Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File:                     QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier:          wx6oqa5DzPSEevBkLdnfVsY0mnpYuzwk6FFhpBSi60M=
Subject key identifier:   69:BC:C8:4B:76:6A:35:98:7F:91:51:36:2C:7E:65:D6:D5:1C:98:B9
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer:       /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial:       019D37899F6F317174515735D455D384ABCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number:          0C27
Signing time:             Sun 29 Mar 2026 03:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:59 +0000
Files and hashes:         1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: wirsKKsBtHiFKD6KQEup04TfuiMgJ28Nc1psXd5TZNM=)
                          2: qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa (hash: J+fyJwGEO1szX1qe5b1pPbWaNW8W/mP2Me/+6swBagg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:9f:6f:31:71:74:51:57:35:d4:55:d3:84:ab:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
        Validity
            Not Before: Mar 29 03:00:59 2026 GMT
            Not After : Mar 30 03:00:59 2026 GMT
        Subject: CN=69bcc84b766a35987f9151362c7e65d6d51c98b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:6e:a2:af:75:8a:63:c8:7a:f6:89:d7:b9:
                    f1:4c:16:e5:a9:df:b1:21:3e:1e:e6:1c:f5:76:67:
                    b4:7b:4b:44:89:63:c6:46:cb:55:7e:05:93:dd:3c:
                    93:c4:e4:57:b4:31:e0:61:6a:16:3b:6d:e9:60:e5:
                    48:b1:52:73:cf:c2:4f:15:e4:59:fb:6b:25:fb:a0:
                    3b:90:21:7b:7f:33:54:d2:35:e1:d9:0d:77:8a:a7:
                    64:ac:ce:a0:cb:55:9b:10:13:09:1e:fa:5f:95:b5:
                    fd:6b:7f:6a:88:5c:ca:bc:a5:f3:b2:1e:8b:e9:fd:
                    b4:4c:c3:34:f7:6f:31:a2:91:c1:99:68:7c:90:e4:
                    e1:06:df:0b:a6:cf:af:76:dc:f6:cf:20:0e:19:59:
                    ab:d8:ae:06:7e:ea:48:58:a5:e3:9d:e7:a6:e7:6d:
                    4a:59:b0:10:2d:62:e1:e8:cb:da:cb:3d:c1:a0:04:
                    3a:2b:88:4d:73:aa:b5:b7:37:7f:10:03:54:82:c9:
                    8d:bf:a5:a1:62:c9:fa:31:db:73:53:4a:18:45:b5:
                    41:ae:19:a4:c9:6e:18:33:aa:9f:17:7e:8f:47:62:
                    da:43:22:12:66:65:85:f0:ae:b4:80:ab:e6:da:49:
                    99:fd:16:3b:88:bf:e2:20:f0:42:73:25:52:fc:84:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:C8:4B:76:6A:35:98:7F:91:51:36:2C:7E:65:D6:D5:1C:98:B9
            X509v3 Authority Key Identifier:
                keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:78:4a:6e:86:98:cc:5d:f8:34:f0:4b:f6:93:9e:7f:15:a6:
         cd:fb:5f:0b:bf:84:f3:1c:88:b7:c6:f8:5b:b9:49:f4:5c:a6:
         8d:fd:c8:f6:be:d3:ae:3e:d4:43:0d:39:73:9b:33:39:22:91:
         b4:6e:e7:b1:fd:41:fb:01:8b:96:c9:61:dd:88:f8:29:1a:0a:
         4e:3b:e7:b4:aa:b9:65:36:b6:63:32:56:53:7d:93:c2:30:ae:
         fb:29:85:c9:bc:6c:1a:d0:a7:3f:87:f1:34:b9:f1:d4:bf:53:
         a0:19:52:cb:95:f0:f2:4a:f7:6e:e4:f3:14:46:d7:a0:d8:9f:
         19:8b:ef:40:89:f2:49:cb:f1:38:a0:33:1e:20:ca:83:14:c6:
         94:25:f3:50:92:e4:fc:c7:39:32:4f:79:1c:3b:33:29:54:ae:
         df:d3:b2:a1:f4:3e:43:5c:b4:89:da:9b:8e:ff:2b:9e:f3:ee:
         80:27:94:fc:dd:40:84:9b:69:65:9b:9c:fe:0c:10:7f:41:d3:
         93:be:b4:ed:f1:a6:ab:4f:75:24:20:22:8e:50:e9:4d:1e:7a:
         57:36:82:d9:1c:a9:61:0c:44:38:77:2e:b3:82:62:b6:47:76:
         d1:aa:ea:70:c2:80:40:47:c6:a7:38:9e:b2:2e:0c:9a:7a:51:
         83:01:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:48 2026 by rpki-client