Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          XJXfB/RTuyzhEGC4ERTG2yA0vJLSsMIid8ERLjejzCY=
Subject key identifier:   60:66:65:1A:F7:37:5B:2F:30:4A:36:1B:91:74:CE:26:76:1C:34:8F
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       01A1DEDEC1D1C7CAA72D2C69A210EC6C9FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          0DEF
Signing time:             Sun 15 Nov 2026 11:01:42 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:42 +0000
Files and hashes:         1: JwY7qn8a3rdnRmh0s9t_pZe3M4Y.roa (hash: Kh5jCLLNLF6VLZQMkZ83iOoAb6T34T0+sDH0R/ASPFY=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: Mx6Ncpfe5ZtuzIF+LfWS1FcF3vPDKxmYS60lLft1viA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:c1:d1:c7:ca:a7:2d:2c:69:a2:10:ec:6c:9f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Nov 15 11:01:42 2026 GMT
            Not After : Nov 16 11:01:42 2026 GMT
        Subject: CN=6066651af7375b2f304a361b9174ce26761c348f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:ff:c9:b8:6c:db:2d:f7:0b:53:6b:62:29:
                    71:e7:62:2b:ba:fd:1d:0b:ff:22:11:a8:9d:18:76:
                    20:fd:73:4f:eb:08:b3:29:06:e6:d5:fb:d0:2b:b2:
                    41:12:e0:22:dd:6c:64:27:09:16:25:e0:5f:80:b1:
                    dc:8f:d9:a5:5d:56:cc:63:99:a5:0c:60:cb:8a:2b:
                    a9:b4:39:9c:59:92:a6:b5:47:ed:58:78:a0:34:03:
                    e5:fe:fe:e4:71:41:97:b2:3b:30:9a:42:77:99:cd:
                    6d:6a:c2:cf:80:78:f1:43:89:25:d8:92:c5:a1:8b:
                    ff:ea:2d:7b:a0:83:38:65:c6:4b:da:fa:ab:c0:34:
                    47:f5:6d:17:ab:fc:03:f1:7e:f2:86:23:84:21:a4:
                    a3:21:cc:fc:91:db:c1:fe:0b:8c:ee:0f:f6:d5:3c:
                    e9:03:1a:12:ff:58:c0:74:f6:fe:22:f4:e7:10:08:
                    90:b5:90:37:87:bb:ba:e5:8a:cd:7c:3e:93:5d:b8:
                    e8:75:21:d3:e6:d7:c9:5f:b2:92:ec:31:f3:18:c3:
                    72:82:57:ce:86:92:99:a1:bd:b3:8b:ff:1f:b5:30:
                    6f:b7:41:73:fe:01:94:23:eb:41:a1:33:07:a1:56:
                    92:21:95:46:21:47:f3:1f:f8:13:78:55:2a:20:f8:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:66:65:1A:F7:37:5B:2F:30:4A:36:1B:91:74:CE:26:76:1C:34:8F
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f4:b8:40:ab:31:62:61:6a:b5:98:4e:2a:8f:5a:69:cc:49:
         aa:76:70:8b:03:6f:a5:c9:a3:48:28:4d:76:e0:21:45:44:15:
         6c:99:7f:cc:0f:c0:d5:4a:38:af:26:5b:d1:dc:41:d7:c4:5b:
         0c:ec:29:c1:fd:46:4f:4d:11:36:eb:60:72:e2:e7:41:4d:e7:
         e0:fd:44:05:03:01:8d:fa:1f:e4:89:87:b9:dd:e2:ea:a0:d6:
         0f:a7:96:63:b0:50:e5:ed:7a:8f:49:9e:57:00:68:61:23:34:
         28:0a:f5:6b:0d:56:18:39:59:3b:e1:75:22:86:40:f9:a9:99:
         04:10:db:67:b8:97:09:df:cf:6e:86:72:24:23:12:a8:c8:35:
         c2:5e:8d:60:4a:31:a2:33:e2:a9:c4:2c:06:fb:45:bb:fb:d5:
         56:c6:4a:e0:e9:4e:16:95:a1:bf:08:78:05:7e:bf:13:3f:c4:
         52:08:a0:98:72:4f:67:54:b8:28:86:cf:09:80:c1:dc:b6:e4:
         97:39:43:b2:20:a3:a3:5c:79:9a:00:90:00:0d:6c:dc:f3:12:
         9b:b9:67:9e:14:57:e6:05:66:63:c7:82:37:cf:2b:84:89:75:
         bb:31:9a:2e:c0:3a:51:3a:1a:21:92:1e:d5:cb:cc:72:5d:15:
         dd:c4:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:34:03 2026 by rpki-client