Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
File:                     iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json)
Hash identifier:          J6vclX7Akjs3lAbg9YXwjll/AVdgAgwJHahF7EKk2fM=
Subject key identifier:   70:1B:E0:2C:FF:B0:97:31:A0:5B:6B:DD:45:FA:76:91:40:48:50:D0
Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5
Certificate issuer:       /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
Certificate serial:       019CAC0F94C4F5F25BA32F8298E4793C7C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
Manifest number:          0C55
Signing time:             Mon 02 Mar 2026 01:00:28 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:28 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:28 +0000
Files and hashes:         1: ISG7wd6pLCoSiDnLQmoPtvGHwik.roa (hash: 8ye3uM7bxUh3STzMCoYVpX9YPeampsjAg7+ykblDc/0=)
                          2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: cJB3i5kCF5sk+fQshCHiQwM0FCgpyLKT29GwierKQvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:94:c4:f5:f2:5b:a3:2f:82:98:e4:79:3c:7c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
        Validity
            Not Before: Mar  2 01:00:28 2026 GMT
            Not After : Mar  3 01:00:28 2026 GMT
        Subject: CN=701be02cffb09731a05b6bdd45fa7691404850d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:41:42:17:e9:60:bb:95:85:b8:96:24:3e:
                    73:fa:52:66:9c:f8:17:35:15:bf:6d:a2:77:4b:7e:
                    68:ab:17:89:c7:36:72:e7:23:3d:04:70:68:d3:5f:
                    43:de:3d:09:8d:27:0a:38:3a:18:54:5c:bf:da:c3:
                    ee:88:3d:51:63:c9:57:94:9f:8b:b3:43:35:e8:bb:
                    d0:70:f1:c2:da:9b:34:14:dc:2d:a6:ac:6b:02:c3:
                    54:f3:9c:c7:c5:0b:81:af:fc:85:9c:14:4a:30:77:
                    a4:44:88:ce:33:9b:1a:eb:21:c5:48:b1:c8:4e:24:
                    dd:0e:fc:3c:7a:4d:6e:3f:66:08:d6:c7:7e:9e:d6:
                    26:5b:f6:a5:29:a9:2c:98:da:12:38:d2:05:09:74:
                    aa:a5:99:f4:c3:ab:0f:9a:af:de:76:29:72:57:17:
                    3a:d1:f4:b7:88:67:c5:95:96:62:3e:86:c3:28:12:
                    12:5a:44:6d:3c:9c:2a:1d:e7:e3:06:90:dd:3d:30:
                    ae:e9:3e:cb:62:1e:81:b2:36:bf:51:63:1d:25:a9:
                    47:09:a1:3c:bc:19:3d:0c:27:b9:e7:45:25:27:07:
                    1c:f9:8b:ee:b1:fb:f3:b2:c1:1a:73:96:ad:93:d4:
                    d2:37:ce:3e:f9:da:9b:80:e6:30:b8:d1:80:75:c9:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1B:E0:2C:FF:B0:97:31:A0:5B:6B:DD:45:FA:76:91:40:48:50:D0
            X509v3 Authority Key Identifier:
                keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:69:e8:d5:d5:bf:0a:70:1d:41:70:6d:44:76:0c:bf:52:fe:
         4b:9a:27:ea:73:46:af:6d:1f:1a:f1:57:bc:31:76:72:b5:b8:
         cb:46:71:ca:8d:87:c8:40:e0:9b:12:e3:3a:5a:75:8f:14:a1:
         ca:d8:d1:24:22:d5:aa:8e:88:16:38:17:a0:8f:f0:28:22:02:
         9b:e8:e3:12:f2:a5:10:b8:cc:36:c9:65:7a:15:51:ad:d1:01:
         cd:04:70:12:79:92:d5:24:51:10:9f:9c:2a:80:2d:c7:a3:24:
         ae:2b:e9:42:9d:34:8a:0b:63:9b:11:4b:f7:22:a5:eb:22:6f:
         cb:26:d9:0c:35:ed:4f:3e:5e:17:3b:46:53:16:d0:05:05:5f:
         d3:e4:ba:e5:45:b7:00:98:ba:ce:82:65:3f:b6:23:76:32:0b:
         81:a0:41:66:d7:4a:d3:d5:2e:c2:5c:04:b4:0c:5f:79:15:73:
         8e:32:67:91:e4:11:49:4a:8e:5f:43:18:dd:59:cf:d2:f5:96:
         8b:c5:85:01:de:16:ab:0b:23:ee:a4:50:4e:d2:e2:e0:2d:53:
         82:2f:d0:b7:b8:d9:1b:e6:f7:11:ea:24:b4:19:10:2e:4a:f4:
         96:48:c3:41:df:40:51:6d:28:f3:3e:9f:e2:70:50:a9:02:f2:
         c0:bb:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:09 2026 by rpki-client