Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          55/gEzASpRSez6hOErRI/WEb//5/cFNt+7Vn0nrY4Hs=
Subject key identifier:   1F:19:92:8E:E0:EC:20:DD:9A:08:D2:03:1D:D7:57:6E:8E:95:78:7A
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       019D386613C310248293349E09178DD6091A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 07:01:46 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:46 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:46 +0000
Files and hashes:         1: XhVmXM4K4HCBlMG1ngBraE1XDdo.roa (hash: Lr9nUJJLPlvbbArNTq9/86G0Uy2dThr703k1XnKZ2HU=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: vhC7kzhJzOlS/1nMJdn+6WFHffCBLJGr7mcuoNRUurM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:13:c3:10:24:82:93:34:9e:09:17:8d:d6:09:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Mar 29 07:01:46 2026 GMT
            Not After : Mar 30 07:01:46 2026 GMT
        Subject: CN=1f19928ee0ec20dd9a08d2031dd7576e8e95787a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:ec:fe:cf:eb:37:df:fd:ae:2c:fb:19:60:
                    61:a2:85:58:34:2f:84:d0:d5:a6:9f:ce:f8:20:3b:
                    57:72:9a:44:14:f4:29:62:f1:a7:3a:be:08:7c:27:
                    2e:38:20:69:6b:ee:96:fa:8c:b5:e7:73:bd:80:51:
                    f2:1d:9c:92:16:6d:1c:ae:85:ac:2f:4c:39:11:9c:
                    f4:02:6a:98:c7:0f:0f:13:1d:61:e7:47:0c:d9:c9:
                    a8:97:94:5e:24:1a:c3:88:ce:ff:84:5b:53:04:88:
                    f7:c8:d9:2e:14:c5:64:3c:6f:1f:66:ba:da:e9:cd:
                    28:62:7c:17:89:13:f4:d7:6f:e4:c4:c8:e5:eb:92:
                    90:5e:79:a9:19:ce:63:e0:7a:17:c1:a1:5f:39:4c:
                    d7:3c:02:b2:e3:9d:6b:08:c8:92:13:2c:fa:de:5e:
                    56:1d:c2:c5:9e:dc:2e:99:72:83:fb:66:07:67:92:
                    1f:89:d3:ce:b7:ad:bd:e8:ae:40:b3:4e:b0:00:b4:
                    b5:be:57:d8:58:e5:b4:3e:c8:d0:85:d4:bf:31:05:
                    8f:f9:5f:bf:a1:d7:24:b9:de:1b:f3:d7:ba:ab:47:
                    e8:32:f6:29:51:b0:75:13:8d:23:c0:c6:33:37:14:
                    c3:31:32:10:40:ee:18:be:b3:14:1d:07:ef:5c:14:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:19:92:8E:E0:EC:20:DD:9A:08:D2:03:1D:D7:57:6E:8E:95:78:7A
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:c7:cb:54:bc:21:8e:ce:36:86:da:d0:78:20:34:1d:ae:
         74:06:ca:bf:1b:74:47:d1:18:ed:cc:c5:dc:52:b5:6c:74:64:
         27:8e:90:63:d3:b3:b4:2e:de:bd:6b:24:35:c2:ec:91:51:d8:
         31:fd:6e:23:42:78:09:8d:6f:4e:05:29:80:ad:56:6d:1c:f5:
         6d:53:a2:b1:fc:9b:69:82:57:83:64:1e:83:dd:bc:3b:f3:e8:
         5b:b7:c7:44:1a:d2:0a:27:d2:33:02:21:be:b2:65:a0:9f:77:
         50:99:c1:85:b6:eb:ef:c1:9f:bd:87:44:4b:29:cd:96:ad:05:
         51:e2:2e:36:3e:51:a9:0e:9f:3d:90:04:2b:5b:34:85:db:ae:
         5a:3c:94:f3:19:4f:3b:a7:a1:59:6b:9c:e8:29:1a:45:c2:4d:
         d7:6c:6d:8e:85:49:83:1c:3f:c6:84:78:24:b0:1b:bf:e0:ff:
         fa:e7:b8:44:50:9f:ee:28:13:e0:f0:b1:52:e9:8a:00:5d:46:
         74:bf:ed:61:32:1c:79:2a:39:18:94:a0:ca:7a:a1:42:0f:24:
         a8:65:ce:2d:37:82:61:44:c2:3e:a2:43:8b:df:eb:d3:a7:6e:
         36:cf:3b:cb:9c:f3:11:b6:8d:f8:8a:ba:ae:35:03:dc:8b:c9:
         0f:5a:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:43 2026 by rpki-client