Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          HGbzIrEjLZO0ERxBCuRrWd34emcdacEyNbhAGnR0nzU=
Subject key identifier:   B3:16:7F:55:E7:32:93:A3:8F:C6:7A:7A:46:77:A6:CC:41:9D:80:A8
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019F905A5EF96131929BC6094F5C80F670BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          07CE
Signing time:             Thu 23 Jul 2026 19:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:09 +0000
Files and hashes:         1: L0vpPIy9GAPm6JtjRB5DBUq_p0c.roa (hash: EcWoApG1dXP+QttkNlbBQ/q//CNUzWl0bsqOIr50D2I=)
                          2: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          3: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          4: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          5: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          6: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: Y5GbnZM9deVFcg3mpKsFGcEDn6OQTggVAmAesLzz5XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:5e:f9:61:31:92:9b:c6:09:4f:5c:80:f6:70:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Jul 23 19:01:09 2026 GMT
            Not After : Jul 24 19:01:09 2026 GMT
        Subject: CN=b3167f55e73293a38fc67a7a4677a6cc419d80a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:4c:71:74:0d:a5:e2:5f:a2:e9:ee:45:38:
                    95:a5:2c:20:55:53:d0:60:3a:4b:45:da:c1:3c:33:
                    d2:a8:cb:10:73:1c:45:24:a6:78:7e:7a:7a:2f:ad:
                    13:36:6e:ce:60:0f:a3:bd:e2:e5:7c:d1:42:20:82:
                    bf:5b:29:16:81:44:0d:59:fe:5b:c1:d6:9d:db:15:
                    bb:4a:7a:69:3f:3a:97:29:b8:66:b8:00:b0:d7:e4:
                    25:3e:70:28:13:e0:fb:e7:e7:11:88:ce:13:d0:5b:
                    88:db:64:1b:79:d5:b5:4d:74:aa:a7:32:ab:83:fc:
                    e8:35:41:88:f0:f8:96:3b:46:b1:70:8b:0d:5d:74:
                    01:9a:72:58:97:47:e5:9a:56:b7:f4:f8:73:1e:7c:
                    ec:e9:08:42:8e:c6:51:3f:e1:40:5f:68:83:00:c6:
                    5c:7b:46:2b:d2:d5:9a:63:6e:30:5f:03:7d:68:da:
                    78:b4:9d:e2:b2:92:1a:5f:d7:6f:41:5e:9c:00:8d:
                    c5:ff:ab:9e:e1:9c:80:a3:e2:f4:40:b1:0a:a9:7a:
                    5b:a0:4b:c8:fc:57:a2:86:59:7f:79:ec:c2:d1:7d:
                    c7:d3:eb:27:09:de:16:2c:15:7c:0c:4b:a6:15:61:
                    18:5f:17:f0:c2:67:43:29:87:ba:6d:4b:53:26:5a:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:16:7F:55:E7:32:93:A3:8F:C6:7A:7A:46:77:A6:CC:41:9D:80:A8
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:94:84:7e:88:0b:5f:fb:b2:4f:45:de:2f:80:96:50:28:90:
         4e:77:2c:e8:60:28:40:3f:5a:9a:28:4d:ae:f0:d9:79:fc:61:
         69:6c:61:ea:ad:5b:a8:93:77:ef:70:57:dd:1e:04:81:94:d6:
         cf:ae:f2:c3:b9:5d:c1:da:3d:a6:4d:40:15:0d:5d:db:e9:0b:
         a5:c6:6e:6b:be:0e:0c:f0:8b:f9:b7:c8:e9:6f:c0:74:b4:4b:
         1a:13:dd:7a:96:cd:58:8c:ce:c1:27:e7:d6:51:39:a0:7a:95:
         7e:66:91:5c:6d:ec:76:64:96:59:cb:14:53:4d:df:bf:df:48:
         16:a4:b4:96:1b:ef:f4:4e:8a:d2:d0:b1:39:a5:b3:b2:21:b2:
         75:8d:69:f3:02:ca:dc:71:fb:be:58:57:65:b2:80:ab:af:30:
         49:50:85:69:bd:03:73:b2:ad:1c:a8:18:08:18:04:c3:f9:76:
         93:7e:6b:d4:38:33:a2:4d:1d:a5:78:ef:a7:72:3b:0b:61:9a:
         38:6b:4b:b1:37:83:1e:1b:a7:35:54:87:ad:58:4f:1e:9b:a4:
         dc:4b:72:1a:97:31:c4:e1:d9:93:bd:9f:17:22:03:e5:79:98:
         1e:f8:a7:de:38:7f:92:b5:25:3e:69:d7:31:c0:15:26:85:e5:
         ce:01:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:21 2026 by rpki-client