Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          yrq2EubZ7jq/cSfP2GnX77FSpa5omWvHNNxB4U3qPsU=
Subject key identifier:   D9:72:8B:5F:B8:73:75:04:10:F9:BE:D4:01:06:48:E2:D8:4E:39:B6
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019CAD22B3A3AA135195D358BBAD5C4F2448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 06:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:58 +0000
Files and hashes:         1: YFh9-2nTeDmUHEyrVn852pFgnwo.roa (hash: yyThjzHGK9fG9mEurU44rgO6nvdWGooy3WaBaE5pipY=)
                          2: e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa (hash: c2RKRL7A/fU0mRm1zb8DuJEx4OgsR06sHWdY9eY+h7M=)
                          3: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: Le8YuA1kfRvbmQ2wKpLUVt1bSHuSszhzGYWKGMuSDUA=)
                          4: xedrbfhupLPmqrs2cnazcNbuQ6s.roa (hash: Y/EDgTZimwkgVMZ0kvboCaG04PSLtb5uHoL17HArkIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:b3:a3:aa:13:51:95:d3:58:bb:ad:5c:4f:24:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Mar  2 06:00:58 2026 GMT
            Not After : Mar  3 06:00:58 2026 GMT
        Subject: CN=d9728b5fb873750410f9bed4010648e2d84e39b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:b0:87:cd:fb:f4:40:90:61:1b:0b:52:4d:
                    ac:f8:f4:b9:3c:cc:a9:eb:3d:8d:d2:d1:0d:b0:44:
                    db:9f:85:9d:8a:19:0a:94:f6:c0:04:4d:c4:23:22:
                    b3:4a:76:bc:0d:56:37:f9:8e:83:5a:ed:b4:33:52:
                    57:18:28:d4:f3:48:21:f2:46:1c:79:65:0b:dd:a0:
                    f1:d8:dc:c1:c0:c0:ba:7a:84:9e:ed:f4:45:85:4a:
                    b5:bb:27:dd:62:5d:28:b8:1a:95:0f:1f:fa:de:98:
                    54:3f:9a:e5:78:d4:17:bf:4f:ca:12:93:09:99:48:
                    5c:58:ec:a4:da:60:60:b2:bc:14:9b:79:66:8b:a3:
                    2b:ab:67:d4:46:ff:6c:4a:05:38:ef:7a:3f:89:09:
                    bc:cd:ab:a7:c1:ef:3c:e4:cd:bd:16:18:4e:e2:10:
                    fa:aa:98:92:87:20:d1:19:79:9f:0f:da:f6:ef:56:
                    7d:03:c7:0e:31:c2:56:f8:19:40:ce:be:26:6b:90:
                    aa:15:4b:75:68:18:cf:4d:42:38:37:68:87:cb:bc:
                    ec:98:54:de:85:fa:b7:46:88:82:ff:0e:d0:3c:ef:
                    c6:0b:79:6f:17:9a:13:be:cf:06:20:3a:8b:67:d6:
                    ea:18:f3:fd:21:56:e5:27:fe:d7:a8:11:2e:53:71:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:8B:5F:B8:73:75:04:10:F9:BE:D4:01:06:48:E2:D8:4E:39:B6
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:54:82:a5:bd:32:a2:4d:78:12:e2:c9:9f:5e:df:0e:38:
         9b:0a:9e:10:ef:c0:d6:cb:49:29:4a:d4:e0:34:99:e5:0c:16:
         d4:3b:0c:5e:00:69:60:09:11:29:90:ca:d0:de:7c:4d:aa:5e:
         e7:f9:4f:d3:ff:9d:cf:89:77:df:89:79:dc:36:f7:d8:f6:d2:
         49:0e:02:8c:3f:cc:fb:98:c3:0a:57:cc:a2:63:d9:93:40:b1:
         01:7e:73:7a:8f:50:83:eb:8f:f3:a9:2f:5c:32:ee:2f:11:5d:
         a2:30:04:78:71:a4:26:50:b6:58:09:25:ec:a0:b7:49:29:d7:
         f1:85:f1:58:14:0f:27:09:c5:07:ef:95:61:b1:6b:ba:e4:eb:
         fe:5b:3e:d4:fa:67:2b:b4:74:6e:9d:f6:a1:dc:4f:49:88:27:
         7f:1e:2a:65:56:7e:63:b7:1c:4c:71:fd:66:35:53:7c:cb:77:
         7e:84:d5:36:09:f4:cc:56:e6:20:79:d2:35:f9:fd:ae:f9:2b:
         a3:d1:e8:ef:a5:ca:2d:57:54:f6:c1:05:91:07:96:0b:d8:af:
         2e:2b:5f:6c:22:12:35:f5:bc:47:5b:68:c1:9b:9e:89:f0:50:
         be:ce:08:71:44:85:3d:3c:a1:a9:ac:7a:81:41:82:2e:f0:1a:
         a1:d9:6e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:33 2026 by rpki-client