Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          BIs0mbpyuzda6/0Zwc1cjy2RN4VovKCMYQcPgCXbMN0=
Subject key identifier:   51:73:C6:50:99:01:8E:66:E1:0A:70:FA:0D:7F:45:D5:42:7D:ED:71
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       019CABD9B38D7BE2B2169A0BC96E58E78A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          185A
Signing time:             Mon 02 Mar 2026 00:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:36 +0000
Files and hashes:         1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
                          2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: QfSFJ2xqKbvYEMlKDbbAGm7GNROAKuMyXuT/0R1FQv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:b3:8d:7b:e2:b2:16:9a:0b:c9:6e:58:e7:8a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Mar  2 00:01:36 2026 GMT
            Not After : Mar  3 00:01:36 2026 GMT
        Subject: CN=5173c65099018e66e10a70fa0d7f45d5427ded71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:16:c1:d1:f0:f5:48:9b:ad:c7:ec:cf:43:a0:
                    dc:0f:25:5b:48:ee:14:e3:26:71:71:6e:26:4d:2b:
                    2e:41:f9:e5:d0:59:08:23:9d:5c:00:e5:b3:da:9a:
                    54:cc:c7:63:33:59:22:72:c2:86:97:c6:a8:c0:16:
                    35:be:30:f5:1b:13:47:14:3e:db:63:91:c6:7a:82:
                    85:0a:ea:f4:9b:83:c9:ec:46:3c:08:d1:d7:80:a2:
                    24:ef:e4:5f:b1:60:6b:31:2c:05:4c:99:ee:e7:e9:
                    ee:6b:cb:87:c5:03:e5:50:42:ec:75:90:cc:c1:3d:
                    3d:3b:6b:2c:d0:b3:b2:94:14:b5:c2:64:0c:f2:b4:
                    4a:16:96:12:60:df:bb:8e:ed:d8:1b:30:29:9c:93:
                    9f:cc:a1:a9:78:7d:10:b7:54:67:f0:27:25:d5:fa:
                    5e:97:1e:f9:e8:06:67:46:df:a4:e0:31:03:89:9f:
                    58:85:35:98:c6:1b:ad:43:27:8f:ce:fd:c7:a6:7c:
                    ac:a2:4e:1e:29:a7:a0:95:a5:cb:31:35:2f:9c:35:
                    6b:2e:8c:b7:33:63:3a:c3:84:36:15:11:a7:4f:b5:
                    25:29:fb:67:c7:28:0e:5b:d0:3d:e5:16:9b:a2:93:
                    82:e7:ad:3d:2f:d2:67:7d:da:e2:31:1c:dc:aa:9a:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:C6:50:99:01:8E:66:E1:0A:70:FA:0D:7F:45:D5:42:7D:ED:71
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:4e:8f:fd:0d:b7:a3:b5:2f:3a:ce:0a:69:62:c2:2c:d8:
         f2:8c:7d:4b:76:0a:5a:48:00:4a:a4:ba:07:55:c9:f6:6a:90:
         f8:71:d4:54:8f:58:eb:a4:27:05:75:e8:7d:a8:fb:f7:b1:a3:
         bd:ee:5c:2f:f0:35:35:78:ab:1a:22:93:b2:eb:2c:c2:af:c0:
         37:03:ab:1c:1d:1b:22:99:68:c8:37:60:a2:4f:39:0e:43:7c:
         6a:70:9e:b7:b8:3f:da:c5:ce:f7:58:4e:1b:6b:09:1f:0b:dd:
         2a:75:51:da:ed:02:24:f7:8f:b2:fc:a7:3d:be:a6:9c:bf:a5:
         de:fc:ec:1b:87:e7:28:c2:6a:4a:f1:6d:41:31:05:37:57:e7:
         49:ed:57:6c:b2:00:29:58:43:3d:c2:3b:d1:e3:8a:48:90:73:
         13:1b:94:11:ae:17:4a:f8:00:52:52:ca:1b:e2:78:cd:1d:db:
         33:b5:a6:d2:45:16:00:ce:b9:bd:d1:8b:60:db:7f:a7:42:21:
         69:2e:73:91:01:f0:a3:7f:aa:69:3c:94:63:00:fa:e4:f2:ef:
         4a:f4:df:12:c7:f4:29:93:47:7b:69:2c:42:bd:1c:8d:ce:62:
         99:a1:f7:a3:4e:ab:73:4b:65:74:0f:92:df:63:d7:a7:cd:eb:
         77:ee:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:19 2026 by rpki-client