Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File:                     wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier:          oIwH/EkJxjhqr3VVwROpgyU0GNGaxCji27kep1gOPIs=
Subject key identifier:   F1:9C:89:AF:68:96:D5:D5:28:07:91:1E:AC:0D:B2:E8:2E:F8:9F:1D
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer:       /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial:       01A0CC3519145CA7A121C21871233074A423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number:          1A8B
Signing time:             Wed 23 Sep 2026 03:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:26 +0000
Files and hashes:         1: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (hash: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg=)
                          2: CkKLYj92galNREO338sWbNXvtys.roa (hash: GswGrCpFRGcvwQ2BBbOurYuHd/8bVtTdmHhmb10JZX0=)
                          3: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (hash: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY=)
                          4: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (hash: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o=)
                          5: T6WYRwpE69f1_segiofKG18EyPU.roa (hash: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw=)
                          6: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (hash: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc=)
                          7: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (hash: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4=)
                          8: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (hash: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY=)
                          9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: xCPy9JpicnyMpDQGFCIzwpZ1g4OfPeTWB2BRfckH3BE=)
                          10: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (hash: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:19:14:5c:a7:a1:21:c2:18:71:23:30:74:a4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
        Validity
            Not Before: Sep 23 03:00:26 2026 GMT
            Not After : Sep 24 03:00:26 2026 GMT
        Subject: CN=f19c89af6896d5d52807911eac0db2e82ef89f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:49:d0:ce:ba:25:4c:c4:c7:4f:08:e1:42:
                    00:e1:1d:70:87:d9:37:a3:6d:fc:ee:6b:be:4b:34:
                    30:09:73:8f:92:95:68:30:16:94:65:c9:2f:b0:ba:
                    b8:a9:d3:66:c4:dc:62:61:c9:c6:6c:22:13:77:2d:
                    9d:3a:18:9c:d1:17:33:00:53:68:2c:c8:52:84:03:
                    de:89:81:cc:96:99:a7:fe:e3:b5:88:ad:3b:7f:a0:
                    4f:2d:eb:7c:01:28:e6:d4:2a:84:7b:7f:f7:96:5c:
                    16:a1:21:11:b6:61:0a:a8:53:90:9c:d2:d5:d3:0f:
                    37:2e:df:07:8e:12:e5:50:c7:f5:37:68:63:f0:ca:
                    bb:ea:16:6a:69:bd:b0:46:7f:f1:7d:2e:b0:05:96:
                    c9:37:3e:1d:00:25:fb:4c:fd:12:6d:83:c9:d9:fd:
                    1e:e1:9d:38:66:1e:03:2e:69:30:78:22:25:f4:09:
                    13:6b:32:3c:e7:47:f6:b5:18:d7:9e:12:de:cf:1d:
                    6b:85:96:28:e3:0b:8d:5e:30:3f:74:05:39:b1:79:
                    03:69:de:81:bf:14:38:07:5e:6a:21:71:4c:cd:b5:
                    e8:2a:d0:6a:ea:11:2b:d1:b8:a7:10:ef:94:77:2a:
                    d7:96:9d:74:76:41:1b:9f:ee:df:a6:80:60:69:14:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9C:89:AF:68:96:D5:D5:28:07:91:1E:AC:0D:B2:E8:2E:F8:9F:1D
            X509v3 Authority Key Identifier:
                keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:d5:0a:93:8c:b9:d4:0b:f9:9b:63:1d:ad:ab:f0:0a:58:
         2b:bc:57:84:5c:92:31:d4:9e:47:4a:2b:df:df:2e:c4:26:0a:
         1d:06:4c:34:48:e3:f8:5b:21:3c:ab:b7:1e:b8:43:05:ad:5f:
         67:29:75:58:3c:d3:57:94:a0:6a:25:27:80:30:68:ea:12:11:
         60:50:f3:7c:a7:f8:dd:62:9c:73:a3:5b:9c:06:11:c6:23:5c:
         3c:80:09:ed:d2:48:50:ca:aa:96:38:0c:cd:d8:3e:6e:91:31:
         22:de:55:b3:1c:64:af:91:dd:f9:7f:39:e3:1d:c9:14:74:24:
         f1:ee:96:3c:9b:13:7d:64:36:b4:07:62:15:a8:97:30:94:79:
         75:90:15:4d:6b:43:4a:9b:02:a1:ea:9b:0a:b3:8d:8a:db:1a:
         a8:f0:df:b5:ea:79:ec:9a:69:29:f6:c0:0c:86:85:c8:3b:79:
         ae:11:75:56:50:d6:d6:16:af:58:49:32:5a:13:9f:cd:84:7e:
         75:d6:a1:26:aa:f7:af:a7:39:46:36:15:0c:37:2b:aa:f0:64:
         ac:9e:f8:66:3b:6b:32:91:dd:f2:71:4b:21:b7:7d:71:1d:83:
         9d:9b:a0:28:41:ab:60:31:3a:11:d9:79:9b:97:90:cc:3d:3e:
         a8:16:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:47:10 2026 by rpki-client