Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File:                     wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier:          jFuYnX3tXohxVkprtJwmolMLOVpBy3s86wjzJw7Yb8o=
Subject key identifier:   B1:48:D0:BE:06:D5:3D:1C:2B:88:B1:5E:B9:5A:7F:4E:AE:34:1B:6E
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer:       /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial:       019E1EA36A804FDEC43A4C5A5A9B3F25B5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number:          14B4
Signing time:             Wed 13 May 2026 00:01:26 +0000
Manifest this update:     Wed 13 May 2026 00:01:26 +0000
Manifest next update:     Thu 14 May 2026 00:01:26 +0000
Files and hashes:         1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
                          2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: nQYR8hoLhAsE16yH0D52roBOOFSlhCW2RyYeOVBbicw=)
                          3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:6a:80:4f:de:c4:3a:4c:5a:5a:9b:3f:25:b5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
        Validity
            Not Before: May 13 00:01:26 2026 GMT
            Not After : May 14 00:01:26 2026 GMT
        Subject: CN=b148d0be06d53d1c2b88b15eb95a7f4eae341b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:5b:bf:2e:fe:93:34:83:cf:73:1f:8f:68:
                    c1:32:34:6f:b2:19:43:ed:c4:76:b1:a3:ce:97:c3:
                    48:f1:02:b0:02:d1:f4:9e:d2:06:85:a9:c8:99:da:
                    22:c5:08:4d:80:3b:d9:f6:3f:5f:b2:42:bf:fc:37:
                    09:bf:7e:e8:c8:62:eb:da:7d:ef:64:f9:a5:22:da:
                    c8:29:1e:6f:d2:9e:2a:24:d8:93:d0:c1:58:50:8c:
                    15:10:be:78:a5:a6:2f:d8:9b:f0:43:ee:6c:97:46:
                    76:5e:f5:13:1b:00:27:94:98:b7:b4:1c:4d:1c:28:
                    5a:9e:a9:48:e5:d6:fd:12:4e:d2:b7:1a:75:1e:02:
                    91:cc:a7:7a:eb:49:a3:ab:81:d1:bc:0d:76:03:99:
                    4d:8a:4d:f1:b9:e1:c5:f5:ed:21:e9:6f:2a:45:24:
                    fa:b9:c1:6f:9e:be:d8:63:38:9d:c4:9a:08:c5:7a:
                    73:6e:fb:80:3e:0b:d3:7a:87:92:21:34:0b:90:5c:
                    c0:83:c8:7e:ca:22:d7:c0:c8:33:4f:1b:b8:5b:df:
                    68:9f:6f:0a:59:76:5d:59:24:e2:f3:b3:27:0f:a7:
                    27:83:09:ec:06:30:75:a7:e0:24:29:ce:0b:c1:9b:
                    30:21:11:cc:18:fa:49:da:13:f6:04:72:f0:dd:88:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:D0:BE:06:D5:3D:1C:2B:88:B1:5E:B9:5A:7F:4E:AE:34:1B:6E
            X509v3 Authority Key Identifier:
                keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:a9:97:f0:4c:23:e6:92:7e:1c:f0:d4:7a:3d:c7:9a:bd:
         92:6b:e6:5b:81:92:56:c9:a4:49:93:3f:1b:c0:f8:72:4c:4a:
         ab:1f:d2:9b:99:7c:11:6f:9e:53:0d:38:3d:e6:71:c2:9d:df:
         89:95:bc:00:5f:c1:e0:3b:e6:6c:40:69:b3:39:5a:cb:fe:a8:
         8d:56:54:a6:78:9c:65:17:47:7f:57:5a:b7:ae:f9:1b:e5:25:
         d5:12:c8:a3:2d:d1:63:77:2a:2c:5a:12:b1:e6:87:32:d6:37:
         57:e8:de:88:83:c2:13:d5:72:60:74:86:f0:0d:2d:2c:83:22:
         4c:7c:79:0f:b5:7d:43:fb:84:88:b8:92:ba:d7:9c:92:0e:08:
         d8:76:13:24:3b:94:2a:f9:2b:27:ff:c8:5e:2b:df:be:5e:b2:
         d6:e4:50:6e:68:fb:06:fd:e4:f1:f9:bf:7d:8a:0d:52:99:66:
         7f:38:9e:7f:a1:37:7e:be:95:86:ce:17:82:f7:29:d8:0b:ba:
         10:19:49:18:b2:14:f9:3c:31:c8:c3:b2:23:3f:3c:7d:25:f4:
         db:a1:e8:9a:dd:fb:17:7b:ed:6d:09:a8:13:02:3a:63:74:8b:
         dc:58:39:f2:39:a6:c5:cc:0a:9e:3f:f8:49:67:07:80:e7:57:
         2a:2f:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:27 2026 by rpki-client