Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File:                     wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier:          UFQ3AQ8Yi9g5Gu2gt5gh7NHHXu15PQk6mEWkV5c1iFE=
Subject key identifier:   9F:8E:BE:0D:DD:8C:CF:EC:26:C8:A2:E4:5C:2A:31:98:8A:00:A3:DD
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer:       /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial:       019E1EA2F3DBC1AC461BEEE1DF2921F530C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number:          08B2
Signing time:             Wed 13 May 2026 00:00:56 +0000
Manifest this update:     Wed 13 May 2026 00:00:56 +0000
Manifest next update:     Thu 14 May 2026 00:00:56 +0000
Files and hashes:         1: VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa (hash: lWi4+CdVg9U/MmtchWvR41UmLMSzY3HTa3grdEf3jrk=)
                          2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: gzkXXXsxvFNSwnstSGRDIttrfjFl1bfavdMNeVdGBgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f3:db:c1:ac:46:1b:ee:e1:df:29:21:f5:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
        Validity
            Not Before: May 13 00:00:56 2026 GMT
            Not After : May 14 00:00:56 2026 GMT
        Subject: CN=9f8ebe0ddd8ccfec26c8a2e45c2a31988a00a3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:b5:4d:63:2e:c5:cb:bf:49:6b:02:90:71:
                    33:bd:f5:f8:4a:a4:59:1f:9b:1e:06:ad:f1:bd:28:
                    27:55:df:8e:5f:f4:c2:05:2a:36:11:bb:16:7a:c6:
                    12:6e:43:92:fe:70:70:a1:bb:04:74:7e:42:96:65:
                    52:37:73:a6:a3:ea:f4:ba:26:bc:0f:6b:57:07:6f:
                    32:1a:1b:3b:df:ed:86:4b:db:b5:f5:58:af:1e:48:
                    a3:58:96:59:11:cb:66:bf:f4:12:37:70:b4:b2:03:
                    c5:49:c3:d9:fe:c2:24:6f:69:88:82:ca:1c:b3:4d:
                    67:c5:7c:00:54:72:0c:ca:54:2f:97:e5:0f:4e:18:
                    e3:7d:d2:95:85:fa:af:02:50:e8:ff:74:39:1e:1f:
                    80:93:8b:c6:60:cb:69:a3:47:2d:60:10:23:0d:47:
                    f5:36:58:21:9d:d4:27:75:61:fc:86:43:d5:0c:64:
                    d9:86:e1:0a:be:88:9f:08:5d:e4:ff:64:cc:d6:3c:
                    85:6d:2b:33:b7:fa:39:2d:e5:6c:91:8b:05:a2:13:
                    af:cb:93:36:26:09:5f:1c:81:99:1d:31:85:b7:57:
                    57:62:f7:d3:9d:e6:52:fd:d0:43:02:59:cd:d9:01:
                    49:2e:fb:77:7a:77:a0:c0:03:45:49:8b:1c:c2:9e:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:BE:0D:DD:8C:CF:EC:26:C8:A2:E4:5C:2A:31:98:8A:00:A3:DD
            X509v3 Authority Key Identifier:
                keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:e3:26:01:12:0e:59:01:32:94:cc:ba:00:65:cc:b1:a3:
         d2:a3:19:9d:3a:8b:77:5b:cc:f2:f2:f7:f5:40:9e:85:0c:79:
         18:ef:88:61:30:b2:d8:7f:13:43:ac:9c:6f:80:cb:c8:92:23:
         2f:e0:6c:4e:ed:8d:6a:ca:14:74:be:d7:04:85:db:11:6b:14:
         e5:fb:70:27:58:23:c4:58:13:7b:26:ac:3f:7d:6a:88:64:2f:
         9a:9d:dd:6a:a2:98:68:d8:32:b4:eb:37:2e:0e:a1:af:c7:55:
         9b:5d:af:33:99:06:36:2a:bb:94:fc:ba:0d:02:82:24:74:7c:
         b4:8d:e5:ba:20:25:37:37:ae:0b:68:66:66:9b:6a:d6:c3:9d:
         4a:db:76:62:e8:5f:28:ae:04:e0:51:07:b7:bf:2d:53:c7:43:
         e2:4d:08:d2:f3:43:1f:7d:17:6e:a3:ba:7f:b2:4d:c0:71:75:
         a9:70:e9:19:61:ba:58:9f:a4:a3:15:ef:6c:45:0f:90:eb:cb:
         66:d0:7c:06:4b:4d:c3:cb:e8:6f:59:63:b5:f6:7f:2c:b8:61:
         d9:de:f2:80:9e:ca:ab:e1:f4:cf:43:0d:2b:d0:6d:14:0a:b9:
         2e:c8:0a:ab:db:b4:90:75:47:c7:0a:3e:e7:c3:3e:65:e2:ce:
         27:ba:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:04 2026 by rpki-client