Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          GygY2RnoVan8MoJtrEba+G1zLjCG+HlwfhWd/tms+D8=
Subject key identifier:   59:BD:1C:39:DC:2E:8C:F8:CD:DB:D1:49:E5:A6:89:AD:24:F0:41:6F
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019D2771CA36E08194DBA7EF39211D749EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 00:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:01 +0000
Files and hashes:         1: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (hash: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY=)
                          2: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (hash: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=)
                          3: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (hash: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: TyUAi29YEXRNq3BVf01tapU3Le2QAvlVy5BUxdRL+jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:ca:36:e0:81:94:db:a7:ef:39:21:1d:74:9e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Mar 26 00:01:01 2026 GMT
            Not After : Mar 27 00:01:01 2026 GMT
        Subject: CN=59bd1c39dc2e8cf8cddbd149e5a689ad24f0416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:8e:5d:15:22:54:a6:6d:08:64:02:1f:cd:
                    3d:1e:56:37:6a:88:28:6b:af:f0:d0:4b:1a:8a:15:
                    61:43:12:4f:d0:28:b0:18:4d:46:8f:b3:14:57:39:
                    fa:76:a3:66:00:6d:c4:cd:d0:36:9c:b2:82:4e:35:
                    e7:e5:f3:5c:15:90:6a:f7:dc:c7:f1:2f:25:3c:0f:
                    a3:2f:fd:8f:09:92:72:4f:f5:d2:9c:b0:0c:18:5c:
                    9a:51:38:7b:b2:81:7e:8d:d5:b1:5a:0b:a4:0c:f7:
                    81:87:d4:fd:e1:10:e5:63:6f:40:6b:d5:11:af:ef:
                    ea:90:d7:9d:76:a5:78:f3:0c:1d:63:06:66:b1:a2:
                    d5:38:5c:83:94:88:14:75:66:cb:32:a6:92:d3:8b:
                    b8:fb:49:4b:7b:a3:51:5e:d8:fd:c4:44:4f:7b:f8:
                    d3:07:a1:46:3b:75:e3:3d:36:53:9f:9f:85:12:a8:
                    23:3c:3e:f7:23:3f:8a:59:13:14:11:d4:60:f6:b4:
                    fa:8a:d9:cb:b9:92:aa:3f:71:30:fc:c4:11:1b:01:
                    87:cb:ab:a0:15:c4:ee:cb:3d:af:3e:32:e9:7d:96:
                    40:f7:2a:5a:e0:ff:a5:22:d7:1c:38:61:3d:09:38:
                    fa:9a:3c:eb:03:0d:f8:30:be:6e:03:fd:b9:9a:70:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:1C:39:DC:2E:8C:F8:CD:DB:D1:49:E5:A6:89:AD:24:F0:41:6F
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:83:29:ce:65:cf:e0:4e:99:1b:81:62:7c:55:72:92:6e:82:
         5c:c1:ff:17:dd:85:d1:0b:5f:04:08:f1:4b:52:e6:46:bd:80:
         06:0e:8f:5d:a3:bf:72:d4:60:5f:a6:2c:a2:a7:ea:37:4a:a5:
         9b:e8:30:87:1d:8d:da:59:35:3d:2f:b6:58:16:d8:5e:75:51:
         7c:20:53:14:9c:37:80:53:8e:7d:53:84:20:d3:7b:41:7c:ea:
         a3:50:f8:91:66:be:83:73:06:7e:43:91:bf:0b:c5:93:43:96:
         db:90:32:20:ee:f4:2e:22:ec:96:d1:8b:28:74:49:6a:58:ad:
         d6:b3:ae:ec:01:ec:16:63:0c:8a:59:9f:89:e1:06:4e:a4:e9:
         ae:ed:3f:84:80:89:90:26:16:0e:67:a3:1e:86:8b:ca:4b:fb:
         4e:73:11:8e:8b:9e:9e:02:99:93:fa:4f:16:fa:de:2a:54:a3:
         85:f0:99:5e:aa:54:d3:26:4d:2b:4a:90:39:5d:b7:38:58:91:
         44:b9:8d:fd:34:d0:17:c2:3f:6a:6e:c3:30:34:69:b6:81:65:
         86:70:35:15:6b:52:70:b0:ec:a2:ce:1b:7e:83:b2:c5:14:6a:
         36:e2:73:b6:31:cf:c2:4b:2b:9f:7d:34:6a:6c:c7:ac:0d:a7:
         d3:8a:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:09 2026 by rpki-client