Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          CTLkKkgyTEzkv+MZAZUgRgcHDfhIu8mYyBgiacdvd0E=
Subject key identifier:   F2:43:93:EF:72:A9:08:6C:7E:CC:DB:B2:84:42:57:45:BE:37:6A:17
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       01A0CCA35D6305C7CC3A4C56931086469754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          1A70
Signing time:             Wed 23 Sep 2026 05:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:53 +0000
Files and hashes:         1: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
                          2: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
                          3: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=)
                          4: MPnZ2IAC1xgd07uCZkieW893YC0.roa (hash: Pp3PeX0RbMqeepjALv8Rlw2HnxxIY16HtKih3ySkz5c=)
                          5: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: eIsF0wA2RE0AL9+637rQ98G2v6Y8UAxUDA1xc6k/hyw=)
                          6: lZEX5TKEx5hCkasDPbRjOyHPXGI.roa (hash: tjb5iXKbv01rpTz7gJYnJJIH0J2+gq3FvhNX1/NC5Xs=)
                          7: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
                          8: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
                          9: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
                          10: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=)
                          11: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=)
                          12: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:5d:63:05:c7:cc:3a:4c:56:93:10:86:46:97:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Sep 23 05:00:53 2026 GMT
            Not After : Sep 24 05:00:53 2026 GMT
        Subject: CN=f24393ef72a9086c7eccdbb284425745be376a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:8d:0c:cc:71:15:e4:d2:05:08:6a:24:3e:
                    39:e2:a5:19:6e:a5:86:1c:fa:89:62:cb:9f:71:13:
                    62:16:06:2a:fb:cb:4f:2d:74:63:af:11:1e:71:dc:
                    6f:91:da:04:15:d6:df:44:1d:cf:59:fb:45:df:a5:
                    2c:6f:ef:77:3d:0d:62:65:8b:51:c8:d0:7c:4f:34:
                    3f:73:c3:93:aa:9d:8d:71:e7:64:63:91:6b:30:58:
                    65:f0:54:61:18:f2:ac:3d:ed:d7:18:0a:5d:bb:86:
                    8b:95:05:6d:d2:ee:c6:84:d0:36:59:92:a5:8f:8c:
                    a1:6b:e7:f7:fe:e3:cf:8a:a0:f8:04:1c:9e:d5:e4:
                    21:b8:22:6c:d4:48:d8:a2:75:58:84:ff:1f:e5:32:
                    b9:1e:9c:23:d3:27:5c:0a:23:b5:7e:81:f2:10:7e:
                    26:68:03:25:74:ce:14:fb:e3:35:de:37:8e:a5:c4:
                    bf:64:75:32:cb:6b:ca:ac:68:42:4b:2a:75:36:ea:
                    12:00:f4:b6:ff:d9:8c:1f:bd:7d:52:7a:22:14:f8:
                    e8:2a:d9:e6:34:4e:2e:42:6b:4e:38:7c:ec:e2:49:
                    32:44:64:15:30:ea:a4:8f:33:8a:9e:18:ef:3a:91:
                    b8:23:62:67:a4:ec:f5:83:68:6c:ed:d5:39:f0:ce:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:93:EF:72:A9:08:6C:7E:CC:DB:B2:84:42:57:45:BE:37:6A:17
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:08:d7:37:ae:6b:54:7e:e8:58:75:4b:a8:c8:3c:ea:7a:07:
         86:8f:40:f7:50:20:a5:ac:bd:cd:72:f4:2b:f7:aa:ee:9c:bf:
         b0:db:c1:10:34:a7:6b:77:bb:d5:8c:ab:a5:6c:3d:7d:2b:21:
         07:93:f5:8e:71:05:f3:fa:97:f3:1d:97:25:cb:a3:27:cf:43:
         d1:cc:37:ea:35:91:2f:22:a5:97:c7:82:b6:e2:41:29:0c:63:
         11:66:3a:49:de:43:00:3e:ea:31:6b:8f:d8:00:e6:6f:8b:e2:
         1d:16:8b:c8:9b:fb:2e:eb:0e:48:68:d2:30:91:76:77:1a:57:
         8b:2c:68:b9:84:f0:aa:ac:af:3a:62:7d:a3:1a:b3:05:53:63:
         85:4a:aa:ca:8c:f2:a2:a2:7e:ce:bc:ac:c7:84:3b:19:17:c2:
         71:b2:df:d8:d8:6a:6e:f7:e4:af:9d:5c:c3:95:c7:02:ef:54:
         b6:d8:44:b7:f2:22:ad:6f:e5:1f:2a:6c:70:56:e1:d9:c0:c4:
         7e:0e:fb:df:eb:6c:e1:ef:63:fb:02:b6:ab:a2:ca:77:8d:4f:
         c5:f2:3e:f5:90:63:1c:13:09:c2:25:4b:fe:53:61:c3:d6:3c:
         bf:16:f5:b8:b4:30:91:dc:10:62:37:7f:c9:ac:4a:b6:7f:74:
         3c:fb:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:15:54 2026 by rpki-client