Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
File:                     iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json)
Hash identifier:          R2AcEPoAK7ekMCenZ66dXvxLgF3BxicZId+Q0eg0lGM=
Subject key identifier:   78:F1:20:38:02:86:28:7F:84:79:9D:E6:E4:77:9D:09:FE:43:B7:CB
Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5
Certificate issuer:       /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
Certificate serial:       019E20C83D5A59C3E3C18747639F9767C477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
Manifest number:          0D16
Signing time:             Wed 13 May 2026 10:00:54 +0000
Manifest this update:     Wed 13 May 2026 10:00:54 +0000
Manifest next update:     Thu 14 May 2026 10:00:54 +0000
Files and hashes:         1: ISG7wd6pLCoSiDnLQmoPtvGHwik.roa (hash: 8ye3uM7bxUh3STzMCoYVpX9YPeampsjAg7+ykblDc/0=)
                          2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: EBoivxa68hxxx4qiH87fav3mcLab0h1Yk65HMvN2IGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:3d:5a:59:c3:e3:c1:87:47:63:9f:97:67:c4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
        Validity
            Not Before: May 13 10:00:54 2026 GMT
            Not After : May 14 10:00:54 2026 GMT
        Subject: CN=78f120380286287f84799de6e4779d09fe43b7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:12:28:6e:79:af:d4:ac:09:02:36:62:6f:68:
                    5f:45:5b:52:d9:9c:0f:ce:f5:7a:db:0c:9a:2d:de:
                    ed:7d:05:7c:1e:80:79:d0:c7:70:eb:5c:c3:dc:aa:
                    91:f6:f1:b2:fa:48:67:f9:d1:d6:09:f8:67:5f:60:
                    b0:5b:a3:0d:95:0d:c6:9a:16:42:2f:31:f2:41:cd:
                    d7:5c:f7:a4:2c:da:9d:53:64:ea:54:cb:c4:20:65:
                    46:2c:8f:7d:92:fd:ea:cf:2f:75:cd:70:1d:70:29:
                    8b:e2:e1:4f:91:51:96:47:fe:c4:46:bf:0b:e0:d1:
                    07:b8:df:03:ef:56:d8:a7:f7:77:13:b2:ee:01:be:
                    39:93:ff:b1:fd:dd:18:47:70:9c:be:66:25:2f:dc:
                    27:bc:91:4f:8f:31:6b:38:f7:3d:10:d6:33:57:93:
                    84:4c:64:61:90:26:d1:8f:44:e7:22:43:4c:05:ab:
                    ae:15:dc:b4:9a:c7:be:d7:ed:3f:84:fa:c3:a2:fe:
                    69:bc:00:38:4f:15:83:9f:48:41:30:e7:84:d8:2b:
                    5c:05:a5:c1:e2:ba:85:60:32:69:47:b4:5a:dc:ad:
                    0e:c4:1d:13:8c:fd:ae:00:c9:a1:fe:60:e7:73:03:
                    17:66:67:23:ae:f1:af:79:31:ed:0a:d3:04:0f:b0:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:20:38:02:86:28:7F:84:79:9D:E6:E4:77:9D:09:FE:43:B7:CB
            X509v3 Authority Key Identifier:
                keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:25:3a:18:eb:fc:25:c4:64:ea:e3:bf:11:f8:3c:d0:5d:90:
         cd:b2:b4:ac:61:82:2b:5d:5d:a6:68:d0:b6:b1:b9:bd:b2:8e:
         34:e9:b7:28:09:81:a7:d1:af:16:6d:49:25:a6:15:64:8e:8c:
         d8:b0:17:b4:41:1a:0b:aa:6a:37:7e:37:8a:ea:99:44:e4:87:
         02:9f:9c:6f:90:20:12:45:35:08:46:29:02:8f:11:1e:90:da:
         cc:cb:ce:70:7b:05:46:df:b3:02:b1:c1:83:76:9e:85:4d:04:
         b8:ac:4e:58:23:5a:79:35:9c:67:12:99:4a:f5:d9:d7:55:63:
         c2:51:13:57:f1:1e:ff:9b:a3:70:02:48:9d:d8:10:30:9b:70:
         5e:be:86:f6:e9:08:92:cd:f5:55:72:c1:ad:ec:53:a3:c1:d9:
         c3:a1:fc:da:23:d0:a9:01:e7:46:aa:40:8f:b5:b4:5e:67:a4:
         ab:96:96:b3:08:3e:1b:ef:a4:29:f2:50:30:19:81:fe:db:64:
         e4:8b:68:c8:f0:6c:99:42:06:c5:a6:48:16:73:a9:59:62:8e:
         a7:50:a6:db:9f:9e:71:33:60:c1:1b:16:2e:01:1b:53:08:b9:
         d8:33:ef:34:5b:6f:b9:bc:e2:5b:bc:76:b6:6f:ef:17:2b:d2:
         e5:01:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:41:20 2026 by rpki-client