Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          L3e+qf+cwvYn2PWpQhgdS3Ocl3H50ngt6T3w7VTtLlQ=
Subject key identifier:   B0:F6:F8:E3:CA:09:24:58:7A:3D:F8:7E:BA:58:9C:A5:2A:00:8C:96
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       01A0D83B3F576010D782C1612EBDB8CD9A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          0D67
Signing time:             Fri 25 Sep 2026 11:02:36 +0000
Manifest this update:     Fri 25 Sep 2026 11:02:36 +0000
Manifest next update:     Sat 26 Sep 2026 11:02:36 +0000
Files and hashes:         1: JwY7qn8a3rdnRmh0s9t_pZe3M4Y.roa (hash: Kh5jCLLNLF6VLZQMkZ83iOoAb6T34T0+sDH0R/ASPFY=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: YqkH/YePu2+5z+b00+jEbh2qlIXDGMQzG0UVaEhNTsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3b:3f:57:60:10:d7:82:c1:61:2e:bd:b8:cd:9a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Sep 25 11:02:36 2026 GMT
            Not After : Sep 26 11:02:36 2026 GMT
        Subject: CN=b0f6f8e3ca0924587a3df87eba589ca52a008c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:9f:94:97:2b:78:02:e1:9b:f5:37:62:f4:
                    ae:d9:c6:a5:1f:9c:ff:ef:d4:ef:55:37:55:4d:38:
                    2f:f8:25:a1:37:dd:8e:8d:51:b6:99:68:c6:0a:33:
                    f6:0a:d1:4d:3a:be:1f:41:2d:fb:62:d5:61:f8:f7:
                    84:a3:ba:cf:ca:3a:9d:4c:9f:d6:36:23:8a:04:25:
                    21:eb:f3:23:83:33:6e:ca:9b:af:59:0c:25:42:f8:
                    14:da:9c:45:52:4c:ae:96:3b:b0:b8:c5:a1:59:4c:
                    87:a5:50:4a:dc:c7:63:e8:34:f2:b1:62:f6:5e:ba:
                    f7:69:ed:99:ff:fd:43:0c:cc:a3:7e:4f:1f:d9:06:
                    0a:ff:7e:78:18:06:81:ae:ac:33:b5:95:aa:91:be:
                    c5:d1:cf:45:e4:7c:5c:5e:7b:27:d9:c8:97:39:6f:
                    ed:08:fa:ea:eb:b5:a8:d9:e8:2e:61:ec:ea:0f:58:
                    1d:b4:85:fc:17:13:3d:81:5c:05:c4:70:7c:83:72:
                    f4:97:40:2c:ce:e3:c2:22:d1:a8:6c:ac:62:fc:74:
                    75:e1:1e:96:a3:b7:aa:c2:df:f5:13:4b:f3:dd:44:
                    8b:20:5a:e1:f3:52:85:1f:6a:a8:87:fc:93:ea:ef:
                    36:ee:f4:50:94:37:a2:52:4a:de:38:e5:19:a6:7f:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F6:F8:E3:CA:09:24:58:7A:3D:F8:7E:BA:58:9C:A5:2A:00:8C:96
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:75:df:9e:a8:dd:81:80:1e:40:e7:f0:f4:54:29:3b:94:
         f9:d8:a5:28:ed:71:37:55:94:a8:19:a5:82:ae:59:bf:cd:3c:
         5c:e1:11:ab:64:4f:c0:a4:e2:8f:1e:40:5f:d1:2b:54:b3:da:
         28:2e:ce:2b:22:88:6e:7b:79:1d:98:08:01:6d:ec:ec:29:eb:
         3d:f8:05:c4:0f:df:87:10:15:93:6c:9d:e6:a8:81:8b:e7:e3:
         2d:65:87:5d:67:42:2b:7c:7a:66:f7:e7:5d:8f:b9:e7:2a:40:
         90:17:77:05:76:f8:af:27:a9:35:0a:eb:03:81:d7:2b:a7:69:
         5d:ac:22:dc:e0:98:4a:7a:5c:7f:19:61:4e:01:70:a9:98:b5:
         4b:9f:3b:05:95:fa:6e:6e:95:89:5c:3d:32:c6:18:96:c2:1d:
         d6:35:80:74:96:a4:7f:f7:0f:67:55:d6:be:1f:a5:0b:cc:15:
         f0:54:12:a1:0b:9e:b8:39:b6:5c:5b:c6:88:3a:5d:f2:2f:a4:
         30:25:8b:84:39:a2:88:8c:66:24:00:5e:fd:2e:96:d0:ce:65:
         09:ce:5a:1e:c1:c2:b5:f4:03:55:a6:f0:27:3b:ac:d8:75:dd:
         a6:5a:42:ae:f3:b5:a2:0f:96:c1:1b:7b:92:3a:9d:47:4b:47:
         5e:0a:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:37 2026 by rpki-client