Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          ycr3qlUywlLHXq5MJDpxxHkml7KKX59ONQHP5ojmX58=
Subject key identifier:   80:F8:4E:A8:D0:BB:BE:25:90:9F:D6:AD:AA:A0:E9:ED:28:0E:F0:42
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       01A1DACAEE3A2908889540F51EA8C681F6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          08FF
Signing time:             Sat 14 Nov 2026 16:01:34 +0000
Manifest this update:     Sat 14 Nov 2026 16:01:34 +0000
Manifest next update:     Sun 15 Nov 2026 16:01:34 +0000
Files and hashes:         1: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          2: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          3: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          4: uTr13Te3pwYYdTFAT-0rxl4K2a4.roa (hash: oQV4cNUdbV2vNfYqR3e7xR1qkeePDkN6t+oSOnNTZ8M=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: UslA5cbsmcQEooMlAujgCaPdvJ3eQuAK68TVi05cWl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:ca:ee:3a:29:08:88:95:40:f5:1e:a8:c6:81:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Nov 14 16:01:34 2026 GMT
            Not After : Nov 15 16:01:34 2026 GMT
        Subject: CN=80f84ea8d0bbbe25909fd6adaaa0e9ed280ef042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:de:78:3e:e2:90:7e:06:30:2a:c1:58:f8:
                    43:c7:b4:0f:46:ad:12:fc:36:6c:bf:28:80:1f:ce:
                    3d:da:dd:36:8f:83:77:f4:73:f6:b7:61:97:8d:b8:
                    88:f3:b1:90:9e:28:84:ff:93:43:a5:9d:7f:86:a5:
                    2a:28:64:83:74:82:3e:8c:a5:7b:c6:19:17:4e:ce:
                    c1:dc:6a:f0:c7:05:5e:a5:2c:e9:d2:f0:ca:c7:f9:
                    c2:6f:64:6a:19:5c:2b:53:d3:55:11:06:d0:b8:1b:
                    80:1a:28:21:a6:68:79:3b:7f:f6:9a:84:b3:1c:f4:
                    e2:b8:ea:07:93:ed:a1:c5:21:b3:42:e8:56:96:a2:
                    21:ef:c6:57:0f:b0:d3:16:0e:ab:f3:8a:c4:e0:a5:
                    e0:87:6a:d1:79:f5:09:1c:73:eb:15:64:ad:e9:9e:
                    8f:80:d6:69:4f:d5:15:5a:f7:77:38:2b:f1:dd:04:
                    71:bc:57:e9:e4:dd:02:53:8a:5b:b7:6b:0e:69:e1:
                    ea:bb:6c:c9:be:09:f3:b7:1f:a0:e6:9e:93:d0:73:
                    1d:cc:e0:8f:a7:2a:fa:e9:4f:78:9d:c9:69:89:82:
                    3e:f7:23:72:f3:bb:62:97:f2:87:3a:a7:63:55:49:
                    2e:c8:e8:75:f3:68:48:83:a8:0b:5b:77:2b:b3:dd:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F8:4E:A8:D0:BB:BE:25:90:9F:D6:AD:AA:A0:E9:ED:28:0E:F0:42
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:8e:02:73:8e:b0:d1:da:dd:46:ae:62:b4:26:08:6c:74:ff:
         e3:db:11:fd:63:cb:4a:9f:7c:dc:5e:ef:e7:10:0f:31:dd:b6:
         6a:29:e1:49:24:0a:16:ef:6b:e9:49:f1:60:0f:1d:bf:87:67:
         c9:9b:2a:e3:66:71:c5:f4:85:0e:27:3b:9e:c8:11:0f:79:57:
         42:30:f3:9a:7f:2f:51:26:59:29:ba:0d:13:11:bf:b1:96:96:
         39:48:02:58:5c:bb:22:3c:73:a5:8e:e4:ad:21:f7:bd:04:5d:
         9f:8e:eb:7c:51:52:01:5d:71:29:22:c5:8a:cd:b6:3c:0e:b5:
         e6:ed:c2:f6:72:4b:14:59:ac:40:82:97:a5:6e:c5:3e:a9:1d:
         ed:39:b7:36:7c:a7:54:32:20:a2:10:c2:b3:24:67:b7:e3:a1:
         e4:9a:45:b1:bb:bb:80:78:5f:8d:a5:c5:73:38:5d:17:83:d5:
         81:a1:d0:f0:af:3e:e2:5b:bf:c8:b3:16:91:77:ae:b5:a8:23:
         77:2a:c5:74:a4:d5:f5:03:82:4d:b3:b9:2b:60:39:69:d4:51:
         d4:3a:3d:b3:2d:95:0e:95:01:4d:f4:6a:e4:bc:ea:f4:0a:90:
         1b:23:5c:a0:78:bb:c0:01:72:97:a9:33:ea:b2:4e:c9:78:ff:
         d8:db:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:43:01 2026 by rpki-client