Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File:                     wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier:          R/01z/5/NKxJ/5P4hi0zAuJpPLpcjpZ47DA8kICJncs=
Subject key identifier:   92:80:35:FF:4C:AD:9D:D3:BA:FD:BF:48:EF:F7:46:67:53:22:53:D2
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       019F9436FC5AEEDF9A0CC43E36DC5B997DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number:          0BF1
Signing time:             Fri 24 Jul 2026 13:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:59 +0000
Files and hashes:         1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
                          2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
                          3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: TNlJAMpNQhL34UHTqAFBp7Od1LPeUnex8Odb28ra/sI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:fc:5a:ee:df:9a:0c:c4:3e:36:dc:5b:99:7d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: Jul 24 13:00:59 2026 GMT
            Not After : Jul 25 13:00:59 2026 GMT
        Subject: CN=928035ff4cad9dd3bafdbf48eff74667532253d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:b4:cd:47:3b:af:6a:29:79:f5:14:a7:14:
                    a0:f1:a6:a7:79:34:77:2f:0a:5b:d7:d4:f4:96:9d:
                    54:e4:ce:a6:91:25:98:9b:77:e5:0e:86:c5:93:b8:
                    63:d8:a8:f6:fe:87:a3:02:0b:ec:cb:81:89:e2:ce:
                    3c:38:82:2e:df:8c:e4:eb:88:b2:03:db:02:2d:63:
                    82:b0:ae:cd:eb:8b:1a:c7:a3:eb:01:0e:67:e8:1b:
                    da:56:e6:55:16:6c:eb:e7:23:61:de:d9:89:f0:f0:
                    d3:fa:0f:e2:ec:bb:e4:ac:31:64:6a:90:0b:ec:5c:
                    92:24:13:49:63:a8:a8:ed:df:63:57:10:be:5f:93:
                    23:91:9d:4d:15:bb:fe:a2:f2:d5:7b:b4:92:82:98:
                    b5:c0:ea:63:a8:30:de:18:1b:64:d5:1b:14:d2:2e:
                    f1:61:72:b9:b2:97:b0:b6:d6:eb:28:33:74:3b:46:
                    23:1f:67:b5:ae:73:22:3b:8b:a1:80:ec:4d:a7:6c:
                    81:71:cb:3c:3c:c4:06:b2:40:d9:65:fd:04:94:60:
                    78:10:bb:5e:27:d5:ac:aa:de:f0:73:b3:38:6c:46:
                    e4:a0:5a:f8:74:27:ad:68:1e:b0:0b:e8:4c:a0:a0:
                    88:40:f6:99:3f:47:4e:ed:47:f2:1b:f7:58:64:aa:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:35:FF:4C:AD:9D:D3:BA:FD:BF:48:EF:F7:46:67:53:22:53:D2
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a2:a3:eb:5f:1d:cc:ca:ee:2e:52:7d:f5:90:d8:9f:45:84:
         1d:6d:47:d0:a9:5f:20:f5:af:e7:92:34:c0:a1:bc:bb:f0:40:
         ad:ba:29:39:41:25:e2:65:82:5e:e7:ae:01:f8:26:7b:fe:c3:
         f7:fb:63:29:86:01:70:33:55:c2:33:42:ab:a4:a5:cd:28:44:
         89:46:53:1a:b0:60:c8:0f:71:34:7d:4c:a7:ee:3b:10:b3:35:
         37:76:fa:9b:72:0a:7a:2c:fc:51:f6:85:92:18:6c:e3:14:05:
         12:38:9e:06:f6:66:6c:f1:2f:fd:d7:70:eb:60:ac:a0:e6:03:
         9d:88:9a:31:4b:f7:19:1e:18:02:91:01:94:69:20:17:f9:17:
         44:c5:ab:6e:e3:2d:42:10:4c:a8:eb:90:cf:88:69:8f:06:b1:
         fd:5e:e3:91:b7:48:a7:24:74:fa:09:d1:c1:7e:d8:53:a6:74:
         9e:32:f3:c9:b2:ed:2e:d7:d6:f6:16:18:7a:7b:b8:4b:06:2c:
         5a:d4:f3:5b:0d:6a:4c:77:da:a5:9c:71:e6:26:29:f5:09:3c:
         f6:25:9f:00:9c:3f:bf:9e:23:f7:23:43:15:45:af:14:fa:11:
         c8:be:d4:0f:25:67:18:6d:c0:48:c1:c2:03:45:9f:0c:bf:85:
         b8:0f:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:14 2026 by rpki-client