Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          diqQvFpDA8nRTJsnOodxEApA397wZ8/fgNFtworeObM=
Subject key identifier:   A6:F8:77:EC:1F:E5:78:04:12:02:CB:45:9F:54:20:7F:3A:B6:4E:5C
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       01A0EEC1B6B45890C5877F939E16701A371D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          14FC
Signing time:             Tue 29 Sep 2026 20:01:07 +0000
Manifest this update:     Tue 29 Sep 2026 20:01:07 +0000
Manifest next update:     Wed 30 Sep 2026 20:01:07 +0000
Files and hashes:         1: 9DlZGfzkGJH9pt3tlUtwbDIgZmE.roa (hash: BgtptWZDSzp28tC4nLvBq9ONf2sr0vsAGvBczOwVSY4=)
                          2: La12rr_K1ZSbuhi7wlgaOCIF5ZA.roa (hash: Z2Rpf1e0zKOJjF1IX+pQ5F4oluN25ApbSFfygu3hh5I=)
                          3: id2BlqzstTY2zcF89y0tqtXsAAg.roa (hash: YUgnEyxwSsXkOSDh0+NOmEVHAoUbYwAOfZybL6l7VVs=)
                          4: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          5: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          6: o1hI_vA3WO-f0x7a0iDzyO_cfMI.roa (hash: 3HV05eMz9CY1q6+dVr/ccvaXwL6/u3gsDjopHKCyzP0=)
                          7: q6VI7hOuPNwkA5OfPLZgeMAzcLc.roa (hash: 4kKMTMijEB9eXMczmF8YRDpforyaG1mUNsBXXMgMmCc=)
                          8: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: 0E9kc3EA/15laSjiNUJpyBDGNLlIpfknnk+LS6OYeZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:c1:b6:b4:58:90:c5:87:7f:93:9e:16:70:1a:37:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Sep 29 20:01:07 2026 GMT
            Not After : Sep 30 20:01:07 2026 GMT
        Subject: CN=a6f877ec1fe578041202cb459f54207f3ab64e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:9a:5d:5f:19:d6:8c:10:51:d8:20:51:88:
                    ae:46:d6:b9:16:00:9f:25:b6:a7:5f:02:23:e5:b6:
                    21:11:95:3d:a7:ed:5f:21:40:9b:7b:fa:65:c7:4b:
                    3e:85:08:60:a7:8e:ab:b7:26:0e:d6:03:79:52:b4:
                    ce:fc:7b:ae:37:99:b7:28:0e:58:7e:b3:f4:74:22:
                    de:a5:6d:a5:2b:85:45:0a:51:b6:d3:93:dd:f2:45:
                    b6:52:6d:82:06:1a:e6:b6:11:a4:98:84:38:1c:41:
                    64:b2:c5:8f:50:b4:c5:1a:ac:1e:d2:59:76:27:2f:
                    12:54:e5:1f:17:ca:fb:6e:2b:6b:81:9f:16:c1:84:
                    ef:dd:77:5e:24:45:a7:38:2b:2d:5a:8a:99:bb:9c:
                    40:80:8c:b8:07:2c:d0:c4:7d:ef:70:cc:63:68:cd:
                    56:e9:44:a4:66:be:b8:6d:e4:fe:14:e4:ea:07:f5:
                    50:24:f6:b9:e4:05:f3:5e:73:9c:1e:e7:43:87:e3:
                    dd:e9:56:d4:53:a4:96:fa:39:15:f0:29:d1:57:ee:
                    7b:09:8b:a9:4a:0f:e6:f4:b9:a6:ac:80:9c:d2:79:
                    c7:74:73:ee:05:38:28:1b:50:ef:fd:06:18:d1:b0:
                    ff:a1:8b:d6:b5:6a:90:9d:25:dd:48:60:c4:f8:80:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:77:EC:1F:E5:78:04:12:02:CB:45:9F:54:20:7F:3A:B6:4E:5C
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:65:5f:d0:fb:13:89:b4:5e:0d:d5:01:fa:69:64:97:62:13:
         93:22:bf:a0:8d:f5:b4:d0:a1:e0:8c:40:d4:66:a9:48:6d:95:
         d0:a1:07:d3:3c:3f:ec:47:1d:1e:b4:29:e2:1a:00:53:e6:d1:
         bf:de:8e:79:66:32:ac:d4:c5:9b:fa:43:88:75:4d:f8:e8:da:
         df:79:e4:89:0e:01:8a:48:23:7e:d5:8d:5d:bc:f1:64:31:e2:
         36:9e:04:e7:19:13:f0:c0:a8:b1:16:2d:d2:b3:5c:92:9d:a2:
         40:ae:79:d6:ac:df:05:61:40:72:9d:de:92:5d:bc:c5:88:81:
         0b:33:4a:70:fe:40:54:87:99:a0:16:e7:06:09:4b:1b:93:75:
         74:22:b4:2d:92:e0:02:56:d6:d5:6c:63:e6:60:f3:73:db:28:
         52:d7:42:bd:b3:f2:e9:9a:ab:7e:4b:b8:57:e1:48:dc:08:92:
         b9:af:6d:98:2b:c4:e1:c5:05:52:b3:44:86:28:fa:08:10:a2:
         eb:da:96:6c:6f:a2:a6:f4:2d:11:ae:a0:d9:9b:41:27:38:39:
         12:4c:a0:20:78:44:ce:49:f0:e0:3e:45:94:bf:66:16:fa:98:
         08:a0:4b:67:db:18:ef:98:7f:cf:4b:c2:7e:84:7d:ca:b9:38:
         33:9a:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:53:49 2026 by rpki-client