Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          t3wHvN/A/73N1NPSh8YRn1zekqnSMj8wqnImC1AZ544=
Subject key identifier:   66:E7:02:01:BC:47:B8:FB:08:FD:68:96:A1:29:1D:9E:51:2F:4A:51
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       019F935B137E529AE6C11FBC6E4B312614BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          076A
Signing time:             Fri 24 Jul 2026 09:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:47 +0000
Files and hashes:         1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: P8tygDvQ4/2YUavYYNwvOOBYXx/MlYoOZgaRMuYmRUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:13:7e:52:9a:e6:c1:1f:bc:6e:4b:31:26:14:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Jul 24 09:00:47 2026 GMT
            Not After : Jul 25 09:00:47 2026 GMT
        Subject: CN=66e70201bc47b8fb08fd6896a1291d9e512f4a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:6b:69:51:f0:b4:ae:99:b2:89:d1:55:87:
                    f5:80:a6:4a:a5:35:73:18:ff:eb:e5:73:cf:32:a5:
                    f8:7c:8e:00:8a:67:db:99:3f:ca:9f:fe:2e:54:1f:
                    d1:c6:f0:65:ab:37:9b:4c:35:5f:18:7b:02:bf:49:
                    81:91:49:29:af:3f:2a:f5:a9:e6:77:32:b2:d2:6f:
                    82:fd:4a:2f:16:2f:46:54:81:92:62:8b:97:b7:2b:
                    b8:fe:fc:43:a2:4a:e0:39:5a:10:67:be:0c:34:80:
                    84:c6:0d:d3:92:36:16:88:f9:61:f7:17:d4:9b:91:
                    c8:2f:c1:7c:af:af:d8:77:d7:3c:ee:e4:fc:04:8a:
                    a1:e2:db:6c:4c:30:4b:c3:fa:0c:52:56:9b:27:3a:
                    f5:87:3a:71:21:a0:1c:02:55:b2:13:e5:a4:80:41:
                    53:75:73:e2:b1:7a:85:05:c6:ef:89:9a:88:f9:e7:
                    10:81:94:c9:21:c0:d6:00:7b:0e:d6:0e:74:ca:02:
                    f2:53:f6:36:ec:e6:d3:7b:20:da:2f:45:22:71:68:
                    85:5f:66:e8:2e:4d:b7:94:b9:cf:30:62:1b:ef:95:
                    8b:2f:69:70:76:af:f4:d0:d5:1e:a9:08:b0:65:b2:
                    0f:37:08:9a:3d:63:47:08:89:9f:24:e5:db:d3:26:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E7:02:01:BC:47:B8:FB:08:FD:68:96:A1:29:1D:9E:51:2F:4A:51
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:63:86:6d:fd:49:a0:b7:b0:2c:14:1e:02:67:f9:12:f1:15:
         7a:1a:e8:5f:6c:07:fc:99:57:35:77:50:4c:68:ee:86:ee:83:
         2a:d9:dc:76:c6:e6:06:fd:d8:3f:27:76:81:f2:82:fc:fd:34:
         94:32:9f:a4:68:96:fb:ab:fe:d1:89:47:85:6a:86:95:d3:52:
         29:f0:df:f4:40:96:b3:81:a5:cc:83:36:9b:f8:bd:33:4e:05:
         1e:27:2f:a1:0e:53:41:11:eb:53:c6:a4:67:a0:12:af:26:24:
         a5:ae:18:90:ff:40:14:4a:68:c1:82:70:48:99:a4:3c:39:39:
         a0:44:09:34:eb:ef:91:35:89:49:32:4c:aa:34:52:13:d5:62:
         9f:d3:1e:cd:29:8b:6c:0a:01:75:36:36:e8:ff:ca:0e:1f:5e:
         96:e1:7d:a7:02:64:55:57:f2:6d:fb:a6:56:a9:a1:48:88:0a:
         71:f4:c5:84:b0:0b:c6:25:05:d0:0c:31:89:29:81:78:3b:7a:
         1c:2b:66:6b:55:17:e2:7b:ae:26:11:21:f0:a2:16:c8:29:b4:
         bc:93:cb:09:9d:c0:12:fb:bd:9c:a5:33:f7:ae:c2:d6:60:c9:
         81:7f:c7:0a:cf:e4:db:60:77:81:3c:40:3b:fc:42:45:82:34:
         41:4a:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:46 2026 by rpki-client