Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File:                     wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier:          fFCZ/XLodyCfZUoxVaV46gKQyuH6eciTh0X18FRtpLQ=
Subject key identifier:   56:92:9A:E5:7B:25:00:CD:86:55:38:BB:BD:6E:DA:9D:47:CB:2E:CC
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer:       /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial:       019F91DB0A4D0EFF803A5D3BE84C8D48ACB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number:          06BC
Signing time:             Fri 24 Jul 2026 02:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:19 +0000
Files and hashes:         1: gV9crIDUuxzdFMitCgOaVsZoy_M.roa (hash: pE8mlv/DDAD/v56xUsBEPIpYP5HBve6yv4Le8BMYrag=)
                          2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: x2VL3LplCEEpquFaI3pNpaYq3cMIKDa2C/TDYtTtaGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:0a:4d:0e:ff:80:3a:5d:3b:e8:4c:8d:48:ac:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
        Validity
            Not Before: Jul 24 02:01:19 2026 GMT
            Not After : Jul 25 02:01:19 2026 GMT
        Subject: CN=56929ae57b2500cd865538bbbd6eda9d47cb2ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:aa:f7:ca:e5:6d:25:17:7b:fa:62:c5:cd:
                    33:5b:cc:90:bf:d8:ca:a6:7e:dc:94:76:0e:5e:84:
                    14:dc:05:07:2c:ff:7a:d7:e8:5a:ac:e2:4d:24:42:
                    78:78:45:fb:43:98:04:a1:17:f0:dc:30:39:8a:a1:
                    45:54:9c:a8:14:5a:5c:1f:cc:23:71:1a:1a:a8:fa:
                    6f:8a:8e:70:c4:bf:a2:46:e9:54:34:a4:4f:b3:89:
                    6b:f4:bf:22:e4:6c:06:be:ef:ad:de:0e:38:ee:96:
                    7a:15:fd:ed:7d:db:1e:23:09:33:22:c9:d5:9b:e5:
                    68:4f:bd:86:f2:5b:b9:32:df:f0:77:15:09:e1:ef:
                    6a:b5:ff:e5:96:04:ab:f7:82:48:56:da:01:62:ae:
                    45:5a:b4:44:58:7c:78:ec:88:fa:5b:51:80:0d:75:
                    cd:96:c7:0b:6c:a1:b1:68:b7:ca:e5:73:6d:f7:5e:
                    95:13:e5:46:67:c8:13:cb:54:d8:e7:c3:ac:85:46:
                    e7:5e:f7:9a:9e:89:7f:0d:68:95:92:04:5c:25:c3:
                    24:1e:29:e9:fa:8a:d9:7b:ac:50:36:75:83:f4:a5:
                    34:4a:4a:0c:4c:3b:7a:c1:f4:e9:7c:15:85:c7:90:
                    eb:64:08:30:cc:de:ed:d4:9a:cc:87:43:03:bc:f1:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:92:9A:E5:7B:25:00:CD:86:55:38:BB:BD:6E:DA:9D:47:CB:2E:CC
            X509v3 Authority Key Identifier:
                keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:e9:37:19:d0:0e:c9:d7:58:c2:17:b9:29:cf:d8:d9:24:
         da:28:cb:79:7b:50:c8:b4:a0:55:c8:e5:95:a4:c1:75:0a:94:
         39:41:e0:f3:9c:4f:c6:12:83:3c:50:6d:2d:63:8a:5b:a9:c9:
         f2:63:6f:af:44:bf:af:9a:ce:39:59:c4:4a:fe:28:31:d8:21:
         21:c1:e3:f1:eb:46:b4:91:c3:dc:c2:3a:b5:df:c5:4c:df:a3:
         f2:3e:2f:99:5f:40:72:20:c7:07:d5:32:1c:5f:71:76:c8:ab:
         70:2e:33:15:2b:bb:df:e2:4a:ac:f2:fc:d0:1d:30:7e:7d:85:
         47:74:c5:5a:46:f2:bc:55:55:c7:2d:82:32:33:96:bb:c8:10:
         da:f9:fd:04:a0:7f:62:d7:8d:4f:eb:91:93:2f:78:24:b4:2b:
         cf:40:ad:6e:2b:4f:f7:bd:a2:6b:f7:02:77:be:e5:ee:72:ec:
         6e:4e:3f:a2:05:1e:e6:26:85:bf:ba:4b:03:00:78:2b:9b:f4:
         cc:73:75:9a:4f:c1:50:d0:ce:82:ae:04:71:bd:f7:9e:45:3d:
         ab:60:9e:be:94:3f:7f:a8:5c:f1:f5:b1:cf:14:69:e9:a2:28:
         26:40:d1:3f:f4:32:c6:a2:20:a8:0a:18:04:19:c4:af:a7:12:
         1d:f6:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:24 2026 by rpki-client