Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File:                     WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier:          2RJ5lyCUO+/K7uPRPNzfVGtsZuadB6mmX2gNOMpYv/Y=
Subject key identifier:   6A:C4:9E:B7:BB:80:F0:F6:AE:34:FF:89:D8:9E:3F:76:51:E2:28:29
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer:       /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial:       019F916D418D0B2960AB09896BD2C515F793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number:          1427
Signing time:             Fri 24 Jul 2026 00:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:24 +0000
Files and hashes:         1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
                          2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: CGTZARCHSVXaijI3NgvGcq2LJglBKToIv6LcQGk2Kpc=)
                          3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:41:8d:0b:29:60:ab:09:89:6b:d2:c5:15:f7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59877720c014688494ea6910c83474de13e99802
        Validity
            Not Before: Jul 24 00:01:24 2026 GMT
            Not After : Jul 25 00:01:24 2026 GMT
        Subject: CN=6ac49eb7bb80f0f6ae34ff89d89e3f7651e22829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:bf:aa:5d:e8:c1:66:4d:4a:5c:1e:30:66:
                    f8:db:82:da:d1:26:88:f2:bb:0a:20:b4:9c:88:ac:
                    93:31:67:c1:36:5b:2a:c2:af:17:6c:2e:c6:4d:a8:
                    fd:3d:72:d3:f0:d3:7d:2a:5f:6f:37:f0:c0:3b:80:
                    ac:58:a5:be:b3:64:c7:69:04:57:e5:be:db:8d:39:
                    a6:db:a3:5d:00:b0:0a:7a:0e:bd:d4:81:07:e1:5f:
                    de:2d:0e:10:40:ab:5f:b0:7e:57:94:c6:ab:9c:e8:
                    97:13:b7:32:ea:6f:31:e4:f1:b8:f1:de:58:91:d6:
                    9d:b0:04:3d:d3:df:d8:25:19:48:49:7f:44:98:f6:
                    d2:9c:52:6f:d8:d3:c2:fb:ea:0d:5f:58:c2:c2:0a:
                    68:92:19:0b:98:bd:8f:60:00:2e:f2:43:d8:45:35:
                    34:81:f2:03:00:fc:4e:ab:a4:d6:3b:d8:ea:78:74:
                    9f:50:42:7c:68:fc:c5:f1:4f:15:48:47:3e:6c:ea:
                    6f:b4:e9:b5:92:66:31:be:16:ef:db:96:5e:4f:0c:
                    4f:ca:f2:d6:d0:a8:e2:7a:1a:bd:69:dc:c8:b1:7a:
                    3e:fe:5a:17:74:b6:ad:4c:6a:b6:4e:fe:c0:a0:90:
                    28:8b:68:47:73:da:19:5b:c2:03:31:3e:59:c9:28:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C4:9E:B7:BB:80:F0:F6:AE:34:FF:89:D8:9E:3F:76:51:E2:28:29
            X509v3 Authority Key Identifier:
                keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:a9:a9:89:f7:9a:94:48:de:91:14:b0:59:b4:59:57:c1:
         78:08:fa:85:4b:78:13:62:68:d6:3c:5d:c7:6a:6a:ca:b9:29:
         15:e4:84:df:93:f3:43:95:3b:af:e2:9b:60:de:26:c0:90:f0:
         8d:14:45:c8:3c:9e:1f:fc:c6:f9:7c:1b:df:b9:8d:40:d8:74:
         11:c3:a0:ea:11:4a:2b:45:7a:dd:0e:b8:e8:bc:94:f3:c2:ae:
         bb:ee:aa:c7:5b:53:f7:ee:83:b7:e4:48:7f:c6:7a:53:a3:0a:
         71:43:1f:02:6a:aa:e9:fb:48:a0:b1:3d:22:26:5d:b5:da:36:
         24:fe:4c:b2:7d:60:fa:8b:65:16:c8:ec:e0:49:b2:3b:4d:4a:
         8f:b7:ad:13:f7:65:20:6d:21:a9:bc:81:50:b9:c8:d2:af:f0:
         43:ec:38:4f:62:27:7f:a9:21:00:56:a5:ae:49:4a:34:4b:3c:
         48:04:9b:50:be:a4:3a:d1:9d:10:90:0a:7e:eb:2a:0e:4f:68:
         a7:f7:5e:99:37:09:a7:b7:aa:9f:cb:8c:67:6d:28:32:cf:90:
         d9:28:72:e5:48:51:57:67:e8:90:31:ab:7a:73:b3:63:20:fc:
         ad:ca:09:94:ac:4a:db:c6:ea:5f:6c:53:23:b6:35:a8:b6:d9:
         bb:51:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:03 2026 by rpki-client