Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File:                     wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier:          weCnZtFrf04G1IvlqQpMQptQNPWcvLpGPNbMwGShh/s=
Subject key identifier:   A6:E3:F8:99:0E:E9:0E:98:09:3D:BF:5F:6B:6A:AC:7C:33:E7:E4:25
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       019CA90EFD7EC806BB271D141DEEEBAE165A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number:          0202
Signing time:             Sun 01 Mar 2026 11:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 11:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 11:00:57 +0000
Files and hashes:         1: 3SgkFgo0LTk2swzrn5dq7YjNcJs.asa (hash: wflGAfTimYQQh20JKmlCe7N9/FvGlFFSJj9BuYPzogQ=)
                          2: Bhwxfe7-2H1mP_yNUtpEged1-GE.roa (hash: lwwOGYlsDe8otoVO3CpnxZxqzeNrxkyEQ5g4/KYMubI=)
                          3: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (hash: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4=)
                          4: kG29gU2oA8IxQBu2izkZt4FiHrw.roa (hash: Mbf2SHQO1ZPAunz6dIhpxmgcYgu15NI5RZRxV0O3xVE=)
                          5: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: xS7K6WUvVmtqlpjMdjpi0Q4YOpeLtGK3558NWWqbP7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:0e:fd:7e:c8:06:bb:27:1d:14:1d:ee:eb:ae:16:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Mar  1 11:00:57 2026 GMT
            Not After : Mar  2 11:00:57 2026 GMT
        Subject: CN=a6e3f8990ee90e98093dbf5f6b6aac7c33e7e425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:5c:ca:25:5d:97:4e:24:af:f8:64:23:e5:
                    11:d6:5f:b3:69:3d:e7:bc:06:5e:c0:9a:69:93:08:
                    9a:07:b0:e4:65:ef:1e:16:b6:60:0b:53:c3:f4:84:
                    d7:b0:15:4d:bb:b8:8f:dd:0f:bc:6e:62:9a:cb:aa:
                    ab:f0:b5:21:50:52:31:47:28:71:03:36:6b:9c:d6:
                    32:ae:75:9c:a7:5c:73:21:68:37:ff:ad:20:a9:62:
                    6e:70:fa:bf:d8:5d:a1:fc:2f:67:8d:0c:d9:53:b5:
                    6a:d7:56:f1:6b:a9:bb:0d:11:47:92:2c:3b:be:6b:
                    62:4b:88:1c:d5:a8:ec:ce:29:a9:01:af:6c:69:dd:
                    56:81:15:34:07:47:fa:0d:db:3e:b5:82:16:96:4f:
                    3e:7e:7b:c7:ca:ba:da:8b:55:dd:9d:89:80:2e:68:
                    21:73:98:18:35:49:f6:e3:18:97:5b:4d:c3:6a:2f:
                    cd:b8:63:2b:09:c5:c9:f4:b5:f8:78:52:bf:d3:61:
                    65:eb:10:2b:bb:a0:6f:03:47:43:27:4c:f7:cf:24:
                    0f:71:87:4d:40:42:95:c5:4e:02:09:e2:09:7b:31:
                    1a:6f:31:a1:1d:ac:3c:01:d0:e4:a4:3a:b7:0f:e0:
                    52:80:02:c1:f3:b3:81:ab:e2:f0:51:20:b2:cc:a1:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E3:F8:99:0E:E9:0E:98:09:3D:BF:5F:6B:6A:AC:7C:33:E7:E4:25
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:54:49:fc:fb:15:89:c2:0c:2f:e5:b9:c9:4c:52:4a:82:24:
         65:ab:57:e8:66:c8:1c:fb:6f:d9:e0:83:3b:e0:8c:83:6b:34:
         88:77:56:70:48:f4:99:c7:e2:33:d2:24:9b:56:d4:6c:5b:53:
         65:e7:7b:b0:6a:13:6f:18:61:53:0a:45:7d:72:a0:6d:53:9d:
         20:8b:88:26:0a:b5:3e:b3:c5:a8:09:70:8c:8f:e4:67:44:58:
         b4:ca:ea:85:fe:f1:b0:be:e5:53:c9:c8:25:59:02:fa:bb:c5:
         af:e2:0e:a5:37:5e:6b:44:e1:0b:ce:5c:8e:c5:5e:a4:27:a6:
         f5:e5:a7:91:46:5c:b4:70:09:7e:90:6a:89:79:7a:7c:a2:6a:
         47:d7:a4:c7:7b:86:1f:2c:d3:a3:16:14:db:04:3a:ab:19:32:
         31:ac:b4:15:94:8a:d0:11:0c:83:b1:70:57:0a:3b:59:61:3d:
         5c:28:14:96:b3:f4:b7:b1:ec:a8:c3:43:b8:af:d6:4b:78:21:
         01:b4:c6:a6:2f:dc:ec:03:45:f9:2e:c1:c7:96:ce:97:60:5f:
         5b:c7:b7:f1:e2:94:ce:19:9f:85:8f:27:e8:82:c8:ee:34:91:
         01:f6:85:e2:36:d6:17:7d:c0:93:ff:8f:95:1b:3e:f7:d9:54:
         af:f5:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:19 2026 by rpki-client