Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          uhZ+FkIzZQ3L3VMNBWVJtKMU1EK0g6g6WDs3z2HMnFs=
Subject key identifier:   C3:F5:01:BF:40:3C:C8:2E:6B:60:69:EE:CF:18:DD:DA:B2:53:1A:D1
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       019F93C9615B9980B4197BFFFB005DD66A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          0981
Signing time:             Fri 24 Jul 2026 11:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:16 +0000
Files and hashes:         1: QjOXLGjz8ds-7sCauorJ8W8aVN4.roa (hash: BmFWBCryjEjKWhVriCT0YrDHfiFmLKZXY1G064wUhCw=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: tZ6LXzKrewiEncE3oXE/q4UAqUmpcNNjqnS0rJv+Iso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:61:5b:99:80:b4:19:7b:ff:fb:00:5d:d6:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Jul 24 11:01:16 2026 GMT
            Not After : Jul 25 11:01:16 2026 GMT
        Subject: CN=c3f501bf403cc82e6b6069eecf18dddab2531ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:01:68:f7:34:64:4e:cc:b5:2e:58:81:15:
                    d1:2c:d3:ea:31:91:3d:70:f7:42:7d:b7:bd:0c:a8:
                    70:c8:3a:17:27:b1:dc:f2:5d:e3:b7:1e:82:6c:ea:
                    d7:92:d9:06:9a:14:21:18:f8:26:88:de:1c:55:56:
                    c9:e4:20:5c:33:47:45:54:57:bb:4c:26:f2:17:5b:
                    ae:40:fa:ee:5a:3d:b9:79:b3:d3:46:b9:e9:6c:66:
                    18:f6:84:61:e4:b0:c5:82:56:d2:f2:55:dc:5c:30:
                    3b:76:66:12:07:35:31:11:e2:fa:a8:fe:9e:7d:1a:
                    f4:f9:16:d5:99:7e:e5:fc:56:cb:8a:8c:6d:f7:49:
                    6e:77:83:e7:3d:bf:fb:80:f6:99:b2:42:3b:31:97:
                    51:fe:0f:b2:43:e6:be:b2:8f:3c:98:84:7e:97:17:
                    58:1b:1e:4b:e4:2b:88:06:02:a6:63:81:8d:a4:55:
                    08:5a:86:bb:34:b0:a1:11:3c:e7:25:6a:df:cd:43:
                    8f:26:b0:bd:bc:9e:58:06:0a:0c:92:0f:eb:6b:f0:
                    17:3a:9b:2f:68:cf:31:15:0f:92:21:8d:f9:74:48:
                    df:e0:47:4f:ce:c8:18:b2:c2:25:2a:df:08:57:d3:
                    1f:1a:67:e6:6c:f6:f9:5e:7b:86:5d:f5:97:d9:99:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:01:BF:40:3C:C8:2E:6B:60:69:EE:CF:18:DD:DA:B2:53:1A:D1
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:64:fb:c5:ab:78:b4:88:23:60:82:97:98:91:07:21:e8:
         a4:42:4b:bf:36:fa:3c:bd:ef:cb:26:54:21:7f:f4:8b:39:10:
         c2:89:be:1f:f3:f7:ae:3e:f1:58:a2:90:ea:40:34:27:36:65:
         92:0b:f8:ed:09:a3:fc:00:e2:70:10:10:41:75:4a:38:85:d7:
         a4:5c:e0:6d:11:cc:ab:6a:56:85:22:d9:40:1c:cf:14:58:8b:
         ba:6a:29:9e:8d:44:11:32:f5:5c:7d:e4:16:bc:ed:e9:68:5b:
         5f:de:5a:a5:65:a2:3e:b8:52:55:53:6a:58:02:10:76:90:86:
         0d:b1:e2:68:6c:fc:c7:11:dd:cc:87:40:35:91:eb:c7:ed:4f:
         a4:17:7d:4a:35:48:ea:c9:b8:c4:93:10:22:ff:0f:ae:f2:b9:
         f6:94:af:8b:a0:8f:ce:c4:df:e2:36:ba:27:93:af:1c:c9:a7:
         ed:15:a1:63:81:94:a6:41:57:b1:71:4d:58:b1:5f:04:3e:8c:
         4e:65:10:70:92:be:a7:21:93:7f:6a:84:79:a6:71:9c:27:04:
         37:04:17:df:84:dd:2b:ec:0d:6c:d0:ed:c3:4e:87:9a:70:ff:
         2d:73:29:6d:ae:4b:23:c0:87:b9:b7:12:c8:94:28:58:8f:68:
         50:31:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:27 2026 by rpki-client