Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          6aaYpse4HnRs11qdM4yhB221dL6jXGkEcVp5N2ix8KU=
Subject key identifier:   B2:B5:4C:13:FF:89:9A:B4:53:C2:42:E9:F5:1D:5B:40:76:9B:76:4C
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       019F90C7B90A9172BDDCC31F107158A6B864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 21:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:35 +0000
Files and hashes:         1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
                          2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: qC6WJ+U+HpOHGBZGndOZm4Ld7S6vR1D0LdZQ1gJd7ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:b9:0a:91:72:bd:dc:c3:1f:10:71:58:a6:b8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Jul 23 21:00:35 2026 GMT
            Not After : Jul 24 21:00:35 2026 GMT
        Subject: CN=b2b54c13ff899ab453c242e9f51d5b40769b764c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:f4:2a:e5:df:a9:da:c7:c5:1b:0f:e7:d3:
                    bb:04:52:17:c8:e9:42:6c:64:6f:16:4c:ab:a4:77:
                    1c:94:07:24:6d:0f:75:13:db:f7:8d:b4:06:f5:1a:
                    53:a8:00:57:1b:50:23:09:74:32:bb:9c:0e:01:f6:
                    74:3b:71:98:c1:f4:d6:d4:e5:a8:6a:c7:d1:30:c1:
                    b9:b0:55:13:98:a2:a0:9b:23:66:84:21:f3:4b:04:
                    e8:15:a5:6c:6f:25:b7:05:81:f0:cc:b3:75:4d:bd:
                    5e:10:72:90:ca:f0:86:3c:38:71:fc:d1:9e:46:39:
                    02:35:7e:a6:35:cf:3d:bb:91:c4:60:07:a2:3a:af:
                    b2:69:46:c8:c0:34:45:95:23:d6:ab:b1:13:f8:86:
                    cc:6a:19:b6:88:58:6c:a7:16:58:cf:85:e5:46:d1:
                    d9:ea:ac:61:07:4c:8c:b8:41:57:6a:92:8c:7d:e8:
                    d1:52:25:ee:dd:fc:95:1c:a1:96:97:da:d0:6a:6f:
                    a7:ee:5c:c9:7a:6c:28:b5:42:31:0a:9a:6a:cb:33:
                    fc:91:a5:5d:29:22:a5:c0:57:cc:ba:ae:ed:e5:42:
                    14:45:c7:51:ee:3a:85:6d:7a:2e:52:f6:b6:26:d6:
                    fa:0a:68:aa:f1:4a:ad:98:06:f9:51:32:b9:51:0f:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:4C:13:FF:89:9A:B4:53:C2:42:E9:F5:1D:5B:40:76:9B:76:4C
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:59:7b:60:80:21:4b:15:2c:ae:cb:80:36:54:3f:d7:f1:7f:
         39:fe:2b:bf:f0:97:36:cb:0d:4b:f4:fc:98:06:b0:2a:1c:e0:
         69:7e:a2:66:e3:df:a0:d8:c7:95:d7:c1:7f:3b:3e:5a:58:e5:
         0b:ae:12:b1:7f:cf:df:f9:3a:91:35:43:3f:d9:9f:d6:bb:e9:
         e0:53:59:e7:58:3e:58:e0:05:cb:c3:60:1f:3d:f5:15:20:1c:
         4c:7e:a3:9b:5d:e9:7c:76:54:bc:65:c3:5a:5b:02:4b:e2:98:
         60:f1:d9:f0:31:8e:f5:68:6f:b8:7b:e5:d2:60:60:80:af:10:
         b9:94:f4:6b:f4:d9:8f:b0:f3:a7:04:65:95:28:06:77:59:b1:
         a3:b5:8c:cb:bd:9b:8c:ba:16:53:d3:0c:bf:6f:85:96:49:04:
         11:ef:82:52:ef:fe:d5:b6:a4:cb:91:86:3c:4c:3e:e4:c9:ca:
         e5:25:2f:91:8f:e6:bf:fa:e6:da:1d:82:d7:ac:7b:6b:41:0e:
         0e:b9:91:d8:68:e0:4f:7f:6d:d2:58:d1:83:fe:48:69:94:56:
         60:20:15:f6:af:39:57:47:37:fb:9e:a6:7f:12:41:fd:f8:21:
         2e:a7:94:8f:10:cc:16:7c:10:11:a6:c4:51:9d:51:9e:11:50:
         53:58:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:11 2026 by rpki-client