Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File:                     WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier:          HDDs7RswTL/Tl1air2FRrxD306El8+cKc/5rjc/6jts=
Subject key identifier:   D8:C7:74:60:CF:2B:F8:EF:47:FA:93:26:B6:06:2C:A7:03:4D:06:60
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer:       /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial:       019F927FAF1165BED7B2297C0A183B0F6BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number:          0F18
Signing time:             Fri 24 Jul 2026 05:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:08 +0000
Files and hashes:         1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
                          2: BDv1bnHvaLtWajfUeKcw3pIG_Ok.roa (hash: 69EUlopn2Prmu5cUFMolg4m3eko2E4egAqnT2et0qIE=)
                          3: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: p6C3YJ6aT3QoVDgaJt8gkMsHyCqYVeY0Gq+ZqY3rljA=)
                          4: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (hash: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=)
                          5: r_8bT90UjcZl-MvxK-5tmdznS1I.roa (hash: +kBFEQDnTe7FZB/GY9jWIpmDn/+p706IcANeKk3b/o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:af:11:65:be:d7:b2:29:7c:0a:18:3b:0f:6b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
        Validity
            Not Before: Jul 24 05:01:08 2026 GMT
            Not After : Jul 25 05:01:08 2026 GMT
        Subject: CN=d8c77460cf2bf8ef47fa9326b6062ca7034d0660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:08:c5:f3:2c:3f:34:c8:c6:fa:05:f2:1b:
                    06:23:49:05:e6:6b:a3:9c:d1:72:cd:54:76:a2:8e:
                    97:6d:a3:a1:a5:24:8c:bf:3d:e2:41:9b:d2:a2:e2:
                    73:d3:62:95:b0:b6:09:ae:59:e9:0f:63:a7:3d:a6:
                    51:a7:f9:6d:ab:7c:97:e1:1b:e8:1f:ad:2c:1c:2f:
                    15:a4:01:c2:58:f7:c7:f9:30:8a:35:cd:c4:c3:8f:
                    f8:48:68:9f:5d:33:ce:a3:d4:88:41:1b:db:b6:8c:
                    73:59:71:e4:45:78:ff:2c:f0:83:c4:23:87:30:bb:
                    2c:8a:d1:92:58:9e:fa:5d:b4:1f:75:41:db:5e:37:
                    f4:58:2e:0d:e1:47:b1:01:d5:7d:fd:7c:ba:87:43:
                    6e:70:ba:c9:d9:fd:2b:4d:b1:7c:15:d2:86:ac:1b:
                    8e:4c:b0:65:7d:85:80:64:19:33:ef:fe:bb:3b:f7:
                    c6:e2:58:30:ae:4c:27:dd:96:49:e5:a2:68:22:e7:
                    b9:1c:d1:df:ab:df:f7:4d:5a:30:3c:fa:8a:ff:cb:
                    35:ad:a3:da:89:29:58:93:32:da:7d:fd:d1:e0:75:
                    32:2d:83:24:49:72:c9:b0:8d:c0:42:67:70:0b:f0:
                    0c:34:3b:95:21:3d:65:6d:7d:41:02:e0:a6:43:75:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:74:60:CF:2B:F8:EF:47:FA:93:26:B6:06:2C:A7:03:4D:06:60
            X509v3 Authority Key Identifier:
                keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:be:cb:4d:eb:82:9f:ae:b1:4c:9e:56:1d:62:7d:4b:ba:
         7b:c5:9e:f6:8b:bd:54:c3:59:17:97:dc:96:47:4c:f1:47:d9:
         dd:a3:da:9a:77:0a:4a:cf:63:9b:3b:d5:14:27:35:37:42:42:
         7f:9f:24:db:c5:be:74:50:f2:84:eb:4f:07:22:65:14:e6:ea:
         aa:48:97:ed:58:78:31:4e:b0:dc:9a:61:2b:a4:cd:fd:13:19:
         80:41:75:db:29:65:94:e0:11:04:07:71:b8:02:7f:35:cb:83:
         5e:7a:c5:e4:f4:79:33:fd:04:50:0a:62:b0:3c:a4:5b:f5:74:
         f7:08:24:76:ae:24:a5:fb:dd:a0:13:39:31:ec:ee:a3:32:69:
         3f:46:d0:56:e3:bb:36:6d:7c:01:a9:5c:e3:8d:2e:78:67:e2:
         2c:16:da:35:14:d5:ac:d1:1d:8b:89:e9:c5:b4:45:f4:37:83:
         ba:03:9b:b2:36:86:8b:b0:3d:10:95:10:b3:42:02:c5:d7:e7:
         6a:31:2e:ad:17:e6:1c:bf:d7:6d:a7:d2:46:b2:ac:35:55:5c:
         04:f9:b1:83:52:d0:13:66:66:61:30:fc:e8:a2:a9:db:2a:a9:
         35:fe:c0:88:d6:3b:c5:6a:b0:2e:5a:b6:5d:0d:d6:76:31:6f:
         7b:56:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:17 2026 by rpki-client