Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File:                     wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier:          WCuaNxXateBRfhJIuBhRy+t4oXtk3dSDyLzd2chlj4A=
Subject key identifier:   4F:28:30:DD:E6:42:30:8E:CE:A6:2A:6A:0C:6F:56:7F:FD:18:59:97
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer:       /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial:       019CAAC6D7D21639C1539A2B19BC4067B8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number:          1184
Signing time:             Sun 01 Mar 2026 19:01:23 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:23 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:23 +0000
Files and hashes:         1: 3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa (hash: gAnkb8zd3PHjDZTfC8dT4Ka5LoLCtOrff/CEiB269iI=)
                          2: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (hash: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A=)
                          3: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (hash: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0=)
                          4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: aujCo5Jq4ve/LkBfTTgdfR36u55Ria9CzepB7gd6RjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:d7:d2:16:39:c1:53:9a:2b:19:bc:40:67:b8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
        Validity
            Not Before: Mar  1 19:01:23 2026 GMT
            Not After : Mar  2 19:01:23 2026 GMT
        Subject: CN=4f2830dde642308ecea62a6a0c6f567ffd185997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:47:80:e9:49:8d:fc:38:e1:5e:73:e0:f8:
                    31:f8:88:d5:76:ef:96:11:21:63:67:cd:c0:29:9b:
                    6b:d3:5c:77:77:64:ca:c9:27:1e:b1:9b:0b:93:08:
                    1b:ea:49:d4:ef:41:1d:79:09:94:2c:21:fe:be:7d:
                    cf:7e:0b:72:97:06:bf:a0:66:bd:fb:67:76:00:b7:
                    20:bf:5e:17:9f:aa:80:ce:02:e6:ef:a3:03:ee:07:
                    91:4b:7d:e0:67:75:37:d6:5d:73:dc:5c:ab:73:2e:
                    d5:4c:47:fa:d3:b4:05:8b:d2:07:e1:3d:16:79:e3:
                    21:6e:4f:7a:a7:41:77:44:8c:35:ff:32:69:18:bb:
                    9d:da:93:e8:5e:95:cc:b9:55:6c:21:fb:a1:28:44:
                    af:fb:ba:4f:44:e7:21:12:37:c8:90:ea:85:9b:9d:
                    f4:6a:99:c2:ad:51:52:e3:7e:77:bd:6c:73:8e:9d:
                    36:60:d5:07:a8:03:cb:51:f0:70:7e:ca:0c:8f:96:
                    fc:42:2d:dc:2f:52:01:58:d1:ac:67:9b:f1:9a:a1:
                    3f:05:ec:bd:c0:52:01:7d:09:05:d0:21:de:bc:87:
                    9a:ea:1c:c2:91:54:6a:e9:9b:3e:f5:af:8c:9b:26:
                    68:a7:5a:ce:26:d3:e4:08:f1:0f:89:e3:7c:0f:9b:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:28:30:DD:E6:42:30:8E:CE:A6:2A:6A:0C:6F:56:7F:FD:18:59:97
            X509v3 Authority Key Identifier:
                keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:18:88:a7:a8:c5:9f:19:fb:ad:a9:28:27:24:64:31:f4:05:
         91:ca:56:77:50:21:25:2a:95:7b:50:d1:d5:c3:96:34:c7:7e:
         e1:56:88:99:77:83:fd:4f:d4:85:3b:26:ff:9e:b3:d0:81:6c:
         92:9a:d0:55:fd:8d:a6:3e:a1:ed:87:57:9a:59:da:da:3e:f0:
         0b:ab:96:9e:01:d2:82:57:dc:e3:72:7f:0c:43:8e:2d:1d:3b:
         f2:b3:f2:c2:05:96:ce:54:57:ae:9a:0f:8a:3b:57:55:9d:63:
         6b:9a:69:0e:c7:16:45:41:21:90:6c:bb:ba:b0:70:55:e2:99:
         b8:0a:d2:23:08:94:96:46:cd:7d:0e:88:0a:c2:6b:5e:23:97:
         61:be:81:c4:06:0a:bd:1c:39:d7:57:72:c1:66:47:6d:58:68:
         29:f7:e6:e2:a2:5c:ae:bf:29:dc:d5:18:3b:1b:b0:f2:ac:f3:
         2b:8f:96:02:85:f7:26:0e:3b:0c:f9:14:94:53:bc:79:4a:30:
         29:54:0f:68:6d:52:3f:ac:14:1f:f0:9e:c6:f3:12:3b:a0:17:
         bf:4a:d3:5f:c6:16:64:bc:f9:59:e4:1c:8a:ee:da:d0:7b:46:
         37:03:26:72:d7:23:fd:e7:a6:9f:9f:67:af:86:7b:09:09:74:
         18:a9:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:17 2026 by rpki-client