5b:21:89:df:bc:32:ed:cc:53:d6:8a:
         3b:b6:d3:4e:20:5f:f7:0c:9f:5c:04:60:de:84:09:a2:35:9f:
         4d:53:ba:95:47:cc:7f:b7:1a:49:c0:79:d6:89:4b:f2:e9:a4:
         ec:7f:b4:0a:fe:f8:e4:0e:ef:be:04:a6:5f:7a:40:1b:09:0d:
         bd:bf:7d:1a:e2:40:1d:a3:4a:c7:63:00:51:62:ef:63:b0:00:
         df:09:c9:8e:8e:13:62:47:73:44:d6:2a:09:32:d9:67:45:de:
         fa:cc:f3:73:62:d6:a4:ba:0e:46:f0:d7:29:f8:a1:b5:6b:33:
         f2:5c:3f:a4:9b:9d:ff:a9:3e:87:e2:66:67:b3:b1:1e:1a:b9:
         49:68:04:54:39:ee:e5:91:e6:df:bc:81:ed:c5:8e:d3:bc:2c:
         5a:d8:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:36 2026 by rpki-client