Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File:                     WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier:          m10u7FPPi/WanO6a1aO29TDIc1CBrTeA2c9fMRFRxAQ=
Subject key identifier:   E3:21:CC:0B:25:5C:7A:39:5C:54:99:04:5C:55:92:6A:D8:D7:79:F6
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer:       /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial:       019CACEB895BAECE3005F50C6233F039C710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number:          0619
Signing time:             Mon 02 Mar 2026 05:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:43 +0000
Files and hashes:         1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
                          2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
                          3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: ApdFXKFmjluZxHZIccwrnMPmBbaFAru3CCbXyW2syjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:89:5b:ae:ce:30:05:f5:0c:62:33:f0:39:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
        Validity
            Not Before: Mar  2 05:00:43 2026 GMT
            Not After : Mar  3 05:00:43 2026 GMT
        Subject: CN=e321cc0b255c7a395c5499045c55926ad8d779f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:0c:31:95:cd:3e:be:24:5b:61:f3:79:1f:
                    83:4a:b3:5c:c6:74:11:a8:9f:c4:a4:f2:c9:3e:ff:
                    3f:2a:20:a3:7f:2e:60:90:f5:d1:85:4b:da:41:30:
                    c8:7f:d2:71:ab:45:c5:3c:5b:f8:13:87:07:e4:a7:
                    0d:6c:93:6f:73:98:fc:07:b7:3f:a7:72:33:ca:51:
                    d8:2e:f2:3a:c2:d7:c8:d8:3f:6e:0b:c0:24:46:83:
                    a3:14:be:32:f4:5d:7f:c1:2c:44:a3:3b:25:ff:db:
                    92:9f:d5:c3:95:cc:83:9c:1b:7a:f6:85:5b:db:7c:
                    f6:6d:31:9f:4f:09:0c:6e:b9:93:70:f8:e8:0d:a7:
                    b5:3b:53:f6:29:26:51:a3:da:cd:be:95:46:51:7b:
                    03:b8:48:6f:a3:1e:92:b9:e2:2b:fe:81:2b:43:d0:
                    86:85:c6:5d:d6:fc:46:12:a6:40:d8:ba:60:4a:76:
                    46:78:a4:b6:af:14:40:b8:84:f9:6a:0d:ac:b0:d5:
                    e1:66:43:3c:2a:93:20:cc:56:58:7f:0b:7f:35:09:
                    bd:2e:fb:da:d0:a2:7b:14:65:61:aa:34:c1:bf:08:
                    24:e2:5b:63:96:f9:d2:c3:3e:c2:88:15:4f:01:a4:
                    05:61:fa:f1:57:70:3b:dd:b0:6d:c3:ce:4c:4e:3a:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:CC:0B:25:5C:7A:39:5C:54:99:04:5C:55:92:6A:D8:D7:79:F6
            X509v3 Authority Key Identifier:
                keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:13:55:0c:54:3f:b0:cc:26:92:ca:ff:55:5c:1e:1c:1a:15:
         ef:b1:c6:3b:63:2e:fd:d8:52:14:3a:f5:dd:17:c4:a8:82:a3:
         27:98:29:ae:f0:7f:bb:e5:de:f6:36:bb:23:8c:95:12:4d:0b:
         cc:76:25:d4:6d:b5:c0:a5:7a:b4:97:ba:92:8a:74:a7:ec:25:
         ce:16:95:aa:2f:8c:f2:fc:85:d8:ec:f2:aa:58:cb:9b:89:e4:
         ab:2d:ce:44:d2:64:ec:4b:40:cc:4d:da:62:2e:7b:b4:24:04:
         de:2c:c3:63:bc:61:22:c5:2c:d4:23:af:65:35:32:54:96:ca:
         3b:7b:3d:fa:d8:90:9f:51:3c:ae:a7:1d:9f:05:31:55:d9:8c:
         b9:09:2d:e7:17:fd:a7:d0:c9:e3:1c:15:18:72:67:e6:55:72:
         82:b8:4c:8f:31:8f:1a:bd:88:de:cd:d2:5d:67:30:dd:99:e9:
         88:45:20:00:f6:34:06:af:55:be:91:28:87:04:b6:44:0e:5f:
         4d:ca:f0:e8:b9:e2:df:67:d0:f6:c3:e5:ce:31:08:9e:46:28:
         ef:bb:35:15:0d:28:e1:07:63:af:02:d7:f2:2d:f1:04:92:53:
         4b:54:84:39:a9:7b:72:cf:4e:04:1f:ce:6c:56:6c:d1:c8:4b:
         4a:ff:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:15 2026 by rpki-client