Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          /2UpAPHnkV8a6si5hbCHKe4B2fqndNO3wsLHzN6l4s0=
Subject key identifier:   16:33:D7:C5:FC:C1:B3:A5:2B:F1:0F:41:43:60:52:FE:25:8E:34:89
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019E1D90A67B1A4D03342E75B27F36202FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          070E
Signing time:             Tue 12 May 2026 19:01:19 +0000
Manifest this update:     Tue 12 May 2026 19:01:19 +0000
Manifest next update:     Wed 13 May 2026 19:01:19 +0000
Files and hashes:         1: L0vpPIy9GAPm6JtjRB5DBUq_p0c.roa (hash: EcWoApG1dXP+QttkNlbBQ/q//CNUzWl0bsqOIr50D2I=)
                          2: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          3: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          4: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          5: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          6: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: 1mgkx3VvA0KZXntIzlo3tPS2iaBC3VkOkBZzM1TENyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a6:7b:1a:4d:03:34:2e:75:b2:7f:36:20:2f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: May 12 19:01:19 2026 GMT
            Not After : May 13 19:01:19 2026 GMT
        Subject: CN=1633d7c5fcc1b3a52bf10f41436052fe258e3489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:84:82:ef:01:28:40:70:a7:ab:01:bd:1d:
                    56:70:58:6c:8c:8b:e2:fd:cc:28:4c:86:89:d3:39:
                    d9:4e:aa:7e:ab:af:c0:63:ac:00:44:e5:a3:98:0e:
                    e0:eb:7c:54:f1:1e:e3:4a:41:72:54:55:ef:78:71:
                    f5:6c:fd:cf:64:fd:17:93:82:73:06:d0:40:e6:32:
                    d4:fc:e8:cb:0a:9a:54:7e:e0:d5:cc:e0:70:d8:e0:
                    a4:eb:53:d1:42:16:88:bf:e7:ff:18:25:25:f1:6a:
                    86:49:97:d9:0d:3a:8d:2a:c9:7d:3f:15:7e:24:37:
                    06:5e:de:e9:ac:0c:90:62:79:0c:0b:1f:d1:05:12:
                    5d:33:bb:59:d7:9d:85:ee:0d:af:d3:fe:07:73:92:
                    93:92:77:03:bd:91:2e:55:b3:95:2e:3e:7c:a7:33:
                    83:08:57:ab:20:86:b9:16:99:4d:17:f1:73:4a:c0:
                    18:f8:2b:60:15:83:d6:05:55:d3:29:fa:bc:53:45:
                    da:d3:16:b0:8e:b8:bf:65:cc:04:e8:f3:55:19:be:
                    3c:c3:a7:38:6c:d4:da:28:f6:17:38:ca:f8:c2:67:
                    66:64:15:d1:49:d5:53:9b:c5:e3:e0:93:a7:c3:af:
                    7e:67:7b:7f:d8:d6:35:85:7f:55:e2:1d:a6:6a:7b:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:D7:C5:FC:C1:B3:A5:2B:F1:0F:41:43:60:52:FE:25:8E:34:89
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f1:ac:dc:cd:a3:33:cb:99:5e:ca:db:d9:f3:cf:f5:1f:9e:
         60:19:44:56:f2:d8:a3:90:7c:d4:43:1c:31:c8:11:dc:ca:2d:
         ab:c2:82:e2:eb:ba:e6:7c:b8:15:3a:57:fd:ee:36:ef:b0:f5:
         dc:d1:67:b9:08:9a:4d:7e:b3:6f:83:aa:e5:99:b5:bd:43:b0:
         a8:d3:16:b6:c3:fd:09:fa:9e:a6:74:37:77:82:c1:80:94:50:
         59:03:e5:11:f5:43:4c:56:1a:3b:c5:a9:f6:36:0f:10:84:ab:
         41:b9:7d:01:ed:eb:48:06:0d:7d:21:ed:7d:9c:4d:7a:a4:27:
         56:80:c5:8d:f9:d0:35:99:6f:b0:b0:1a:52:2c:71:c0:dc:12:
         81:22:60:de:74:69:ac:66:e1:67:f2:88:43:07:6b:ce:af:fd:
         6d:5c:6c:fd:d5:02:3a:3e:e5:79:af:cd:85:26:53:a7:09:85:
         ab:cf:54:16:c0:88:60:de:b7:2f:3f:5a:95:b4:ed:1a:15:84:
         85:99:24:d6:fa:d5:c8:6c:74:88:c3:15:f5:cd:ca:a7:1e:0d:
         52:e7:ce:cf:83:37:6b:fe:77:9a:d5:9c:98:62:b9:20:77:50:
         4d:b2:8b:7f:e2:6c:05:ab:c0:6b:69:05:12:2d:75:04:25:8a:
         a6:73:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:25 2026 by rpki-client