Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          bmYGanZ2GuP3S0uPfqrJdG7U17bx07EvZHKe86QCUAI=
Subject key identifier:   BC:8C:5B:A9:7E:C9:70:11:F7:BE:28:B4:5E:64:3D:0A:B6:00:D5:64
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       019F8F7F91233314B146D61054FD77D1D6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          09A8
Signing time:             Thu 23 Jul 2026 15:02:09 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:09 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:09 +0000
Files and hashes:         1: 47T0kxLhEd4mlPdqBynhQxCjwbM.roa (hash: cb9fk5tXmwL2Q9JhN9JW/aBJLYXV1np6zbRQN2YQZUw=)
                          2: GCPkG596DrwW9MlXIg_7S_qYA_o.roa (hash: I3abi/E2e8nJD+Eich2ccFigBAvMHYp3dH5S973RzAY=)
                          3: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: dtfuPbe42KB/ITZATwaooERW+MO20yylkndOWzrLBuA=)
                          4: Wc1p-DpPzNdXtLyd3sx2az35Zww.roa (hash: v3gxQPsBigcTifxf0QwdjAT04GF+RnrhxMrjTFKL3EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:91:23:33:14:b1:46:d6:10:54:fd:77:d1:d6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Jul 23 15:02:09 2026 GMT
            Not After : Jul 24 15:02:09 2026 GMT
        Subject: CN=bc8c5ba97ec97011f7be28b45e643d0ab600d564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:10:b4:ca:c2:11:af:93:0a:2a:7d:60:3f:
                    6c:03:b2:a0:38:80:18:a7:fe:58:58:22:31:60:fd:
                    0a:b8:54:06:1f:7e:c9:ec:a1:85:86:7f:49:b2:64:
                    b0:70:46:e8:9d:64:63:cd:0f:7e:d6:d9:31:95:98:
                    25:c8:34:a1:ac:ed:83:f3:54:de:3c:65:f8:bc:52:
                    12:69:04:04:c6:98:8b:df:4f:8c:c9:c1:3e:c6:b9:
                    49:8d:53:65:82:b5:45:ef:73:38:bf:36:11:ad:da:
                    b8:6d:7c:03:b6:6f:e5:f2:ce:63:1e:31:38:33:ab:
                    58:6a:63:3e:c3:32:68:9e:a7:2d:32:42:2c:2d:d4:
                    0e:e5:59:24:cb:54:24:c0:63:c7:94:d3:03:57:d4:
                    9f:4e:9e:fe:6e:8a:c9:ae:62:d7:1d:36:64:20:76:
                    d9:44:59:92:04:14:37:cb:a8:88:30:6b:98:47:f1:
                    7d:f1:d3:87:ff:4b:23:56:b0:be:58:1f:85:38:01:
                    53:0f:d1:c7:98:fb:e5:64:20:99:9d:19:b0:70:75:
                    12:1c:b3:ce:2f:cb:f1:c9:2a:d6:b4:df:46:a9:2f:
                    fe:f1:57:bf:c2:76:c4:2a:4a:3c:ad:5c:0f:8f:0e:
                    9d:3d:7f:d1:8c:85:09:85:dd:ad:9f:48:a7:de:53:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:5B:A9:7E:C9:70:11:F7:BE:28:B4:5E:64:3D:0A:B6:00:D5:64
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7f:36:cf:87:df:31:fc:e6:26:40:b9:a6:8c:1c:b9:c1:38:
         8a:d2:86:03:e2:d4:fb:74:2e:7a:67:4d:ba:c6:6b:fe:18:38:
         7d:b0:eb:bf:58:ed:12:26:e6:8e:c0:07:c5:02:69:03:11:b1:
         de:bb:90:8a:73:6a:ed:be:ec:bb:ff:51:c0:c6:02:a5:74:21:
         46:1c:37:72:4a:68:f9:61:99:a3:f3:27:2c:f2:73:0b:5e:a7:
         2c:a0:08:fc:8c:1c:29:b7:5f:2b:55:ea:9b:95:50:b0:b3:6b:
         39:69:02:a7:df:c8:bd:78:5c:d4:c5:02:f1:0c:cf:e5:87:d9:
         d3:5f:4a:42:9e:72:6b:44:c3:cd:af:b6:c4:3f:5d:d4:fd:03:
         84:ce:db:78:5a:04:09:04:06:40:b6:d6:2d:c1:7b:33:c2:c7:
         52:52:32:a3:d8:31:27:b9:60:56:f7:f7:ee:c1:59:e3:5d:fc:
         db:da:80:c6:23:2a:67:38:c6:5d:a5:38:50:19:2c:a9:77:98:
         f4:99:d2:a8:4b:37:25:ca:66:59:fe:27:d9:5b:25:11:10:36:
         8a:87:8b:d9:bb:72:10:16:16:f8:60:d8:c1:45:bd:5a:54:9a:
         29:9f:41:04:3f:3a:34:05:0d:d8:16:d0:a2:4a:94:90:b5:dd:
         41:be:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:30 2026 by rpki-client