Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File:                     warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier:          1VBDQmkPqzWHvkY+PU9FADzbtVelYB7YbMabtqVv6kE=
Subject key identifier:   0C:F5:F7:FF:B0:98:36:0D:D3:8A:BE:9E:EA:EE:7E:AF:B8:E0:F5:C5
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer:       /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial:       019CAB347CD3919B8ACBE24BA78690294CE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number:          10BD
Signing time:             Sun 01 Mar 2026 21:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:09 +0000
Files and hashes:         1: AzOuI_MehMbEwOyMsmf5J1qkufY.roa (hash: 3C8SoQIITsfe+wm6WBHpC3xat86Y/B16K+Vi5ChAreo=)
                          2: YyPSiBy46g1WV_9WxFNVVcOuoWw.roa (hash: z36Mohror2Ou7nnt3RF1uceSdOn/ObfWr29FQ4dH2E0=)
                          3: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: g0YcrAZxnH8uZHL53qa9HZV+8A+b1QMJwyyx8M7vMQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:7c:d3:91:9b:8a:cb:e2:4b:a7:86:90:29:4c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
        Validity
            Not Before: Mar  1 21:01:09 2026 GMT
            Not After : Mar  2 21:01:09 2026 GMT
        Subject: CN=0cf5f7ffb098360dd38abe9eeaee7eafb8e0f5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:b6:57:81:ad:dd:c7:72:ac:fe:3e:3f:90:
                    f0:98:cf:99:b8:e0:44:93:65:83:7d:8f:a7:6d:24:
                    dc:45:47:e5:86:05:24:29:a8:76:f8:10:bc:8b:53:
                    45:b6:39:2e:22:b9:7d:16:d3:60:50:8a:3d:1e:04:
                    4a:98:9f:93:47:9a:1a:b8:02:ec:4a:f8:19:8f:e6:
                    eb:fd:3b:bf:ab:f3:43:7d:b9:25:65:d3:8e:10:fa:
                    03:00:94:a0:71:87:68:62:0e:5e:12:e4:68:12:cb:
                    1a:98:a7:d0:52:b9:bf:2f:2d:fa:bc:3e:aa:e4:46:
                    f0:8b:09:18:1d:85:83:b2:bd:5c:ab:9e:48:b7:d4:
                    3e:04:ab:74:3e:26:d1:9d:0e:f4:00:ac:a9:f5:5f:
                    3a:42:98:16:a5:41:62:03:24:c2:77:3c:0a:ca:b3:
                    30:b4:2f:e8:57:12:8f:26:10:86:32:7e:ad:fc:c4:
                    5d:f2:92:32:6b:c3:a0:98:62:ff:0f:3d:b1:6e:ea:
                    8b:a0:a4:2b:52:cc:9e:cf:f9:fd:31:0c:5d:99:5d:
                    a2:80:a8:69:19:8a:f1:dd:25:93:02:db:2c:1e:1d:
                    cc:60:90:39:8c:3d:08:57:44:3c:ce:d6:57:f3:18:
                    24:c6:53:eb:27:1a:4e:61:78:76:51:31:b1:6f:18:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F5:F7:FF:B0:98:36:0D:D3:8A:BE:9E:EA:EE:7E:AF:B8:E0:F5:C5
            X509v3 Authority Key Identifier:
                keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:67:cc:e9:69:88:fc:6d:60:6b:f7:b9:20:26:71:05:d0:
         87:da:55:3d:67:84:9c:14:15:cb:99:21:2e:6f:43:ff:f6:e0:
         96:be:9a:dd:ce:e3:ec:a1:05:d0:7c:fc:7d:40:ea:67:12:d9:
         16:ad:17:66:3a:14:f3:63:c1:45:12:4d:19:d0:04:da:34:6c:
         10:50:33:73:71:aa:61:8e:cf:46:67:37:9c:0b:d3:5c:11:2f:
         4a:ac:40:6f:fe:42:c1:b6:df:f2:7c:e7:99:33:9e:19:94:66:
         a4:d5:4a:c5:b0:36:1e:78:68:84:af:92:0f:2c:9c:7f:96:e4:
         ec:ce:b6:53:a3:d1:90:d8:c8:d6:6f:9e:44:fc:e1:7f:eb:3b:
         92:7b:e9:7a:5f:4a:2e:dc:e6:dd:86:56:34:ab:40:98:61:a9:
         5f:f3:30:5a:81:23:f4:de:6b:f8:1e:7b:ce:da:36:ca:92:54:
         d3:87:bb:ad:d4:f6:db:94:07:3f:aa:1f:a1:13:d3:22:f7:ad:
         61:1d:b5:29:86:2e:f6:bd:e4:f4:fe:da:9c:77:aa:9c:84:33:
         92:83:65:3e:83:d8:04:e3:f8:d4:ee:30:6b:ff:c5:1a:3c:39:
         6f:23:1c:a0:4e:b6:d5:a7:11:01:7d:53:72:ff:e1:f0:55:ac:
         6d:bd:ba:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNHzTkZuKy+JLp4aQKUzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1
MWMyN2UwHhcNMjYwMzAxMjEwMTA5WhcNMjYwMzAyMjEwMTA5WjAzMTEwLwYDVQQD
EygwY2Y1ZjdmZmIwOTgzNjBkZDM4YWJlOWVlYWVlN2VhZmI4ZTBmNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsa2V4Gt3cdyrP4+P5DwmM+ZuOBE
k2WDfY+nbSTcRUflhgUkKah2+BC8i1NFtjkuIrl9FtNgUIo9HgRKmJ+TR5oauALs
SvgZj+br/Tu/q/NDfbklZdOOEPoDAJSgcYdoYg5eEuRoEssamKfQUrm/Ly36vD6q
5EbwiwkYHYWDsr1cq55It9Q+BKt0PibRnQ70AKyp9V86QpgWpUFiAyTCdzwKyrMw
tC/oVxKPJhCGMn6t/MRd8pIya8OgmGL/Dz2xbuqLoKQrUsyez/n9MQxdmV2igKhp
GYrx3SWTAtssHh3MYJA5jD0IV0Q8ztZX8xgkxlPrJxpOYXh2UTGxbxhRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz19/+wmDYN04q+nurufq+44PXFMB8GA1UdIwQY
MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt
Yjc1NzhiMTBiYTdlLzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl
LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLNnzOlp
iPxtYGv3uSAmcQXQh9pVPWeEnBQVy5khLm9D//bglr6a3c7j7KEF0Hz8fUDqZxLZ
Fq0XZjoU82PBRRJNGdAE2jRsEFAzc3GqYY7PRmc3nAvTXBEvSqxAb/5Cwbbf8nzn
mTOeGZRmpNVKxbA2HnhohK+SDyycf5bk7M62U6PRkNjI1m+eRPzhf+s7knvpel9K
Ltzm3YZWNKtAmGGpX/MwWoEj9N5r+B57zto2ypJU04e7rdT225QHP6ofoRPTIvet
YR21KYYu9r3k9P7anHeqnIQzkoNlPoPYBOP41O4wa//FGjw5byMcoE621acRAX1T
cv/h8FWsbb26hQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:47 2026 by rpki-client