Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          jLyglX8LT2l+cQjlvGcYUYMpyJAWKmdUwERiIrktu5g=
Subject key identifier:   DD:61:7E:96:B7:C8:E7:AB:3C:22:1B:2A:6F:F6:32:95:93:9C:AF:85
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       019F93C8F787EF06DA04A791CA43043641B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          0CBF
Signing time:             Fri 24 Jul 2026 11:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:49 +0000
Files and hashes:         1: JwY7qn8a3rdnRmh0s9t_pZe3M4Y.roa (hash: Kh5jCLLNLF6VLZQMkZ83iOoAb6T34T0+sDH0R/ASPFY=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: 7I4Z/yR8qPKD03ff0vhRCzjXnWbmV6T2r3GLUgzcgMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:f7:87:ef:06:da:04:a7:91:ca:43:04:36:41:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Jul 24 11:00:49 2026 GMT
            Not After : Jul 25 11:00:49 2026 GMT
        Subject: CN=dd617e96b7c8e7ab3c221b2a6ff63295939caf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:f7:72:d9:52:a3:c8:82:a7:27:88:3b:9c:
                    c9:77:00:48:48:0e:9d:bc:eb:52:d4:f1:f3:e7:c1:
                    54:8e:a2:e5:1b:86:96:d4:f2:99:6c:21:13:9f:e7:
                    a1:6e:bf:9c:5b:a5:d4:57:54:6d:0f:61:1f:50:89:
                    62:2e:95:d3:ce:ae:50:68:71:ba:cf:23:58:9f:d2:
                    39:8f:76:0f:b2:52:a8:a5:a4:28:49:51:43:64:b7:
                    ef:e4:54:24:41:d1:c5:53:e7:23:a6:59:3f:dc:e3:
                    3c:a4:98:90:6c:f4:15:7a:3a:f0:4f:63:5d:31:0d:
                    5d:55:2b:55:fa:ac:ee:08:52:31:c0:c8:c9:54:6a:
                    ef:89:1a:b9:f8:ea:ac:9f:7c:d7:18:10:eb:88:1a:
                    9a:fa:98:35:cb:e8:e4:c5:55:44:18:8f:55:39:84:
                    85:48:d6:b4:25:d3:f8:87:57:ea:e0:a6:44:b5:ac:
                    be:98:05:9a:ce:cc:90:f2:be:af:8c:4e:17:14:08:
                    46:b8:1b:d6:74:48:40:7d:3e:22:74:0e:45:60:28:
                    ab:14:13:6e:3f:4e:65:cf:2f:f3:63:c3:aa:d3:9e:
                    77:e3:e6:cc:55:97:d7:ef:a7:fc:2c:9f:3c:a2:47:
                    18:17:38:43:cb:c0:8d:d6:a3:98:57:fe:8c:54:8e:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:7E:96:B7:C8:E7:AB:3C:22:1B:2A:6F:F6:32:95:93:9C:AF:85
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:c1:4c:03:bd:49:bd:ef:0d:35:2b:5c:0f:9e:98:45:7c:
         f7:0d:f2:f1:1d:b8:10:12:08:23:8f:cb:16:11:0e:53:f1:27:
         3b:bf:51:37:db:29:9a:75:05:90:96:61:74:26:f4:6c:39:4c:
         4f:64:d6:71:2b:77:b1:75:23:60:86:17:82:31:85:10:21:7f:
         e2:4f:22:15:43:b3:a7:81:18:1d:dc:33:d0:a2:cb:c0:f4:6a:
         de:98:7a:89:77:2b:76:42:6f:3f:0d:7e:08:89:58:66:18:e9:
         0e:3e:f3:91:6c:b0:5b:cd:ac:bd:8f:5b:1e:be:73:da:44:02:
         56:c9:63:b7:69:eb:79:b3:54:4f:3c:84:7e:09:a6:a3:3b:66:
         18:e3:f1:9d:fb:75:5f:f2:4f:47:9d:f8:fd:fb:2d:ae:92:d3:
         b1:be:7f:0f:45:bf:e8:4c:ee:32:7e:ce:26:1d:f4:e7:ba:1e:
         63:77:ee:66:36:e8:1c:76:6a:62:73:c6:df:85:f1:5a:a1:3c:
         ad:85:c6:09:13:bb:34:42:09:b7:3b:b8:a1:a9:1a:7c:6f:ea:
         3f:f3:53:58:c9:0e:c8:f8:15:db:70:74:fb:c9:20:a8:c1:04:
         91:3f:4a:9a:d3:68:12:9d:22:85:19:f2:89:7e:ea:ba:35:f2:
         bc:99:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:48 2026 by rpki-client