Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
File:                     WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft (raw, json)
Hash identifier:          y3uQZves7HbzkqtO8khPQ7Qb7IhTbinUiuEd29Vz/Zw=
Subject key identifier:   0B:47:2F:EF:AB:C3:EB:A4:2B:39:38:AF:A1:5C:28:C8:82:66:F8:FE
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Certificate issuer:       /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial:       01A0D45E0A12F3BB3B5CE268AE9656688D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 17:02:07 +0000
Manifest this update:     Thu 24 Sep 2026 17:02:07 +0000
Manifest next update:     Fri 25 Sep 2026 17:02:07 +0000
Files and hashes:         1: NuZANK5Y2pq06F_aaqEFEzMCKPs.roa (hash: ebap13c4g1got53ocFULOxVlWLzAt5eAM9gnlYjXpvM=)
                          2: WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl (hash: logH08WBNFnSgzKS76xMvy7begokqL6/biKZhUoN3U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5e:0a:12:f3:bb:3b:5c:e2:68:ae:96:56:68:8d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
        Validity
            Not Before: Sep 24 17:02:07 2026 GMT
            Not After : Sep 25 17:02:07 2026 GMT
        Subject: CN=0b472fefabc3eba42b3938afa15c28c88266f8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:0b:43:c4:4d:69:11:b4:c1:d9:30:60:f0:
                    0b:81:e6:19:37:1c:1c:30:23:3d:ac:29:41:e1:8e:
                    62:0c:b4:8b:6b:89:4d:4a:01:a2:f9:86:53:21:a8:
                    e1:0c:6e:f1:2a:81:6e:64:67:13:c1:03:bd:2a:8e:
                    84:2f:2b:25:a9:b3:c9:6e:70:f7:47:3a:6e:78:29:
                    bb:23:d3:3e:bc:77:f8:46:14:ac:19:d9:e9:3f:f4:
                    92:e7:63:df:96:6b:4b:5e:5b:87:4d:3e:03:b6:53:
                    77:53:22:f7:64:f9:51:7d:09:ba:4f:a1:3a:ad:1b:
                    cf:07:d5:fb:e6:f6:a8:19:74:5b:0f:ef:e8:72:b0:
                    a9:76:78:90:f3:88:f0:66:c9:06:0f:6e:87:14:96:
                    16:84:39:24:19:a8:7f:05:21:cb:0f:9e:a4:e5:48:
                    0d:71:7e:8f:2e:19:9b:71:30:c8:5b:a6:d6:84:aa:
                    68:4d:46:97:68:d3:72:cd:db:23:d1:17:83:df:dd:
                    3e:99:2e:33:5a:da:5d:c2:18:64:7e:aa:77:7c:1a:
                    81:72:49:a0:48:2d:08:5d:76:22:fb:df:cb:ce:21:
                    f3:78:8e:ca:91:fa:39:72:2c:3a:cd:7e:74:c3:7b:
                    63:4a:d6:91:37:65:4f:e1:3f:d3:5a:33:20:2b:42:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:47:2F:EF:AB:C3:EB:A4:2B:39:38:AF:A1:5C:28:C8:82:66:F8:FE
            X509v3 Authority Key Identifier:
                keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:1c:b8:aa:b0:09:e6:bf:15:ae:87:db:f2:d3:3c:16:81:
         f5:cd:f8:46:10:fc:c6:da:03:77:45:94:0c:16:d9:03:c6:e7:
         ad:a3:92:fa:57:7e:2f:38:98:48:0c:3c:ce:49:2d:b7:18:16:
         35:42:83:ba:26:b2:fb:69:3a:e3:92:cf:66:31:a5:14:c1:b1:
         f3:67:d7:cb:e4:8d:ce:41:10:e7:8e:df:45:12:87:ac:ef:4b:
         1a:49:4a:6b:6c:35:bc:23:49:d5:ca:7c:9b:82:98:f6:4c:ed:
         76:0c:a6:9d:a3:bf:d2:cf:2f:ca:1d:ef:2b:be:51:27:51:a6:
         b6:bb:16:1a:c3:d0:b4:95:75:6e:e6:72:72:13:23:ea:6c:1f:
         6e:fc:33:de:7d:d7:9f:9e:dd:84:14:c9:e3:69:31:d8:35:31:
         15:7d:df:96:e5:36:c1:ac:c1:c7:69:a8:1d:40:9c:81:b4:f3:
         99:23:12:9b:9b:a3:aa:2d:38:e9:52:c6:80:74:83:2a:a9:79:
         95:3a:af:c1:06:6e:b1:a2:bb:b0:cc:81:13:cc:5b:e3:1a:20:
         32:54:4a:84:04:27:22:17:e6:48:6b:4e:bb:ef:26:67:4c:f2:
         95:d1:4b:bc:3d:86:8f:95:92:bf:d4:cc:ea:90:10:6a:b1:ea:
         30:42:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:05:46 2026 by rpki-client