Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File:                     waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier:          MB9mj9cCymA3Y9z91CA7cmw6ql6Rpkq33DvvQiYAKa8=
Subject key identifier:   60:96:FB:B4:51:12:DA:C3:65:8A:2C:A3:3C:4E:17:7F:34:35:F4:49
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       019D382DCB0515165C982285DA77A10E0FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 06:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:18 +0000
Files and hashes:         1: 4Btuch_mvdqlltmpETzdDuAzgwM.roa (hash: 2z3euWLD2TSP9uJ72vB+EMHErkSQoVlj0ZuGyGWWr50=)
                          2: QTmw8uEPwuAkxGYCsMNGpU-6Oac.roa (hash: 6PDHzv/9LD0lrrNjY1ZXcqP0IHHg2T+Zii3a8r1VOpM=)
                          3: ZxAO1g5tLovdFHx98vpMiQ1WLz4.roa (hash: CM8QEi63p9MT40UeW8+7QssJWJfwAhtsxeVw1ixi6/M=)
                          4: gIto1Fy1TsyHHnAGFT5iCKyW4rY.roa (hash: v1wkRjk0YYXxOxEvKabcya7rIMKJY3kl2YxedO3Onmc=)
                          5: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: uBm+5wCP9aqoy+HyI+EJ492lRSKl1SVO3BC9XvBz4r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:cb:05:15:16:5c:98:22:85:da:77:a1:0e:0f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Mar 29 06:00:18 2026 GMT
            Not After : Mar 30 06:00:18 2026 GMT
        Subject: CN=6096fbb45112dac3658a2ca33c4e177f3435f449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:2f:8d:9e:cb:70:cd:36:46:f1:f2:87:06:
                    a1:3d:59:46:45:01:25:8f:d4:2c:8d:32:9c:22:72:
                    f5:e6:5f:58:ab:0f:d8:3c:62:4a:2f:00:7c:12:49:
                    0f:7c:27:69:bd:5c:86:2b:36:99:e0:bf:55:9a:a8:
                    09:eb:ac:cc:30:34:be:25:6d:6c:a0:0d:73:13:b4:
                    67:f4:93:b4:3c:fa:3c:bb:21:3b:36:32:fb:d6:b0:
                    e3:4d:6c:ac:3a:f2:2c:9e:56:40:08:89:b5:cd:de:
                    30:de:63:5e:55:99:1a:6d:5f:a8:64:34:44:f0:5e:
                    97:34:5c:7a:d7:b4:5a:3c:9b:62:05:45:b0:07:a8:
                    39:b8:1e:5b:2b:c8:42:92:3e:42:f1:54:d9:5e:e2:
                    86:61:96:54:e5:5d:dd:da:47:58:97:96:21:70:b1:
                    bf:27:31:0f:ad:b1:b0:5c:95:41:53:82:40:02:2c:
                    96:e1:48:c9:29:b4:92:c4:cc:a1:18:4a:c2:34:49:
                    07:0e:90:13:17:90:36:fa:29:20:43:48:f1:d5:3d:
                    28:ba:fd:4b:af:76:c0:92:c1:53:7b:72:5a:d8:07:
                    d9:be:f7:68:19:9f:68:f0:93:43:69:63:68:60:fb:
                    08:17:8e:f6:9a:70:ab:fc:61:c7:6d:d9:3c:3b:1b:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:96:FB:B4:51:12:DA:C3:65:8A:2C:A3:3C:4E:17:7F:34:35:F4:49
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:98:39:54:2d:a5:75:f0:4f:f3:9a:e1:f8:5c:e2:de:3a:4f:
         4b:68:92:59:5d:7e:53:2f:e7:a0:17:a6:d1:47:a7:83:5d:20:
         a5:06:a1:4e:0b:19:43:ee:c9:66:64:ac:7d:25:0d:c8:00:1e:
         e8:59:77:38:8d:99:6b:88:92:b6:dd:54:0a:08:94:29:0e:be:
         e9:98:73:52:53:98:51:1e:7e:5b:e1:3d:ee:91:00:37:5c:32:
         2b:32:42:60:16:05:f5:34:9f:14:d0:7f:f8:da:5b:6f:00:2e:
         a4:91:5f:7e:2a:60:c5:e5:89:dd:58:7e:05:5e:a2:1f:56:b6:
         cc:d6:eb:44:3f:14:b1:dc:c3:5d:a8:09:81:0c:5a:f0:fd:e3:
         78:aa:26:1a:57:9a:1f:0d:57:1d:61:c8:5d:40:36:12:bd:40:
         4a:62:9f:ac:fe:b8:be:24:d7:b3:1e:60:a2:46:5e:ce:05:e1:
         da:a2:4f:c9:a6:27:c4:da:c3:1e:29:a3:38:fc:ad:eb:76:6d:
         67:72:6b:c1:62:19:37:e0:63:9d:8f:6c:13:25:1f:bf:10:85:
         3b:99:84:83:54:70:f1:38:c9:34:eb:4e:17:36:dc:35:88:29:
         39:09:4b:cb:81:c6:57:0c:c4:b8:44:ff:b5:ac:6c:6f:8f:66:
         af:67:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:26 2026 by rpki-client