Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File:                     wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier:          9Ylw1cejSX6FCvZREdduqr/9unjiZ/Ob4KSeU0dy0zU=
Subject key identifier:   D6:CC:5F:B6:27:4D:5D:10:EE:56:46:96:DC:DF:7C:B0:3E:81:69:46
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer:       /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial:       019E20FFAA889E9916F730A29D582BE6D04D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number:          1695
Signing time:             Wed 13 May 2026 11:01:26 +0000
Manifest this update:     Wed 13 May 2026 11:01:26 +0000
Manifest next update:     Thu 14 May 2026 11:01:26 +0000
Files and hashes:         1: DtAUOHLSS6WIfSS0GF2C7AUksM4.roa (hash: 2zf4aTdLuiPqep9tgkg3+1DOOvs3BrWOmseQlMJ7vC8=)
                          2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: cgVleRXO+q+12kSfGAQ6ZewpPq7EeZXCoYz1LWvDE7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:aa:88:9e:99:16:f7:30:a2:9d:58:2b:e6:d0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
        Validity
            Not Before: May 13 11:01:26 2026 GMT
            Not After : May 14 11:01:26 2026 GMT
        Subject: CN=d6cc5fb6274d5d10ee564696dcdf7cb03e816946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:67:46:75:65:3f:47:d7:0a:82:96:fb:7f:
                    dc:b1:09:44:75:3b:b6:a2:bc:34:c0:68:99:06:15:
                    90:27:4a:01:19:74:22:d8:fa:fb:e8:62:6f:5e:b4:
                    78:24:a8:f7:ea:5f:da:62:3e:7a:d1:49:3a:19:ff:
                    cf:c9:44:d1:c9:68:37:0e:0d:87:31:bf:7a:21:4e:
                    a9:a9:af:68:27:4e:fc:3e:ea:85:db:80:d2:eb:e5:
                    c2:b8:8c:63:58:5e:0f:97:65:41:cf:96:81:cd:33:
                    e8:ca:d9:07:e9:c9:99:0e:dd:9d:81:cd:12:8d:a8:
                    31:4b:10:3e:46:5e:99:cf:16:4c:e4:12:e7:ca:d2:
                    11:75:86:ac:fd:cb:29:b6:92:8d:bf:cd:de:04:66:
                    92:f6:3d:f6:f8:a7:7d:0a:09:e1:17:0d:e3:43:b9:
                    35:10:ef:e5:6f:73:b8:fe:5d:99:de:e8:38:9c:e1:
                    a2:84:96:d7:9c:b7:5f:29:ba:99:b0:91:79:7a:3e:
                    ed:68:14:d0:ae:7b:60:70:4d:f5:2d:6e:8a:20:02:
                    90:2a:ed:b7:9c:35:a0:98:11:f9:54:7b:90:78:50:
                    51:fe:ef:fc:b0:d5:ec:bc:f3:5d:07:01:ac:41:6c:
                    62:22:db:e1:df:03:d5:91:ce:b9:55:d5:46:98:62:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CC:5F:B6:27:4D:5D:10:EE:56:46:96:DC:DF:7C:B0:3E:81:69:46
            X509v3 Authority Key Identifier:
                keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:79:a1:d3:2c:58:80:15:e8:98:0f:f3:be:61:e4:f2:09:c3:
         69:94:ad:4a:94:0f:b7:07:6f:16:ed:4b:e2:f7:70:91:da:ea:
         a9:bd:9d:3d:1c:29:14:17:f4:76:d0:e3:52:61:95:ba:03:d3:
         4c:9c:c2:6f:57:49:85:30:bc:ad:d9:8b:64:e2:4d:cd:ee:6b:
         60:2f:19:7b:4a:4b:d4:96:d6:97:79:20:9b:e8:3a:1f:fc:70:
         45:a2:7f:67:57:a3:f0:d7:c4:c0:c8:56:57:a8:a0:6a:02:c5:
         16:6e:49:f5:4d:53:b7:93:a2:06:b7:8f:67:75:c3:f4:67:32:
         88:a4:4f:5f:6e:39:b3:04:9f:8d:42:2b:10:00:ab:3f:07:8a:
         cc:58:74:3c:9c:6f:e1:4d:f2:93:ab:91:87:6d:e0:3f:22:21:
         06:2f:17:f4:f1:fe:97:35:66:dd:f4:59:37:5b:82:57:21:55:
         bc:3a:c2:17:9e:6c:b8:d9:69:ec:90:d7:d9:af:9a:8c:54:c7:
         75:49:4e:64:63:81:5b:2a:f4:74:f1:68:5c:83:93:47:60:85:
         81:cb:a7:73:d8:20:f8:c3:ad:9b:53:6e:ff:72:d3:95:79:1c:
         19:a5:63:cf:a1:03:96:6f:21:d6:fd:6d:db:f5:45:00:61:99:
         e0:eb:87:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:43 2026 by rpki-client