Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File:                     waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier:          iwGiOdu0ppbfTaeToIrGPepvUoMqGrkORR6sCstK2Lg=
Subject key identifier:   58:D0:6D:A3:41:49:FF:6C:65:2C:F3:0F:E1:7B:EE:93:54:04:3B:61
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       019CAB33E6B24A95FE78AD4414FD2B39670C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 21:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:31 +0000
Files and hashes:         1: 4Btuch_mvdqlltmpETzdDuAzgwM.roa (hash: 2z3euWLD2TSP9uJ72vB+EMHErkSQoVlj0ZuGyGWWr50=)
                          2: QTmw8uEPwuAkxGYCsMNGpU-6Oac.roa (hash: 6PDHzv/9LD0lrrNjY1ZXcqP0IHHg2T+Zii3a8r1VOpM=)
                          3: ZxAO1g5tLovdFHx98vpMiQ1WLz4.roa (hash: CM8QEi63p9MT40UeW8+7QssJWJfwAhtsxeVw1ixi6/M=)
                          4: gIto1Fy1TsyHHnAGFT5iCKyW4rY.roa (hash: v1wkRjk0YYXxOxEvKabcya7rIMKJY3kl2YxedO3Onmc=)
                          5: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: FPEVVriID6fBsD/ouhOMRXpoM7Q2ikJiWXWOqSaNzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:e6:b2:4a:95:fe:78:ad:44:14:fd:2b:39:67:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Mar  1 21:00:31 2026 GMT
            Not After : Mar  2 21:00:31 2026 GMT
        Subject: CN=58d06da34149ff6c652cf30fe17bee9354043b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:2b:df:89:dd:c9:a0:b1:39:a8:35:8d:fa:
                    f9:b1:cd:c5:3d:e0:b9:b5:55:ad:c0:ea:02:67:98:
                    0b:2a:25:66:47:42:e2:14:c3:7b:7a:5d:9c:4b:78:
                    18:08:52:fe:73:af:c4:99:c6:70:77:71:66:2e:87:
                    e1:ee:f8:64:85:03:8f:44:4c:42:dc:d6:5f:69:2d:
                    0d:d6:fc:e3:14:1d:f7:f0:1d:e9:5e:72:ff:f1:62:
                    af:a2:5f:67:da:a3:0b:3c:f4:af:04:91:5d:dd:62:
                    ab:62:ab:f7:d6:fc:c4:86:a4:23:c0:ef:80:f6:3d:
                    3d:ce:ed:23:ad:57:db:fc:57:8d:5b:08:60:0b:88:
                    77:43:68:0f:fe:a5:4a:52:ea:2c:2f:cb:f2:20:59:
                    71:81:4d:f9:b1:be:a8:58:5a:c4:f1:5a:4d:88:fe:
                    eb:53:9a:6c:d4:24:f3:1f:51:4b:3d:d6:d0:bf:fe:
                    0b:60:4c:1e:fb:4a:be:a3:f1:fd:6a:8b:11:2b:23:
                    65:a1:1d:2a:27:0b:90:51:e1:90:50:82:12:d5:7f:
                    fb:98:b8:d5:73:70:71:e9:2e:19:5b:c0:3a:6d:90:
                    e0:d0:ae:e2:df:52:c7:20:0d:05:24:3d:b6:64:05:
                    07:7a:d9:2d:2e:a4:08:35:3d:25:8d:39:0f:a2:be:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:6D:A3:41:49:FF:6C:65:2C:F3:0F:E1:7B:EE:93:54:04:3B:61
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:27:19:f8:35:a7:ce:5e:98:6c:85:94:cb:32:74:bf:9b:05:
         68:d1:43:22:1c:54:5f:90:3f:7d:99:28:52:b5:96:9c:92:5a:
         15:3b:c1:46:1e:3d:6e:91:81:36:91:b6:31:24:60:d2:e8:d6:
         3b:a0:0e:cc:f0:98:1a:37:6a:24:ad:16:2a:db:9f:07:93:fc:
         22:97:04:f2:b0:6b:dd:74:2b:df:62:4e:a0:d4:51:a0:72:60:
         62:0c:a0:92:f5:aa:92:d7:c0:08:f3:c5:4e:4f:af:61:21:c8:
         44:38:63:9e:3e:d1:06:b8:87:1d:9a:ee:31:29:90:43:ab:5e:
         d5:ba:bd:c5:34:29:ac:65:7b:0a:eb:0f:6c:3d:88:e0:68:ce:
         81:26:39:8c:f4:e7:c9:5e:ff:ee:03:f3:35:e8:31:0e:3f:d6:
         d5:36:bc:bb:2a:84:12:00:26:57:e1:a9:3d:1d:47:19:f0:90:
         4e:3f:b5:39:ae:3a:be:ec:90:3f:ad:8b:35:65:ae:ed:3e:19:
         8d:53:4c:8c:2e:cd:13:74:a2:0f:b4:db:52:06:da:8b:36:4b:
         d8:fd:d6:b9:30:92:97:bd:69:9f:38:cc:52:fa:40:ad:09:aa:
         1e:20:5d:a1:8e:b3:99:8f:97:28:7c:ad:d4:c3:d9:5b:31:3b:
         89:13:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:17 2026 by rpki-client