Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          u4TKQppUN8a9/Ff+oBa3c/MxiuYZrQKC76sOono10Vk=
Subject key identifier:   D5:D0:C5:17:50:EA:8E:08:D3:48:4B:98:59:24:95:C9:66:8A:D7:86
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       019CAD5929E1AC0C35E71B2D03DA3A0522A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 07:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:27 +0000
Files and hashes:         1: XhVmXM4K4HCBlMG1ngBraE1XDdo.roa (hash: Lr9nUJJLPlvbbArNTq9/86G0Uy2dThr703k1XnKZ2HU=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: gpqpEXmAB266Ddg3XoEXNhpmu29dxKiMxQoMAxnhywc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:29:e1:ac:0c:35:e7:1b:2d:03:da:3a:05:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Mar  2 07:00:27 2026 GMT
            Not After : Mar  3 07:00:27 2026 GMT
        Subject: CN=d5d0c51750ea8e08d3484b98592495c9668ad786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e7:06:5d:00:ac:ee:c8:fd:31:db:57:0b:08:
                    23:7d:da:99:7e:ec:fa:62:a7:92:70:6e:a3:83:be:
                    8d:f0:08:90:f4:38:a6:78:eb:6e:f5:d6:83:b4:fb:
                    c0:17:54:5e:81:97:63:3e:fb:27:70:23:98:d6:40:
                    1b:1a:e3:85:9f:8c:c7:6a:4d:aa:4b:6e:3c:a6:4a:
                    a4:48:2a:c4:94:3f:ab:b1:f2:b3:7b:0b:2f:3f:33:
                    6c:01:67:1e:a7:37:d3:c7:46:e9:61:d3:96:44:a2:
                    88:a4:15:40:c9:9f:7e:1e:a0:2a:b2:6b:51:ff:d0:
                    66:18:ef:31:e4:af:f4:59:4f:ce:13:83:05:2a:fb:
                    45:d9:34:ae:4b:ac:fe:b9:b7:d8:20:9e:5b:af:fb:
                    75:b9:14:70:81:39:04:a3:fb:8a:e9:c5:d0:9e:de:
                    3e:91:b9:a0:14:73:9c:de:3b:30:34:35:44:34:c2:
                    a5:b1:6e:c3:ab:b4:9e:5d:7e:88:b7:67:b6:88:21:
                    d8:25:e9:5b:75:4d:f0:5a:23:a7:93:e9:e4:04:b0:
                    a4:a2:46:96:3c:f1:5d:8d:53:6a:7e:de:66:52:ef:
                    f6:a0:b7:86:9d:4e:41:b2:f9:96:bd:09:f8:11:20:
                    0a:92:61:1e:e5:1f:8f:da:78:59:90:ca:2b:65:a5:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D0:C5:17:50:EA:8E:08:D3:48:4B:98:59:24:95:C9:66:8A:D7:86
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:dc:a1:47:5c:50:59:31:df:d5:3f:ec:52:4f:42:9f:09:
         36:cc:2d:c2:d7:4a:1b:f2:51:44:64:67:08:50:b6:c3:bd:82:
         45:de:ec:31:07:b1:01:74:49:21:81:2d:2b:f7:21:6e:87:65:
         da:ae:cd:06:c0:70:4f:94:00:67:87:4d:93:5d:c1:63:1f:fd:
         e2:2f:60:00:1c:c7:be:1e:a0:6a:88:28:83:26:3d:47:2b:3c:
         ab:8e:71:e0:68:f8:02:42:dd:96:c5:8d:b3:05:25:5f:99:6e:
         44:a6:9d:db:fa:a3:3f:49:08:10:c5:93:23:82:fe:c9:05:53:
         b3:54:8c:b8:e4:99:5e:5f:c8:cd:a8:e9:53:69:39:c0:76:25:
         a6:a4:85:d1:3b:24:c7:1f:ce:1c:54:da:3f:77:90:3a:cd:f3:
         35:33:b6:40:18:5e:14:e1:cb:e9:58:55:82:10:4b:da:34:3e:
         95:68:a5:80:3b:05:34:ab:b5:5a:45:2b:a4:10:3e:b3:0c:b5:
         bd:7a:d1:18:63:60:0d:08:60:00:81:3e:a0:c2:7e:18:29:e2:
         17:a7:4e:df:b8:b8:f7:e3:c0:a0:07:4a:a6:73:c6:57:f8:5b:
         b7:c4:5d:ae:89:13:60:3e:9d:00:54:60:67:1f:b6:a6:c5:bd:
         3f:1a:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:10 2026 by rpki-client