Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File:                     WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier:          50eOUgH7G2LFvV1VhitiW062NEnh9a3jsVni8v7hDZ8=
Subject key identifier:   7E:AA:8F:BE:1A:68:67:5A:54:2D:C5:02:B8:7A:F8:5A:EE:36:5D:FC
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer:       /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial:       019F8F7FB56A8F1A9E4665FC7E658EB19573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number:          1426
Signing time:             Thu 23 Jul 2026 15:02:18 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:18 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:18 +0000
Files and hashes:         1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
                          2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: P1wX3SjdRlfHMAf2EnlVFZ3sKTsIdBSYt9p7jwgmItI=)
                          3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:b5:6a:8f:1a:9e:46:65:fc:7e:65:8e:b1:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59877720c014688494ea6910c83474de13e99802
        Validity
            Not Before: Jul 23 15:02:18 2026 GMT
            Not After : Jul 24 15:02:18 2026 GMT
        Subject: CN=7eaa8fbe1a68675a542dc502b87af85aee365dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:a7:02:84:55:7e:4e:0e:4d:ff:92:b1:14:
                    83:d5:d6:ba:d7:25:95:5f:11:03:2b:b8:f3:5c:a7:
                    1c:4d:82:68:b6:34:40:5f:cc:c3:52:52:e6:09:ce:
                    c2:e4:58:c2:3f:9e:ae:53:75:f2:a8:6c:ae:fd:64:
                    81:f5:fd:b9:03:d6:a9:d2:cf:25:2c:c4:4e:4a:3e:
                    eb:31:e9:57:e3:d9:db:1f:ea:8d:00:e7:4c:85:1e:
                    f5:3a:9a:be:b1:b5:5f:4b:9f:dd:f9:0d:b5:2e:22:
                    2c:54:a5:4a:c3:d2:7a:90:d7:b6:19:9c:b7:e6:e0:
                    95:19:e8:24:48:37:1a:36:97:de:03:95:4a:02:b8:
                    99:a6:47:25:1f:51:44:b9:df:8d:e2:bf:e7:ff:1a:
                    02:db:7e:d3:37:6c:c4:38:6e:63:2e:e3:6d:fa:42:
                    96:e8:fc:fa:84:c3:64:a3:6c:ad:1b:c1:26:0b:04:
                    f0:77:1b:f4:66:3b:1c:be:17:42:11:e9:02:91:cf:
                    a6:46:b8:aa:89:70:8b:96:ec:c9:3a:94:d4:6e:76:
                    06:8c:25:c4:85:74:b7:7e:6a:0b:99:b2:bb:28:11:
                    33:41:12:36:ea:ff:8c:1e:54:da:a2:ae:e7:fb:a1:
                    26:94:c7:a0:44:4a:f0:c7:27:f7:06:f0:99:6a:f3:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:8F:BE:1A:68:67:5A:54:2D:C5:02:B8:7A:F8:5A:EE:36:5D:FC
            X509v3 Authority Key Identifier:
                keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:80:8a:41:e4:52:c9:7d:18:32:29:21:e6:98:5b:e5:a8:75:
         5b:4f:d6:13:9a:1b:35:f9:b6:a3:cb:eb:5e:24:9a:36:bb:20:
         78:9b:25:3f:85:5b:b3:70:0c:c4:29:c9:6a:bb:54:c9:b0:87:
         b8:ae:dd:55:94:b2:b5:b0:2f:27:bd:f0:81:a7:5c:64:8b:5b:
         6c:a0:83:5e:f1:83:1c:7d:c6:e3:1d:b0:9c:61:8b:77:8c:f7:
         a9:51:3c:a8:f6:d8:b1:62:49:d5:1f:08:21:fd:63:54:54:eb:
         38:ba:08:cc:da:44:81:fe:a6:ae:14:0a:50:26:06:fc:08:7a:
         66:02:b9:27:1d:a3:a9:e3:09:e0:75:8c:ba:69:f5:90:8d:e2:
         71:db:d7:a1:92:83:8d:0d:2f:89:74:c5:da:e6:cb:16:bf:e2:
         b1:72:1c:a9:38:f2:43:8b:09:c1:4a:5f:77:0f:8c:53:c5:1c:
         b7:90:81:a6:a0:e9:11:13:d7:a6:ee:0a:8b:58:be:11:3d:91:
         d2:f5:41:49:db:05:6a:f0:4f:5a:25:df:8e:59:e1:6f:4a:c4:
         c6:2a:b8:51:3f:88:44:42:a2:3c:61:f4:74:53:c1:2d:46:da:
         16:fb:e2:92:fc:0a:99:e1:97:07:2d:ba:2a:26:cb:58:35:a5:
         90:e1:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:37 2026 by rpki-client